Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier: OPjhmyl5fQuwqEmTWf6eXWYOxIZiQL2AD9xksIqsu4M=
Subject key identifier: 96:1B:1B:00:57:D2:4E:BA:AD:F9:76:3F:DA:CC:1F:F0:90:DB:FC:D6
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial: 019922C2FEF461F31059C90BE20F8F3369BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number: 09F5
Signing time: Sun 07 Sep 2025 06:00:28 +0000
Manifest this update: Sun 07 Sep 2025 06:00:28 +0000
Manifest next update: Mon 08 Sep 2025 06:00:28 +0000
Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=)
2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: z5gs955z63gZLwnRIV2RXcrYbem58HrHy2agkN0xtzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:fe:f4:61:f3:10:59:c9:0b:e2:0f:8f:33:69:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Validity
Not Before: Sep 7 06:00:28 2025 GMT
Not After : Sep 8 06:00:28 2025 GMT
Subject: CN=961b1b0057d24ebaadf9763fdacc1ff090dbfcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4f:0d:42:b7:ec:ad:1f:48:fd:0f:3a:ee:46:
81:b2:17:b9:f0:c4:ff:c2:69:4d:fb:61:46:55:46:
b6:c6:4c:da:87:1c:14:17:ea:7f:e8:64:b9:45:4c:
77:68:bd:96:a7:24:7d:56:43:1a:e8:1c:56:2e:c9:
83:4e:91:de:d9:71:64:cf:92:08:81:ad:b1:fc:68:
e9:d7:bb:e9:51:bb:ef:db:66:5a:eb:ac:b4:e0:4f:
8a:6f:cd:e8:1a:84:96:3f:7c:05:02:b2:95:ce:0c:
6d:3e:a6:4a:6e:53:31:2d:cc:c4:c4:f3:b7:c4:6e:
97:e2:cb:e8:15:07:b1:62:00:94:0c:63:bc:7e:09:
4b:6d:24:ee:cb:8f:47:70:82:ef:f9:53:a2:c5:36:
7a:8f:a3:5d:c5:b5:61:9c:69:2e:2c:9b:16:68:08:
10:57:06:81:24:a4:d2:7b:97:af:9c:ea:01:57:05:
71:3f:fc:e4:6f:94:94:2d:a0:c7:46:47:1d:bb:85:
3b:76:aa:46:4f:bd:ee:5d:cd:e1:45:e6:ca:84:60:
44:20:0e:a4:29:e2:f2:f4:56:88:00:af:1f:58:b7:
7d:9e:ab:67:94:f3:62:a2:3a:e6:f7:ca:ad:74:21:
ab:e5:01:79:03:a2:80:69:b0:d5:d4:c2:23:f8:29:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1B:1B:00:57:D2:4E:BA:AD:F9:76:3F:DA:CC:1F:F0:90:DB:FC:D6
X509v3 Authority Key Identifier:
keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:de:14:40:d3:bc:23:6e:47:74:e3:b5:5d:8c:8c:e3:fd:75:
24:3d:f6:bb:00:a5:97:53:ee:27:9c:29:1c:4a:cc:82:52:9b:
4c:9c:00:96:15:a5:5c:87:d4:51:a2:b4:a3:87:b0:bf:77:c9:
80:53:53:63:c8:bd:ed:68:09:7a:da:0b:13:11:dc:d9:0e:fc:
b2:fd:de:05:33:1d:96:1e:ff:2f:07:11:21:00:eb:6c:44:98:
29:09:de:ac:0e:3c:c5:76:89:79:ee:7d:d3:3d:cf:09:af:94:
03:83:17:3c:29:3b:0c:6b:81:60:9b:c3:3d:66:fd:d8:14:e5:
4e:ae:0b:04:60:16:72:a9:bf:06:f5:8b:0a:26:2f:c3:03:3f:
0c:35:45:fe:1a:c3:87:73:88:64:a8:76:a7:b3:22:ec:f9:5e:
2d:44:9c:d6:17:fe:22:2d:83:df:44:31:4a:e1:5f:e2:ad:ad:
4e:81:8a:1f:59:d4:49:d2:27:26:73:fc:e6:0d:ac:77:b3:08:
88:8d:af:6e:16:ba:9e:5a:ff:79:e8:03:b0:d3:b6:da:15:a1:
d0:d8:2d:78:0c:a3:ed:d4:e0:0a:eb:39:a1:ab:32:25:ae:87:
6e:85:80:3f:eb:ed:f2:df:7b:de:76:cd:b1:38:96:e2:bb:f2:
1c:7d:7f:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwv70YfMQWckL4g+PM2m7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZjU4NzU3MWMwYzY5ODQ1OGMzODViMTVkNjBjN2YwOGM3
MGI2ZmUwHhcNMjUwOTA3MDYwMDI4WhcNMjUwOTA4MDYwMDI4WjAzMTEwLwYDVQQD
Eyg5NjFiMWIwMDU3ZDI0ZWJhYWRmOTc2M2ZkYWNjMWZmMDkwZGJmY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA208NQrfsrR9I/Q867kaBshe58MT/
wmlN+2FGVUa2xkzahxwUF+p/6GS5RUx3aL2WpyR9VkMa6BxWLsmDTpHe2XFkz5II
ga2x/Gjp17vpUbvv22Za66y04E+Kb83oGoSWP3wFArKVzgxtPqZKblMxLczExPO3
xG6X4svoFQexYgCUDGO8fglLbSTuy49HcILv+VOixTZ6j6NdxbVhnGkuLJsWaAgQ
VwaBJKTSe5evnOoBVwVxP/zkb5SULaDHRkcdu4U7dqpGT73uXc3hRebKhGBEIA6k
KeLy9FaIAK8fWLd9nqtnlPNiojrm98qtdCGr5QF5A6KAabDV1MIj+CmGXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYbGwBX0k66rfl2P9rMH/CQ2/zWMB8GA1UdIwQY
MBaAFKv1h1ccDGmEWMOFsV1gx/CMcLb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQt
NzgyZmU3MDkyMDEwLzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85ZDhiODItNDdhZS00ZTEyLTlhNGQtNzgyZmU3MDkyMDEw
LzEvcV9XSFZ4d01hWVJZdzRXeFhXREg4SXh3dHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtd4UQNO8
I25HdOO1XYyM4/11JD32uwCll1PuJ5wpHErMglKbTJwAlhWlXIfUUaK0o4ewv3fJ
gFNTY8i97WgJetoLExHc2Q78sv3eBTMdlh7/LwcRIQDrbESYKQnerA48xXaJee59
0z3PCa+UA4MXPCk7DGuBYJvDPWb92BTlTq4LBGAWcqm/BvWLCiYvwwM/DDVF/hrD
h3OIZKh2p7Mi7PleLUSc1hf+Ii2D30QxSuFf4q2tToGKH1nUSdInJnP85g2sd7MI
iI2vbha6nlr/eegDsNO22hWh0NgteAyj7dTgCus5oasyJa6HboWAP+vt8t973nbN
sTiW4rvyHH1/BQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:27 2025 by rpki-client