Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: BnaMg30sKtM05EneubHt9PStnL7Ndc3pc8vrtRbBQjU=
Subject key identifier: 1B:2F:2B:54:5C:94:CF:E4:E9:C5:DC:20:1A:C7:7D:3E:65:07:E7:0F
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 01993537C0CF6CDFD08980F69771D2679689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0D61
Signing time: Wed 10 Sep 2025 20:01:10 +0000
Manifest this update: Wed 10 Sep 2025 20:01:10 +0000
Manifest next update: Thu 11 Sep 2025 20:01:10 +0000
Files and hashes: 1: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (hash: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: rvBr5u3tyQ3oEFV7gFirU9WbOWJKh4+LCDHXxDXG/yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:c0:cf:6c:df:d0:89:80:f6:97:71:d2:67:96:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Sep 10 20:01:10 2025 GMT
Not After : Sep 11 20:01:10 2025 GMT
Subject: CN=1b2f2b545c94cfe4e9c5dc201ac77d3e6507e70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:62:c4:32:89:0a:f9:e0:14:3d:a4:57:ba:
51:7f:1f:5c:0b:ac:91:e1:42:dd:5d:51:f4:30:9c:
e7:cd:88:fa:be:8b:5c:b1:18:25:af:3f:fd:75:53:
25:90:11:fc:bb:45:34:4a:2b:48:2c:b0:50:7c:f5:
42:f2:1a:5c:d4:fc:cc:3c:73:3e:29:75:5b:05:40:
f9:2f:04:cc:cd:31:c6:6f:c1:53:d5:5f:16:07:84:
ce:32:63:f6:8a:2c:1f:4f:c9:3c:a5:fc:82:79:fd:
1e:a4:ce:51:79:2b:0c:b5:ed:5a:39:1d:2c:ee:02:
e5:ae:62:c7:57:08:0b:98:10:6c:5e:94:ab:ca:1d:
1a:38:db:6d:36:66:38:bb:2e:62:95:6a:6b:3c:57:
72:e0:e2:53:b4:55:28:b8:5f:9c:c3:b3:5c:36:ea:
d1:d4:22:87:36:98:b9:d1:fe:a3:2c:9b:98:6f:93:
94:e6:c8:22:dc:5e:c4:9e:4b:46:9b:e1:33:56:8d:
16:15:a9:1e:f8:0c:68:11:a1:2c:45:7e:03:53:f3:
35:89:6c:5c:45:74:10:f0:e1:72:e9:c4:9c:8e:52:
a3:e5:92:f7:57:cf:c2:6e:6d:8d:4d:d4:4d:29:76:
b6:b6:4c:d6:42:9e:07:9a:41:13:5b:57:5d:b1:7b:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:2B:54:5C:94:CF:E4:E9:C5:DC:20:1A:C7:7D:3E:65:07:E7:0F
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d9:b7:26:b1:77:c4:b4:b4:94:c9:16:32:e1:4b:e2:f0:fd:
d0:b6:95:01:05:2d:17:5e:3f:90:4f:53:d9:18:7a:d5:04:43:
8f:5e:98:c3:96:15:1a:99:ba:e4:d6:d1:2b:1b:f6:16:aa:8a:
68:22:32:90:dd:f9:b3:ea:52:96:c1:f1:aa:25:dc:e5:a7:c3:
fb:c9:65:34:36:f2:2d:a5:e7:6f:e9:50:48:7b:27:b5:be:8c:
de:cb:39:a1:6f:5f:d0:d6:70:98:9d:50:48:97:0d:b2:36:60:
5f:f4:75:46:26:92:11:87:5e:ee:be:e6:ed:14:d8:7e:96:51:
29:df:40:00:63:b9:f1:bb:53:14:b0:d4:1c:a3:4b:21:c4:94:
23:e2:6e:49:65:89:53:ce:f4:b7:00:74:78:6e:56:6f:64:d0:
51:30:ca:62:42:aa:93:65:31:6c:50:18:2a:20:68:50:c5:f6:
41:41:4c:61:18:9c:f4:a1:21:de:f7:83:a3:c7:89:14:e2:d9:
d0:d3:9d:39:23:c6:6f:38:cc:28:15:82:04:02:83:d5:1e:cb:
01:f6:5f:5b:46:7f:d6:9a:59:da:38:06:23:12:c8:05:98:f7:
3e:4f:07:d8:d4:7a:70:b5:79:aa:ab:88:ed:cb:80:32:23:ed:
ae:2a:bf:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1N8DPbN/QiYD2l3HSZ5aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTY5OWE1YmM2NDg3YmQyZjE3NDlkMTMzZmNhMmUzN2Zk
NGRhODgwHhcNMjUwOTEwMjAwMTEwWhcNMjUwOTExMjAwMTEwWjAzMTEwLwYDVQQD
EygxYjJmMmI1NDVjOTRjZmU0ZTljNWRjMjAxYWM3N2QzZTY1MDdlNzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyatixDKJCvngFD2kV7pRfx9cC6yR
4ULdXVH0MJznzYj6votcsRglrz/9dVMlkBH8u0U0SitILLBQfPVC8hpc1PzMPHM+
KXVbBUD5LwTMzTHGb8FT1V8WB4TOMmP2iiwfT8k8pfyCef0epM5ReSsMte1aOR0s
7gLlrmLHVwgLmBBsXpSryh0aONttNmY4uy5ilWprPFdy4OJTtFUouF+cw7NcNurR
1CKHNpi50f6jLJuYb5OU5sgi3F7EnktGm+EzVo0WFake+AxoEaEsRX4DU/M1iWxc
RXQQ8OFy6cScjlKj5ZL3V8/Cbm2NTdRNKXa2tkzWQp4HmkETW1ddsXs+LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsvK1RclM/k6cXcIBrHfT5lB+cPMB8GA1UdIwQY
MBaAFKgWmaW8ZIe9LxdJ0TP8ouN/1NqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTkt
Nzg3YzA2MzJjZmVhLzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTktNzg3YzA2MzJjZmVh
LzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtm3JrF3
xLS0lMkWMuFL4vD90LaVAQUtF14/kE9T2Rh61QRDj16Yw5YVGpm65NbRKxv2FqqK
aCIykN35s+pSlsHxqiXc5afD+8llNDbyLaXnb+lQSHsntb6M3ss5oW9f0NZwmJ1Q
SJcNsjZgX/R1RiaSEYde7r7m7RTYfpZRKd9AAGO58btTFLDUHKNLIcSUI+JuSWWJ
U870twB0eG5Wb2TQUTDKYkKqk2UxbFAYKiBoUMX2QUFMYRic9KEh3veDo8eJFOLZ
0NOdOSPGbzjMKBWCBAKD1R7LAfZfW0Z/1ppZ2jgGIxLIBZj3Pk8H2NR6cLV5qquI
7cuAMiPtriq/+g==
-----END CERTIFICATE-----
Generated at Thu Sep 11 04:29:28 2025 by rpki-client