Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: 9ErjyJc04h6CnVxecDQsDVpebf9KCuUnctkmzOZE9Go=
Subject key identifier: F9:18:D2:95:E1:AC:0C:62:ED:5B:A5:3F:2F:93:DC:7B:74:E1:FC:0D
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 019922C30B2E46C4153A591F1C70E7796E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 1137
Signing time: Sun 07 Sep 2025 06:00:31 +0000
Manifest this update: Sun 07 Sep 2025 06:00:31 +0000
Manifest next update: Mon 08 Sep 2025 06:00:31 +0000
Files and hashes: 1: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
2: jGJqFQVdzPNIuq__x_RJveRfPgI.roa (hash: l/kSncaCyGC+QqprUZGRI2OdInXO3OkPgy+W2EUBUIg=)
3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: KP0gv0j43x+oUpN9qPmpFKPi2LnJLxQIpsD0au2zr1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:0b:2e:46:c4:15:3a:59:1f:1c:70:e7:79:6e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Sep 7 06:00:31 2025 GMT
Not After : Sep 8 06:00:31 2025 GMT
Subject: CN=f918d295e1ac0c62ed5ba53f2f93dc7b74e1fc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:2c:89:01:e1:9a:b9:71:76:77:fa:2a:61:
71:a1:e4:4d:99:99:59:7c:75:3c:60:d2:e8:a0:13:
04:f0:0b:ab:c1:c5:f1:19:e0:b1:3a:01:b3:db:60:
65:d2:d8:b1:3e:a2:8a:9b:cf:2a:5c:5c:4a:6c:62:
ba:11:88:51:e0:cd:83:b8:e1:17:e5:03:14:4f:70:
ca:fe:9b:8c:f3:d2:99:e4:a6:a3:df:54:d9:e4:05:
ca:6c:f5:94:eb:2f:6c:9d:fe:38:eb:91:16:be:d0:
80:fb:37:04:96:a4:e7:0c:7e:93:88:b7:2a:60:7f:
9d:be:bd:a3:6f:84:b0:a4:db:6f:95:9a:30:8c:47:
c5:12:55:03:63:cb:0b:f4:63:a3:5c:fc:fa:34:f2:
f0:2a:ae:85:d0:25:98:43:3c:e7:d3:b7:e0:4f:bd:
bb:a7:80:6e:88:12:e8:de:47:df:9f:54:a2:59:14:
2f:38:6f:e5:51:dd:ed:fe:15:28:fe:62:98:d2:89:
9b:90:09:81:ce:17:8c:34:c0:cd:ae:b7:ec:a3:a1:
c1:73:e9:62:94:9c:81:75:d8:18:4f:c0:79:cd:28:
35:4d:08:ac:91:74:37:8f:d5:d2:58:a6:d5:1a:87:
58:75:54:37:c7:e3:99:ac:55:a6:5a:f9:d0:71:f9:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:D2:95:E1:AC:0C:62:ED:5B:A5:3F:2F:93:DC:7B:74:E1:FC:0D
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:01:25:e4:01:81:63:ed:2f:0d:a8:32:b6:7d:73:29:89:1f:
09:20:c2:1f:c2:c4:94:34:2b:c9:fa:47:78:20:3b:18:45:6e:
0f:dc:0d:d7:1e:22:a1:be:66:f7:56:38:a9:1c:cd:b9:79:84:
2b:0c:a5:c3:9e:d4:af:75:a2:24:f1:9b:95:c7:6b:65:2a:c6:
c8:ad:f7:e2:13:5b:ef:55:29:4c:a9:38:44:81:06:69:b8:a9:
cf:9f:92:00:e1:87:d7:31:17:d3:e9:f4:f5:9f:24:24:75:58:
7b:be:8b:01:52:39:44:7f:99:56:d7:5b:13:33:65:8b:d6:33:
b0:c3:e1:e9:e5:e5:6f:be:c4:94:09:6c:ea:4b:ed:1c:a8:c6:
53:77:d2:f4:b6:a2:3e:37:64:01:b0:2a:ae:4f:1f:3b:b3:b6:
64:92:53:ce:9d:7f:80:4f:e6:60:5e:70:9c:1d:8d:4b:e8:11:
cd:1b:82:de:4f:7c:d6:d3:ba:45:83:28:08:cc:7e:c2:8d:b8:
7d:69:d0:71:43:83:79:b5:24:a4:ed:57:e3:73:d2:f3:09:bf:
94:3e:80:04:97:e6:f1:fc:c8:c5:ef:2e:11:51:0f:30:b8:54:
9f:f2:93:91:35:3b:93:87:a3:18:f6:14:ba:6d:6f:6c:66:76:
c3:b6:2e:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiwwsuRsQVOlkfHHDneW40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzA5MjFkMjhjNzhlZGU4MTg0MmY3MTJlNmNmNzJiZGU1
YTYwODAwHhcNMjUwOTA3MDYwMDMxWhcNMjUwOTA4MDYwMDMxWjAzMTEwLwYDVQQD
EyhmOTE4ZDI5NWUxYWMwYzYyZWQ1YmE1M2YyZjkzZGM3Yjc0ZTFmYzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22gsiQHhmrlxdnf6KmFxoeRNmZlZ
fHU8YNLooBME8AurwcXxGeCxOgGz22Bl0tixPqKKm88qXFxKbGK6EYhR4M2DuOEX
5QMUT3DK/puM89KZ5Kaj31TZ5AXKbPWU6y9snf4465EWvtCA+zcElqTnDH6TiLcq
YH+dvr2jb4SwpNtvlZowjEfFElUDY8sL9GOjXPz6NPLwKq6F0CWYQzzn07fgT727
p4BuiBLo3kffn1SiWRQvOG/lUd3t/hUo/mKY0ombkAmBzheMNMDNrrfso6HBc+li
lJyBddgYT8B5zSg1TQiskXQ3j9XSWKbVGodYdVQ3x+OZrFWmWvnQcfkHeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkY0pXhrAxi7VulPy+T3Ht04fwNMB8GA1UdIwQY
MBaAFKswkh0ox47egYQvcS5s9yveWmCAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2Et
MzU0Mzk5NzI0YjFlLzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zY2Q3ZmYtMjBkMi00Y2VjLWFlY2EtMzU0Mzk5NzI0YjFl
LzEvcXpDU0hTakhqdDZCaEM5eExtejNLOTVhWUlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAEl5AGB
Y+0vDagytn1zKYkfCSDCH8LElDQryfpHeCA7GEVuD9wN1x4iob5m91Y4qRzNuXmE
Kwylw57Ur3WiJPGblcdrZSrGyK334hNb71UpTKk4RIEGabipz5+SAOGH1zEX0+n0
9Z8kJHVYe76LAVI5RH+ZVtdbEzNli9YzsMPh6eXlb77ElAls6kvtHKjGU3fS9Lai
PjdkAbAqrk8fO7O2ZJJTzp1/gE/mYF5wnB2NS+gRzRuC3k981tO6RYMoCMx+wo24
fWnQcUODebUkpO1X43PS8wm/lD6ABJfm8fzIxe8uEVEPMLhUn/KTkTU7k4ejGPYU
um1vbGZ2w7YuKw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:27 2025 by rpki-client