Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: FkYRmvNJTT8Vhk0RxgCHOyqwu8eFuwJaFRw/ieSyG9Q=
Subject key identifier: 10:BD:C7:FC:2A:55:6D:30:97:09:15:BB:A6:6E:04:5E:7A:CA:F2:13
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019922C351A9E36B71599DD410B75BD4DD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1615
Signing time: Sun 07 Sep 2025 06:00:49 +0000
Manifest this update: Sun 07 Sep 2025 06:00:49 +0000
Manifest next update: Mon 08 Sep 2025 06:00:49 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: eoksQUsrEZqHAMx5/XnKiThlvcBtNgxFSZybVzJV3UI=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:51:a9:e3:6b:71:59:9d:d4:10:b7:5b:d4:dd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Sep 7 06:00:49 2025 GMT
Not After : Sep 8 06:00:49 2025 GMT
Subject: CN=10bdc7fc2a556d30970915bba66e045e7acaf213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:dc:2f:d0:dc:ad:21:3a:83:af:5f:b8:6b:
f4:c1:10:f6:a4:21:b3:7f:18:84:92:c7:a4:68:7e:
66:0c:01:fa:0a:3f:84:35:86:94:9c:60:f9:66:e1:
f5:b3:e1:0e:84:19:ab:96:e1:66:b7:13:f3:71:65:
fa:f8:bd:4c:9f:66:80:08:5b:8e:f3:ab:20:17:4b:
fb:ed:2b:b2:87:19:82:39:4f:7d:c2:65:21:b0:7e:
2f:e5:33:5a:06:41:ac:49:96:e9:e6:cb:58:07:72:
a2:f5:e0:d8:16:b6:81:8b:5e:10:95:ea:0f:42:98:
2e:98:64:39:19:f9:24:93:8b:37:65:e6:5a:3b:c3:
fd:7b:7e:da:7d:9b:45:46:9c:af:0f:63:b8:7b:d7:
ab:98:db:57:47:6e:e1:cf:fc:2d:2a:c9:5e:1e:17:
05:d6:cc:17:d4:27:e5:5d:8a:0a:ee:c3:b5:3d:74:
81:ce:42:e1:77:08:03:ef:15:c6:00:f0:80:10:ec:
8c:65:5c:58:3a:70:4a:b8:af:c3:da:86:2f:8a:72:
fe:61:42:a1:a6:30:13:65:3d:8f:10:f7:5b:a7:db:
df:cd:38:0f:31:6a:e9:e3:cb:be:be:d6:a4:62:fa:
47:87:2e:f2:ae:25:d2:10:9e:56:0e:ca:b2:b6:52:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BD:C7:FC:2A:55:6D:30:97:09:15:BB:A6:6E:04:5E:7A:CA:F2:13
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a6:4f:e8:0d:9f:bf:f2:69:81:db:ad:dd:70:1f:56:32:45:
56:06:1a:43:33:40:22:cc:32:0f:dc:6d:97:50:db:6e:8b:01:
48:25:49:3d:20:b7:d2:7f:17:d3:f8:91:60:33:1a:27:05:c0:
20:e7:ff:5f:ff:3f:2a:6b:0f:53:70:c0:27:ca:a1:cd:24:cd:
d9:24:0c:84:05:df:86:fc:74:df:1c:7e:e5:4a:84:57:f8:f5:
06:0d:aa:45:4c:c7:dc:93:48:b3:eb:17:e8:42:11:cc:21:42:
a2:14:48:e2:5f:85:6f:1d:44:52:8c:94:f6:55:3e:01:a6:9c:
8b:98:3e:55:4c:07:2f:33:aa:01:1a:06:ae:de:12:d8:cb:b4:
5b:4a:e8:d6:90:9a:a1:33:1e:19:cc:3a:ae:b3:fd:7e:61:36:
c3:8d:6c:69:4a:bd:6b:5b:d7:ff:19:bf:25:8b:6a:35:1a:74:
96:7a:69:03:5b:5a:e6:2a:a1:3d:a4:0c:47:62:e8:04:de:8a:
4a:c6:a0:53:ce:26:11:79:f3:d3:27:5b:04:33:89:81:83:88:
6f:c8:25:e9:e9:10:49:37:43:24:c2:2b:dc:fa:29:d6:b9:56:
f1:a4:5a:b8:60:95:8e:21:de:fd:13:13:38:7a:df:08:1e:25:
ac:25:4f:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw1Gp42txWZ3UELdb1N2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWYxMDg4ODJhOWUyZDcyNzgyZGI2NTI3ZGE0ZDlhZGVl
YjE5Y2MwHhcNMjUwOTA3MDYwMDQ5WhcNMjUwOTA4MDYwMDQ5WjAzMTEwLwYDVQQD
EygxMGJkYzdmYzJhNTU2ZDMwOTcwOTE1YmJhNjZlMDQ1ZTdhY2FmMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YPcL9DcrSE6g69fuGv0wRD2pCGz
fxiEksekaH5mDAH6Cj+ENYaUnGD5ZuH1s+EOhBmrluFmtxPzcWX6+L1Mn2aACFuO
86sgF0v77SuyhxmCOU99wmUhsH4v5TNaBkGsSZbp5stYB3Ki9eDYFraBi14QleoP
QpgumGQ5Gfkkk4s3ZeZaO8P9e37afZtFRpyvD2O4e9ermNtXR27hz/wtKsleHhcF
1swX1CflXYoK7sO1PXSBzkLhdwgD7xXGAPCAEOyMZVxYOnBKuK/D2oYvinL+YUKh
pjATZT2PEPdbp9vfzTgPMWrp48u+vtakYvpHhy7yriXSEJ5WDsqytlI7SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC9x/wqVW0wlwkVu6ZuBF56yvITMB8GA1UdIwQY
MBaAFEIfEIiCqeLXJ4LbZSfaTZre6xnMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUt
MGEwNjlkZWMxMDBhLzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMTkyMmEtZGQ3OS00ZjU2LTgzYmUtMGEwNjlkZWMxMDBh
LzEvUWg4UWlJS3A0dGNuZ3R0bEo5cE5tdDdyR2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaZP6A2f
v/Jpgdut3XAfVjJFVgYaQzNAIswyD9xtl1DbbosBSCVJPSC30n8X0/iRYDMaJwXA
IOf/X/8/KmsPU3DAJ8qhzSTN2SQMhAXfhvx03xx+5UqEV/j1Bg2qRUzH3JNIs+sX
6EIRzCFCohRI4l+Fbx1EUoyU9lU+Aaaci5g+VUwHLzOqARoGrt4S2Mu0W0ro1pCa
oTMeGcw6rrP9fmE2w41saUq9a1vX/xm/JYtqNRp0lnppA1ta5iqhPaQMR2LoBN6K
SsagU84mEXnz0ydbBDOJgYOIb8gl6ekQSTdDJMIr3Pop1rlW8aRauGCVjiHe/RMT
OHrfCB4lrCVP8A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:29 2025 by rpki-client