Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: P+afT3iXPANkQHDoQWzS6TJwtQMM7G1gvcAuocQxWSY=
Subject key identifier: 27:FE:34:DA:66:92:F9:A9:B3:E4:A6:80:AA:2B:CF:8B:0E:44:1D:2C
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 01992331584653DA34AC04261CBFBEDA0F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 1605
Signing time: Sun 07 Sep 2025 08:01:00 +0000
Manifest this update: Sun 07 Sep 2025 08:01:00 +0000
Manifest next update: Mon 08 Sep 2025 08:01:00 +0000
Files and hashes: 1: B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa (hash: P+0tfOZ2RaLt/nUPuFjZ/CAtJcAtybwXEXHcIsSIUm4=)
2: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: vvufEH5pzQStqPr3wwj9aAIXpMdCb4E3WA3p4D10Ggk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:58:46:53:da:34:ac:04:26:1c:bf:be:da:0f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Sep 7 08:01:00 2025 GMT
Not After : Sep 8 08:01:00 2025 GMT
Subject: CN=27fe34da6692f9a9b3e4a680aa2bcf8b0e441d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:43:ba:a6:b0:fb:51:d0:d8:f7:fc:70:a4:
7d:b6:82:38:db:90:d1:17:9b:5d:06:db:4e:da:4a:
58:f7:cb:2a:50:ed:c4:a0:38:28:03:d6:46:4a:d8:
0c:67:17:db:fb:5f:11:46:8f:3a:e2:49:a0:97:11:
5b:1c:9c:b8:bf:b0:79:a0:0e:df:50:3d:04:52:9e:
f1:ca:9f:85:13:9e:3e:bb:6d:d4:38:05:31:c7:ac:
03:d4:fa:78:c7:f4:19:a7:94:a5:71:50:a0:7e:aa:
53:3e:13:5f:67:57:bb:68:80:44:8f:33:67:c8:42:
bd:f1:d8:7d:66:90:71:0f:ef:f8:c2:7c:0e:50:4f:
4c:62:35:ef:f1:0b:40:6e:40:1f:f1:35:5a:94:62:
38:56:67:a2:46:41:a8:75:76:2f:1d:72:89:c6:9f:
4e:b9:68:98:50:a2:e9:e4:21:0b:93:0b:64:0b:d5:
46:66:0a:93:ff:79:2e:c0:27:a9:bd:91:be:c7:2d:
6c:82:d2:d1:1a:69:f2:f1:a7:6f:c5:1b:2f:bf:7b:
f5:0e:13:36:8c:30:a3:ba:a9:d1:dd:bd:1d:8f:21:
bc:9b:67:ce:a2:4f:c7:58:8a:b3:3f:ca:2b:b6:cf:
cd:45:90:76:03:0e:45:67:45:b6:a1:08:c4:3f:72:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FE:34:DA:66:92:F9:A9:B3:E4:A6:80:AA:2B:CF:8B:0E:44:1D:2C
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:79:30:7e:c2:0a:6a:d1:d1:aa:ed:74:97:ac:a3:33:42:6e:
5b:e8:bc:53:ed:cc:d1:0b:6c:88:6d:07:e2:0c:64:84:06:b9:
f3:5a:bb:4d:ab:d3:66:dd:04:e5:ff:db:51:f6:ba:9f:88:8d:
66:52:c3:63:28:81:d1:a5:0d:ff:e1:e3:f7:02:d5:9e:82:52:
ec:bf:34:7a:ad:7c:d9:5e:7f:75:ab:fa:ff:9e:69:88:8f:ce:
b4:62:2a:f0:c2:df:b8:57:5d:a7:84:af:4b:3f:e5:80:d9:a5:
63:d2:af:74:be:ce:24:23:f0:01:ef:26:7d:59:68:bd:f5:1b:
fd:d2:f2:44:9f:1b:80:14:4e:27:2c:5c:63:a5:88:71:e5:87:
53:4f:20:44:5f:8c:cb:25:27:dc:28:3e:f2:11:ac:81:43:6d:
41:bd:76:86:30:da:9d:51:49:4f:d9:48:48:c3:c9:c3:ad:55:
ed:b7:53:cf:d6:5b:f1:e5:54:95:93:a8:58:f2:a1:9e:72:45:
b2:bc:87:56:e8:d8:2f:e7:06:f6:28:66:38:20:32:db:e1:bd:
1b:7e:75:7d:2b:17:82:f0:2c:2c:2d:01:ae:68:c2:f4:80:15:
20:02:40:a0:af:83:68:f3:8b:da:19:9b:f5:e7:6f:51:c6:a6:
d7:e0:e3:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMVhGU9o0rAQmHL++2g8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGUwOTQ5ZGY1OTMwZjZiNzllZmNiZDljYmExNzRjYTIx
M2Y1NjkwHhcNMjUwOTA3MDgwMTAwWhcNMjUwOTA4MDgwMTAwWjAzMTEwLwYDVQQD
EygyN2ZlMzRkYTY2OTJmOWE5YjNlNGE2ODBhYTJiY2Y4YjBlNDQxZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1JDuqaw+1HQ2Pf8cKR9toI425DR
F5tdBttO2kpY98sqUO3EoDgoA9ZGStgMZxfb+18RRo864kmglxFbHJy4v7B5oA7f
UD0EUp7xyp+FE54+u23UOAUxx6wD1Pp4x/QZp5SlcVCgfqpTPhNfZ1e7aIBEjzNn
yEK98dh9ZpBxD+/4wnwOUE9MYjXv8QtAbkAf8TValGI4VmeiRkGodXYvHXKJxp9O
uWiYUKLp5CELkwtkC9VGZgqT/3kuwCepvZG+xy1sgtLRGmny8advxRsvv3v1DhM2
jDCjuqnR3b0djyG8m2fOok/HWIqzP8orts/NRZB2Aw5FZ0W2oQjEP3KTkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf+NNpmkvmps+SmgKorz4sORB0sMB8GA1UdIwQY
MBaAFEMOCUnfWTD2t578vZy6F0yiE/VpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYt
MDY4NjE2MGE3ZTY4LzEvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC81MmE5N2YtMmFkNi00MDU5LTg2NDYtMDY4NjE2MGE3ZTY4
LzEvUXc0SlNkOVpNUGEzbnZ5OW5Mb1hUS0lUOVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXkwfsIK
atHRqu10l6yjM0JuW+i8U+3M0QtsiG0H4gxkhAa581q7TavTZt0E5f/bUfa6n4iN
ZlLDYyiB0aUN/+Hj9wLVnoJS7L80eq182V5/dav6/55piI/OtGIq8MLfuFddp4Sv
Sz/lgNmlY9KvdL7OJCPwAe8mfVlovfUb/dLyRJ8bgBROJyxcY6WIceWHU08gRF+M
yyUn3Cg+8hGsgUNtQb12hjDanVFJT9lISMPJw61V7bdTz9Zb8eVUlZOoWPKhnnJF
sryHVujYL+cG9ihmOCAy2+G9G351fSsXgvAsLC0BrmjC9IAVIAJAoK+DaPOL2hmb
9edvUcam1+DjiQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:46 2025 by rpki-client