Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
File: Q9_AZs580-OCV0poZnlzsLRo3zw.mft (raw, json)
Hash identifier: l/suMdl9uKJzcf9uN6oWY3uwe2I2CibLKicgBqZ1Pn8=
Subject key identifier: 16:35:98:3D:15:7D:18:15:13:98:62:CF:49:2D:AE:30:B0:35:F2:E2
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019852689268A74DA781B42875CF8BE92BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
Manifest number: 158E
Signing time: Mon 28 Jul 2025 19:00:41 +0000
Manifest this update: Mon 28 Jul 2025 19:00:41 +0000
Manifest next update: Tue 29 Jul 2025 19:00:41 +0000
Files and hashes: 1: Q2tZHxcnTfsijpne_PaEOT5dOKg.roa (hash: FVNO2p4hWZxlSs3+Rn7ouc28IBioq9Skdi74miEeHBs=)
2: Q9_AZs580-OCV0poZnlzsLRo3zw.crl (hash: c7W5/038+pKvyHj6tZY7G0f/6bx3V7TY9l7UqRQAfTY=)
3: YEwBGJwVFMVG4n9Uv5C8kaKbP_Y.roa (hash: 71JCVJhZ0PYDS413IRMGeXcUCfZfAR4EomHNNgUpftE=)
4: obC6Nt8k6sToBFUPijQUE-JEfbw.roa (hash: yOvP0SEgsV1LHmbEstQePJyjtcgM5eUQYScQpZCvC+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:92:68:a7:4d:a7:81:b4:28:75:cf:8b:e9:2b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jul 28 19:00:41 2025 GMT
Not After : Jul 29 19:00:41 2025 GMT
Subject: CN=1635983d157d1815139862cf492dae30b035f2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:8d:cf:9a:e4:d4:a5:a4:62:0f:1c:46:84:
a7:7d:2e:f2:47:13:4e:06:39:f0:7a:9b:f8:4f:df:
5f:e1:b7:bc:59:31:dd:87:fb:ee:0e:9d:04:ae:35:
fc:59:dd:78:69:fc:21:77:cc:ea:6e:78:92:e4:2c:
31:6f:ae:2e:b9:99:43:0a:64:f5:b2:84:dc:5f:6e:
fa:0d:11:c8:ff:04:4f:9d:07:f6:66:62:fa:9f:f3:
6c:b3:d5:98:88:91:af:2f:b8:f6:58:6a:03:fb:9c:
c9:57:14:da:bb:9d:a2:0b:a8:9c:77:e3:52:e3:07:
6d:f1:e2:f8:ad:c2:db:97:ef:27:44:64:16:cc:a4:
08:3e:93:a6:09:55:63:14:f5:03:e5:72:14:63:5b:
54:b2:8a:03:9b:65:73:fa:f1:89:5a:60:06:aa:64:
d3:d8:4d:0e:0b:ed:df:bc:ea:4b:3f:8c:4a:bd:e4:
cb:ff:a8:ed:40:b8:ab:ac:4a:37:81:ea:b0:9b:89:
83:8a:9b:da:0f:19:6c:a4:f7:98:8a:d8:5a:53:11:
c8:96:94:ea:0e:f1:d5:e4:6c:9f:46:ab:da:10:3c:
e5:19:71:af:c1:c4:13:c7:c3:90:0b:30:67:6d:e7:
4b:69:01:36:4b:42:f7:c6:b8:4d:f7:26:b4:93:90:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:98:3D:15:7D:18:15:13:98:62:CF:49:2D:AE:30:B0:35:F2:E2
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cc:01:5c:1f:52:22:2e:1e:85:14:38:31:83:e9:ad:e5:cc:
9b:ea:47:d6:21:49:7c:be:8e:71:20:d2:f6:a7:88:98:7d:3e:
be:8a:bb:4f:e5:59:65:04:3c:8e:68:d4:75:58:f6:59:c1:7b:
ff:39:48:0e:22:3d:66:ce:a6:e1:5b:b0:3d:d2:55:5d:07:98:
33:ec:8e:c1:6d:0e:9b:fb:ee:63:00:92:00:12:2f:1f:05:b3:
c2:03:59:fe:2f:5b:2a:42:c9:31:a1:e7:1f:06:23:9a:29:5d:
72:51:11:c2:0f:f9:08:8f:08:bb:df:56:d0:e5:5d:69:88:f3:
78:39:e0:a5:5c:77:87:b0:d8:fb:9d:ff:77:9f:2d:6d:0b:9b:
c6:c8:d9:31:dd:1e:bf:9f:60:2f:e9:77:b2:5e:45:68:7f:b5:
9c:b7:bb:53:33:a3:7b:87:a5:6a:92:05:dd:19:3c:e3:3c:af:
35:79:ea:9a:ce:fa:6c:29:66:96:2a:74:a2:0f:85:8f:fc:5c:
fd:fa:44:e6:75:89:f5:a1:cd:de:d3:f7:5f:cc:11:0e:d1:a7:
80:69:78:7a:3d:42:f1:21:33:0b:70:1a:de:40:89:3d:2b:8c:
cd:55:b3:16:74:e0:95:9d:0b:08:03:2e:d8:1e:bb:97:bc:01:
a8:68:53:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSaJJop02ngbQodc+L6SuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZGZjMDY2Y2U3Y2QzZTM4MjU3NGE2ODY2Nzk3M2IwYjQ2
OGRmM2MwHhcNMjUwNzI4MTkwMDQxWhcNMjUwNzI5MTkwMDQxWjAzMTEwLwYDVQQD
EygxNjM1OTgzZDE1N2QxODE1MTM5ODYyY2Y0OTJkYWUzMGIwMzVmMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua6Nz5rk1KWkYg8cRoSnfS7yRxNO
Bjnwepv4T99f4be8WTHdh/vuDp0ErjX8Wd14afwhd8zqbniS5Cwxb64uuZlDCmT1
soTcX276DRHI/wRPnQf2ZmL6n/Nss9WYiJGvL7j2WGoD+5zJVxTau52iC6icd+NS
4wdt8eL4rcLbl+8nRGQWzKQIPpOmCVVjFPUD5XIUY1tUsooDm2Vz+vGJWmAGqmTT
2E0OC+3fvOpLP4xKveTL/6jtQLirrEo3geqwm4mDipvaDxlspPeYithaUxHIlpTq
DvHV5GyfRqvaEDzlGXGvwcQTx8OQCzBnbedLaQE2S0L3xrhN9ya0k5CMOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY1mD0VfRgVE5hiz0ktrjCwNfLiMB8GA1UdIwQY
MBaAFEPfwGbOfNPjgldKaGZ5c7C0aN88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUt
MjUwOTc0M2FkMjllLzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xNjM2ZjgtNTAyNi00MDRlLWExYWUtMjUwOTc0M2FkMjll
LzEvUTlfQVpzNTgwLU9DVjBwb1pubHpzTFJvM3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMwBXB9S
Ii4ehRQ4MYPpreXMm+pH1iFJfL6OcSDS9qeImH0+voq7T+VZZQQ8jmjUdVj2WcF7
/zlIDiI9Zs6m4VuwPdJVXQeYM+yOwW0Om/vuYwCSABIvHwWzwgNZ/i9bKkLJMaHn
HwYjmildclERwg/5CI8Iu99W0OVdaYjzeDngpVx3h7DY+53/d58tbQubxsjZMd0e
v59gL+l3sl5FaH+1nLe7UzOje4elapIF3Rk84zyvNXnqms76bClmlip0og+Fj/xc
/fpE5nWJ9aHN3tP3X8wRDtGngGl4ej1C8SEzC3Aa3kCJPSuMzVWzFnTglZ0LCAMu
2B67l7wBqGhT2Q==
-----END CERTIFICATE-----
Generated at Tue Jul 29 00:14:49 2025 by rpki-client