Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: 3+dLvRgrnHQcgiScCMTbmrxLOf4uRPE/heCmNve5umM=
Subject key identifier: CA:2F:0A:71:91:A1:0F:59:2C:49:89:68:D6:7E:14:56:0B:B6:E6:A6
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 0199326DB34D91BBBA11416B763BB4644DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1652
Signing time: Wed 10 Sep 2025 07:01:14 +0000
Manifest this update: Wed 10 Sep 2025 07:01:14 +0000
Manifest next update: Thu 11 Sep 2025 07:01:14 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: Sl7MnAYm3Y47seOitRK0T22NiF2CXznWM40GzMa+nFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:b3:4d:91:bb:ba:11:41:6b:76:3b:b4:64:4d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Sep 10 07:01:14 2025 GMT
Not After : Sep 11 07:01:14 2025 GMT
Subject: CN=ca2f0a7191a10f592c498968d67e14560bb6e6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:ed:c7:10:d8:96:df:a1:c0:34:9e:2a:15:
d2:72:5a:73:ec:94:06:be:0c:22:e4:29:9b:75:90:
74:f9:e9:0a:ee:f7:61:42:99:72:24:1c:f8:bb:af:
ab:6e:89:0e:f1:47:c0:3e:f8:a5:80:11:f8:fd:44:
2e:48:ba:25:25:dd:ad:11:30:cf:86:a0:75:b2:50:
7c:1a:26:1b:06:fa:67:9e:dc:f5:d1:fc:30:8c:2f:
2b:60:9f:6a:ab:49:fe:72:49:96:14:a8:c9:7f:ca:
12:4f:d7:18:0c:0a:59:6c:48:3f:f1:2a:9d:31:a9:
82:da:00:05:16:19:83:ae:7b:99:75:5a:52:70:51:
42:4d:e2:2a:05:e1:c0:0a:9c:2d:ad:6d:98:1f:b2:
95:7e:76:3a:89:8e:bf:4e:8c:88:bc:50:dd:4d:c3:
7d:fc:bc:7d:74:2c:35:0e:5e:33:cc:82:c8:bd:e9:
2f:d0:41:ab:75:66:97:98:c8:ff:01:05:1b:65:2c:
34:50:21:e1:7b:79:6b:c3:be:73:c7:37:c3:9e:9c:
11:1f:b2:57:a9:6c:04:1c:f2:da:a6:51:6b:be:b9:
72:75:32:a1:7f:ca:35:9e:28:ef:72:9d:50:97:b1:
3e:24:64:87:e6:60:09:33:66:82:d0:f9:e8:7c:cd:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2F:0A:71:91:A1:0F:59:2C:49:89:68:D6:7E:14:56:0B:B6:E6:A6
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:70:11:78:c4:35:63:57:33:61:c9:91:2c:db:66:b5:17:0e:
80:eb:79:e7:a6:0e:48:8f:ce:a8:bf:ea:ff:0e:8a:c1:29:1a:
d8:7d:d0:a8:1b:e8:91:4e:d1:15:4a:86:37:12:56:07:b9:e2:
69:0e:f3:8f:b4:29:be:bd:5e:9e:24:38:da:4d:f7:13:e7:16:
cf:eb:06:ef:78:7c:fe:58:aa:5b:83:f6:58:5c:c5:a0:34:7d:
bd:9b:dc:65:ab:5f:ba:38:ca:a1:e1:cb:ff:c0:07:bb:61:db:
56:46:08:52:77:37:4b:b7:ec:59:d9:27:56:7a:18:26:47:bd:
2a:90:b0:da:ba:70:61:2e:00:ee:6f:e3:13:6c:c9:c5:49:ce:
9d:eb:0e:da:ff:9a:6f:95:5f:e4:bf:4d:d0:72:5b:a1:ef:b8:
84:89:c1:13:90:a7:73:a0:e8:c6:a4:f0:32:37:c8:7a:98:46:
61:21:22:d9:f5:b3:1f:4e:59:bc:e3:db:d0:ec:08:bd:57:9c:
a3:01:39:08:49:33:a2:af:27:ad:c3:00:f4:be:15:37:b0:65:
2a:31:9d:b2:a8:5e:0d:19:5d:09:ce:a5:5d:b1:c1:38:e8:a2:
22:d8:5c:75:e4:2f:6e:53:7c:07:ee:6d:f6:0c:66:79:48:06:
21:3d:67:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkybbNNkbu6EUFrdju0ZE3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2
MGFjN2UwHhcNMjUwOTEwMDcwMTE0WhcNMjUwOTExMDcwMTE0WjAzMTEwLwYDVQQD
EyhjYTJmMGE3MTkxYTEwZjU5MmM0OTg5NjhkNjdlMTQ1NjBiYjZlNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysLtxxDYlt+hwDSeKhXSclpz7JQG
vgwi5CmbdZB0+ekK7vdhQplyJBz4u6+rbokO8UfAPvilgBH4/UQuSLolJd2tETDP
hqB1slB8GiYbBvpnntz10fwwjC8rYJ9qq0n+ckmWFKjJf8oST9cYDApZbEg/8Sqd
MamC2gAFFhmDrnuZdVpScFFCTeIqBeHACpwtrW2YH7KVfnY6iY6/ToyIvFDdTcN9
/Lx9dCw1Dl4zzILIvekv0EGrdWaXmMj/AQUbZSw0UCHhe3lrw75zxzfDnpwRH7JX
qWwEHPLaplFrvrlydTKhf8o1nijvcp1Ql7E+JGSH5mAJM2aC0PnofM21NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMovCnGRoQ9ZLEmJaNZ+FFYLtuamMB8GA1UdIwQY
MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct
MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm
LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXAReMQ1
Y1czYcmRLNtmtRcOgOt556YOSI/OqL/q/w6KwSka2H3QqBvokU7RFUqGNxJWB7ni
aQ7zj7Qpvr1eniQ42k33E+cWz+sG73h8/liqW4P2WFzFoDR9vZvcZatfujjKoeHL
/8AHu2HbVkYIUnc3S7fsWdknVnoYJke9KpCw2rpwYS4A7m/jE2zJxUnOnesO2v+a
b5Vf5L9N0HJboe+4hInBE5Cnc6DoxqTwMjfIephGYSEi2fWzH05ZvOPb0OwIvVec
owE5CEkzoq8nrcMA9L4VN7BlKjGdsqheDRldCc6lXbHBOOiiIthcdeQvblN8B+5t
9gxmeUgGIT1npw==
-----END CERTIFICATE-----
Generated at Wed Sep 10 14:16:35 2025 by rpki-client