Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: wl6VzGebFbW2nndoTMgqnE7OPxaI9Yyhkyjh0zsqRS0=
Subject key identifier: 42:1B:DE:07:12:A1:24:92:67:21:55:52:DA:DD:2C:DF:7A:F6:18:85
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 0199228C6CC6219B2FC981BBB2621416568C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 0DF6
Signing time: Sun 07 Sep 2025 05:00:52 +0000
Manifest this update: Sun 07 Sep 2025 05:00:52 +0000
Manifest next update: Mon 08 Sep 2025 05:00:52 +0000
Files and hashes: 1: RbouPlrvjxMByw-unVzRP4nNXJw.roa (hash: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=)
2: f1kmm1viP1JpShChN2T-8khwmCE.roa (hash: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: lgGz6A6RYtjFMvRlEFEIOmi3GN56AHgc9TLcGDdpYF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:6c:c6:21:9b:2f:c9:81:bb:b2:62:14:16:56:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Sep 7 05:00:52 2025 GMT
Not After : Sep 8 05:00:52 2025 GMT
Subject: CN=421bde0712a1249267215552dadd2cdf7af61885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:30:7b:94:1f:4b:e7:d0:15:89:78:5b:55:
41:2b:ba:f0:1a:dd:b2:82:2e:74:d8:16:a9:19:0e:
f1:d6:e8:51:35:6b:ad:cc:82:df:e7:c9:09:04:71:
c8:1c:76:7d:a0:09:bf:5c:36:85:18:64:11:20:3d:
6f:7d:14:e0:37:81:6c:b4:15:e9:9f:74:26:2e:e2:
79:4e:53:f2:a5:60:cc:6f:53:3c:b0:7c:1d:46:73:
b0:b6:d9:2c:f6:90:7d:2e:9d:35:fa:d6:d7:42:03:
e7:2c:33:e9:f2:0a:66:d7:48:50:3d:03:6e:b2:ab:
8a:37:59:25:f3:b1:9a:30:58:0a:4a:18:34:03:da:
03:72:72:30:7e:41:d3:2c:7e:26:18:cd:a9:02:17:
28:40:ed:f8:df:fc:d8:b5:27:40:7d:18:42:30:bc:
20:78:11:e1:91:1a:20:8e:9d:0a:1e:32:10:71:ea:
64:bf:f6:b6:4d:1a:92:cf:85:52:76:46:9d:1f:95:
d3:2d:7c:7e:00:ba:48:75:31:68:ff:37:0b:ad:b7:
94:0e:94:3a:b0:53:f8:b6:1a:e5:56:37:23:42:df:
f4:72:85:87:ad:65:4d:39:c2:f8:0b:de:10:2c:25:
b0:91:44:59:39:ee:d2:6c:d1:33:ee:1a:9e:08:30:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1B:DE:07:12:A1:24:92:67:21:55:52:DA:DD:2C:DF:7A:F6:18:85
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:82:b1:5c:94:7b:46:30:13:5e:af:a0:38:fe:d5:26:2f:e4:
7b:0f:8d:0b:53:3d:97:98:18:fe:39:25:27:30:ca:c0:2e:b3:
c0:dd:42:97:7e:cc:e2:c5:06:3c:6e:16:40:d3:97:9c:71:ec:
eb:24:40:e5:0f:e3:d1:6b:ff:8f:b4:3e:6d:34:28:65:d5:64:
cd:90:30:17:09:ba:6b:6e:14:06:4c:56:17:d3:d4:5c:67:c2:
34:e8:07:ee:e5:90:16:33:9c:d5:81:2a:36:a0:93:ac:5d:ee:
24:36:39:e3:1a:fd:bc:3f:8a:d4:83:5d:52:d3:de:63:9f:c3:
ef:a0:df:32:64:2a:51:31:86:d6:8f:7a:d8:b6:f4:e0:e8:86:
68:c1:db:40:84:02:f0:4c:5c:19:7b:c0:03:cf:f1:51:be:f8:
3e:bc:43:25:c9:67:ae:e6:2b:0b:2f:6a:2a:1d:6e:9d:18:01:
15:c5:d1:3f:95:9c:05:e2:2c:5b:aa:ab:0f:33:8d:69:e5:27:
45:7d:25:67:82:56:9e:a7:ae:af:23:26:bf:24:9f:bf:fc:ee:
bd:9a:90:77:7e:b8:73:c7:61:1b:b6:22:1b:91:ba:1a:09:ed:
23:06:0c:7c:24:98:4b:83:51:9b:90:22:ff:89:3c:e3:83:7e:
83:93:38:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijGzGIZsvyYG7smIUFlaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTc1ZGI0Mzc4ZGZjYTdjMjk1M2I4NmQzYjE4ZGM4YjIx
OGVjNmIwHhcNMjUwOTA3MDUwMDUyWhcNMjUwOTA4MDUwMDUyWjAzMTEwLwYDVQQD
Eyg0MjFiZGUwNzEyYTEyNDkyNjcyMTU1NTJkYWRkMmNkZjdhZjYxODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0swe5QfS+fQFYl4W1VBK7rwGt2y
gi502BapGQ7x1uhRNWutzILf58kJBHHIHHZ9oAm/XDaFGGQRID1vfRTgN4FstBXp
n3QmLuJ5TlPypWDMb1M8sHwdRnOwttks9pB9Lp01+tbXQgPnLDPp8gpm10hQPQNu
squKN1kl87GaMFgKShg0A9oDcnIwfkHTLH4mGM2pAhcoQO343/zYtSdAfRhCMLwg
eBHhkRogjp0KHjIQcepkv/a2TRqSz4VSdkadH5XTLXx+ALpIdTFo/zcLrbeUDpQ6
sFP4thrlVjcjQt/0coWHrWVNOcL4C94QLCWwkURZOe7SbNEz7hqeCDBlIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIb3gcSoSSSZyFVUtrdLN969hiFMB8GA1UdIwQY
MBaAFKuXXbQ3jfynwpU7htOxjciyGOxrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTIt
Y2RiZDU1NmUxNzQ5LzEvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTItY2RiZDU1NmUxNzQ5
LzEvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4KxXJR7
RjATXq+gOP7VJi/kew+NC1M9l5gY/jklJzDKwC6zwN1Cl37M4sUGPG4WQNOXnHHs
6yRA5Q/j0Wv/j7Q+bTQoZdVkzZAwFwm6a24UBkxWF9PUXGfCNOgH7uWQFjOc1YEq
NqCTrF3uJDY54xr9vD+K1INdUtPeY5/D76DfMmQqUTGG1o962Lb04OiGaMHbQIQC
8ExcGXvAA8/xUb74PrxDJclnruYrCy9qKh1unRgBFcXRP5WcBeIsW6qrDzONaeUn
RX0lZ4JWnqeuryMmvySfv/zuvZqQd364c8dhG7YiG5G6GgntIwYMfCSYS4NRm5Ai
/4k844N+g5M4sw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:09 2025 by rpki-client