Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier: B13r1s5H9LFYWeO9VvmeYInG+cebLNKnvUhoVPFuW/A=
Subject key identifier: E0:CE:89:CA:3B:94:D9:B1:80:7F:DE:32:90:18:C9:D6:BF:9E:2B:90
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 0199221E498766E5F7BD3D4E72236DEAEB59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number: 04B6
Signing time: Sun 07 Sep 2025 03:00:34 +0000
Manifest this update: Sun 07 Sep 2025 03:00:34 +0000
Manifest next update: Mon 08 Sep 2025 03:00:34 +0000
Files and hashes: 1: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: QiqXbhfIfjQd4ibYAQRW6AP/xayttgAZlS8bnK3QeMI=)
2: uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa (hash: jOMq+THXs6tHKVnh3usZCh/VkjmthWBocgL66TKhVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:49:87:66:e5:f7:bd:3d:4e:72:23:6d:ea:eb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Sep 7 03:00:34 2025 GMT
Not After : Sep 8 03:00:34 2025 GMT
Subject: CN=e0ce89ca3b94d9b1807fde329018c9d6bf9e2b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:71:96:09:6c:d6:9d:45:05:cd:5b:69:e9:a2:
a8:3f:48:b7:5a:f6:c3:33:53:7e:80:8d:77:d9:7f:
93:ab:21:e5:f3:4c:58:e0:f3:95:e1:9b:a3:93:e6:
ff:73:79:1e:16:99:98:a6:34:a1:b9:d6:97:21:e8:
16:ae:24:a6:38:ac:93:cd:72:0e:dd:47:80:31:2b:
72:16:5c:7b:4e:45:b3:19:78:5f:78:38:ff:cb:12:
05:b4:94:1e:74:70:99:86:f7:81:35:f6:72:86:84:
53:d4:a5:d0:44:c2:84:f2:bd:5a:2f:02:55:a1:11:
71:b6:64:7b:27:64:22:90:98:07:ab:a5:96:38:03:
b9:ff:01:3a:77:8d:c2:88:c0:06:d9:fd:cd:5c:fc:
77:62:e7:d4:93:60:9a:06:97:07:b8:91:e3:9d:e1:
f3:b2:4b:dc:9d:5f:df:0a:c9:a9:01:4d:38:a3:ca:
58:3b:8f:d9:ce:a8:ca:8f:7e:98:d0:7b:ec:41:08:
70:cd:8a:5e:50:c7:ba:0b:5a:40:b6:04:8a:d9:91:
1c:1b:36:32:a6:71:33:a2:7c:1b:94:ef:00:14:1f:
45:b7:01:a7:c5:a4:00:53:4c:05:9c:58:2c:c9:eb:
af:f1:66:e7:75:2e:ef:09:09:4b:4c:ed:32:0d:90:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CE:89:CA:3B:94:D9:B1:80:7F:DE:32:90:18:C9:D6:BF:9E:2B:90
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0a:5b:fa:c2:48:18:68:dd:03:60:4c:7d:32:7c:1a:1b:00:
a5:04:d2:4e:80:82:a8:5a:64:a6:b5:67:3f:f3:f0:0a:7c:bc:
6d:e1:da:64:10:d4:f3:4c:32:03:13:7e:67:47:fc:83:4e:e1:
4a:36:96:93:79:6a:4b:b5:20:8e:56:04:ac:97:d6:d1:65:4e:
f1:dd:4c:a0:6e:7b:7a:16:ae:48:67:1e:5d:f1:6b:e8:3d:ca:
f6:b6:9d:b0:0c:f0:c9:54:c2:0b:41:e1:b6:9c:e5:18:bf:dd:
ff:51:cc:e9:34:b8:6d:fb:36:64:27:35:c8:a7:6c:bb:71:fd:
2a:7c:9d:9d:46:00:2d:1c:0f:b0:f8:7a:cc:8b:0a:90:39:13:
a8:dd:06:98:32:61:ac:83:0c:09:f5:48:dd:a0:ef:a2:86:46:
f6:80:4f:6d:50:90:0f:e1:5a:ca:4a:69:d6:b3:4d:f2:54:a4:
21:7a:75:7f:ad:6d:59:a8:21:68:45:23:eb:41:9f:c8:88:93:
b4:79:d3:d4:ee:87:31:69:2b:a6:f4:68:b9:7a:10:b1:59:cc:
02:30:13:e6:c6:82:fc:0d:87:3e:90:0e:40:ed:21:f4:93:d6:
7c:d3:78:66:de:16:6e:b7:88:9d:a1:b6:7e:24:d7:af:c6:ad:
75:ee:ef:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHkmHZuX3vT1OciNt6utZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDIxNjk1NDkxNWUzY2VlZjc0ZGJiYmNmZTk0NzIwMDlk
ODg5MDEwHhcNMjUwOTA3MDMwMDM0WhcNMjUwOTA4MDMwMDM0WjAzMTEwLwYDVQQD
EyhlMGNlODljYTNiOTRkOWIxODA3ZmRlMzI5MDE4YzlkNmJmOWUyYjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknGWCWzWnUUFzVtp6aKoP0i3WvbD
M1N+gI132X+TqyHl80xY4POV4Zujk+b/c3keFpmYpjShudaXIegWriSmOKyTzXIO
3UeAMStyFlx7TkWzGXhfeDj/yxIFtJQedHCZhveBNfZyhoRT1KXQRMKE8r1aLwJV
oRFxtmR7J2QikJgHq6WWOAO5/wE6d43CiMAG2f3NXPx3YufUk2CaBpcHuJHjneHz
skvcnV/fCsmpAU04o8pYO4/ZzqjKj36Y0HvsQQhwzYpeUMe6C1pAtgSK2ZEcGzYy
pnEzonwblO8AFB9FtwGnxaQAU0wFnFgsyeuv8WbndS7vCQlLTO0yDZDSfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODOico7lNmxgH/eMpAYyda/niuQMB8GA1UdIwQY
MBaAFKhCFpVJFePO73Tbu8/pRyAJ2IkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jM2M5MWQtNTMxOS00MWFhLWIxOTct
YWI1ZDE2Mzk3N2YyLzEvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9jM2M5MWQtNTMxOS00MWFhLWIxOTctYWI1ZDE2Mzk3N2Yy
LzEvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwpb+sJI
GGjdA2BMfTJ8GhsApQTSToCCqFpkprVnP/PwCny8beHaZBDU80wyAxN+Z0f8g07h
SjaWk3lqS7UgjlYErJfW0WVO8d1MoG57ehauSGceXfFr6D3K9radsAzwyVTCC0Hh
tpzlGL/d/1HM6TS4bfs2ZCc1yKdsu3H9KnydnUYALRwPsPh6zIsKkDkTqN0GmDJh
rIMMCfVI3aDvooZG9oBPbVCQD+Faykpp1rNN8lSkIXp1f61tWaghaEUj60GfyIiT
tHnT1O6HMWkrpvRouXoQsVnMAjAT5saC/A2HPpAOQO0h9JPWfNN4Zt4WbreInaG2
fiTXr8atde7vvA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:15 2025 by rpki-client