Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: x3bK1wf8afKa0JqGKWkjjWD+uZZkzd4enmuu1mUJS9Q=
Subject key identifier: 1F:AA:A8:4D:86:B8:E6:3A:A6:51:B4:1A:F1:0F:10:66:61:45:E5:59
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 01992443ADC8FFFE1A148944D7C3B1194F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0992
Signing time: Sun 07 Sep 2025 13:00:38 +0000
Manifest this update: Sun 07 Sep 2025 13:00:38 +0000
Manifest next update: Mon 08 Sep 2025 13:00:38 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: rhMhvmNsbaHzpVlAMh/vvaX3v3c0ly5KhhoOZ7px7LQ=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:ad:c8:ff:fe:1a:14:89:44:d7:c3:b1:19:4f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Sep 7 13:00:38 2025 GMT
Not After : Sep 8 13:00:38 2025 GMT
Subject: CN=1faaa84d86b8e63aa651b41af10f10666145e559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:69:e1:3d:67:66:24:35:f8:fd:e6:7f:ee:
06:00:f4:1d:e5:c2:24:f6:99:7b:c6:7b:6e:61:5a:
0a:b3:27:5a:3d:17:42:89:67:87:e1:16:90:81:87:
80:f6:6d:90:60:2a:b4:93:97:81:97:a4:f7:23:6b:
e2:cc:19:05:82:56:c2:bf:5e:e1:4a:86:eb:05:1d:
53:9e:2a:bb:bb:21:7f:4d:ac:5d:5b:3f:c1:50:d0:
dd:c5:aa:ab:c3:85:d3:ab:97:4a:5d:d1:74:7d:73:
4a:f1:c1:1f:47:07:80:85:19:3f:3c:54:9e:42:5e:
19:82:d3:c4:25:ad:fc:2a:5d:76:6f:af:35:bd:86:
83:1f:4b:81:8f:27:4d:ea:41:19:d4:43:8b:8c:aa:
24:13:3c:fa:c1:fb:1d:b3:14:55:9f:72:17:1e:9e:
ab:02:19:6c:59:45:12:82:43:b6:98:e6:8c:c6:ed:
3b:fe:49:e5:52:cb:87:5b:3f:d4:55:d8:32:0b:3c:
63:45:cc:35:b6:25:1b:7a:d5:1f:ab:dc:1c:58:1d:
ac:1f:b7:ae:c7:66:d7:9c:7e:da:9d:1e:8e:11:f3:
2e:cb:3a:8c:20:d7:c4:e1:39:ca:8a:a5:1e:fb:1f:
b8:de:d3:87:8d:ee:11:98:76:4c:cc:bf:3f:4a:06:
52:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:A8:4D:86:B8:E6:3A:A6:51:B4:1A:F1:0F:10:66:61:45:E5:59
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:95:80:f6:f0:68:b4:9e:0d:23:25:93:e1:9a:59:65:64:a9:
47:f6:db:44:89:75:7e:a6:48:a8:ec:84:c5:20:22:91:38:6b:
f6:f1:66:9a:5b:56:65:05:9d:f5:1a:f1:19:2e:11:f3:95:b0:
de:f7:f1:87:c3:3f:aa:4d:dd:53:b9:c7:97:2a:a9:f0:17:51:
a6:42:54:d1:88:1e:03:f1:87:14:60:23:a0:cf:87:83:14:47:
20:63:95:29:c4:cb:f6:d6:04:8b:77:83:59:be:d4:b8:10:e2:
9c:68:ff:bf:83:09:a4:9b:a9:54:11:7a:4c:d8:be:7b:68:3d:
d5:f5:b0:af:97:ce:78:81:8f:a3:b3:33:85:71:25:15:62:bc:
bf:52:a5:d0:79:1f:34:06:66:c1:0f:45:7b:ef:e8:89:7c:02:
ef:87:dd:f5:ea:91:e4:04:d9:62:e7:20:69:e3:d1:cd:1e:2e:
d4:ac:c3:a3:3f:7b:39:11:d0:14:ad:52:44:32:6c:df:70:27:
5c:6b:bd:06:f2:38:e2:75:b7:f4:f1:f1:45:3d:93:5f:f8:3b:
ae:3b:a0:39:84:00:30:dc:16:77:5d:33:64:97:82:d8:68:c6:
44:d7:f3:37:03:17:1b:d9:f0:d4:f6:76:7a:c8:25:51:a4:3c:
78:2d:06:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkQ63I//4aFIlE18OxGU8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzUzNWFhNmMzMTdiYTc2Y2NiODFiYmZlZTVkNDc0YjE5
M2U2ZTMwHhcNMjUwOTA3MTMwMDM4WhcNMjUwOTA4MTMwMDM4WjAzMTEwLwYDVQQD
EygxZmFhYTg0ZDg2YjhlNjNhYTY1MWI0MWFmMTBmMTA2NjYxNDVlNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO5p4T1nZiQ1+P3mf+4GAPQd5cIk
9pl7xntuYVoKsydaPRdCiWeH4RaQgYeA9m2QYCq0k5eBl6T3I2vizBkFglbCv17h
SobrBR1Tniq7uyF/TaxdWz/BUNDdxaqrw4XTq5dKXdF0fXNK8cEfRweAhRk/PFSe
Ql4ZgtPEJa38Kl12b681vYaDH0uBjydN6kEZ1EOLjKokEzz6wfsdsxRVn3IXHp6r
AhlsWUUSgkO2mOaMxu07/knlUsuHWz/UVdgyCzxjRcw1tiUbetUfq9wcWB2sH7eu
x2bXnH7anR6OEfMuyzqMINfE4TnKiqUe+x+43tOHje4RmHZMzL8/SgZSvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+qqE2GuOY6plG0GvEPEGZhReVZMB8GA1UdIwQY
MBaAFEI1NapsMXunbMuBu/7l1HSxk+bjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEt
MDk5NTg3YzcxYmFiLzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEtMDk5NTg3YzcxYmFi
LzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZWA9vBo
tJ4NIyWT4ZpZZWSpR/bbRIl1fqZIqOyExSAikThr9vFmmltWZQWd9RrxGS4R85Ww
3vfxh8M/qk3dU7nHlyqp8BdRpkJU0YgeA/GHFGAjoM+HgxRHIGOVKcTL9tYEi3eD
Wb7UuBDinGj/v4MJpJupVBF6TNi+e2g91fWwr5fOeIGPo7MzhXElFWK8v1Kl0Hkf
NAZmwQ9Fe+/oiXwC74fd9eqR5ATZYucgaePRzR4u1KzDoz97ORHQFK1SRDJs33An
XGu9BvI44nW39PHxRT2TX/g7rjugOYQAMNwWd10zZJeC2GjGRNfzNwMXG9nw1PZ2
esglUaQ8eC0GrQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:44 2025 by rpki-client