Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: kyrPdGddh/SgmKwCIoMH4MfcO061CCTi4AFX7igFZ6A=
Subject key identifier: 44:B2:40:E3:D6:33:63:D1:AB:30:D3:C0:62:2B:7C:B8:BE:2F:5D:FC
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 0199FC2193EC4719EA97D21CADB6B6B9E797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0E1F
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: y2QfLrOfcJO4a5SLenZZPXPYGtVlTvlhnjy5hqkpqjc=)
2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:93:ec:47:19:ea:97:d2:1c:ad:b6:b6:b9:e7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=44b240e3d63363d1ab30d3c0622b7cb8be2f5dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:a8:6d:a4:09:db:1f:58:8b:1d:37:47:70:
ad:f9:45:1e:fe:99:87:09:64:0b:bb:1b:8c:b2:1b:
11:30:e7:7a:b4:d2:9b:0a:0e:3b:fc:dc:35:24:85:
7d:70:c7:47:d2:06:fe:ba:7e:ba:75:28:e7:ae:46:
dd:c2:93:6b:d5:36:1e:1d:53:aa:2a:83:64:2a:1b:
e5:6e:e8:ca:8b:1e:e8:7e:22:89:41:51:9f:ea:7f:
4d:18:e7:d8:48:57:ed:2d:b3:32:48:69:12:91:72:
09:c6:99:b9:ef:0f:90:bd:e2:2b:30:0a:6a:ce:dd:
0b:3f:e6:86:6f:ac:4f:1a:b6:44:65:7a:ff:d5:37:
d5:f7:9b:6f:d3:8d:f6:59:d3:b9:f8:2a:c5:8f:a5:
e0:4a:f5:93:b0:df:11:c9:35:0c:48:a8:7c:db:77:
8e:88:d3:67:44:40:06:e1:8f:b6:96:f3:70:18:8b:
86:12:fa:60:98:f5:4f:f9:07:08:eb:30:71:ad:e7:
57:1a:a8:19:1e:45:3c:52:51:e0:e5:37:fc:c9:00:
d8:b6:9b:3e:ea:00:81:66:9e:12:4a:26:f1:20:f5:
85:cd:8b:96:b9:45:94:a1:78:02:28:f4:d2:31:16:
15:73:99:33:05:9c:25:1b:4e:00:8a:76:e9:3e:01:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B2:40:E3:D6:33:63:D1:AB:30:D3:C0:62:2B:7C:B8:BE:2F:5D:FC
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:47:c1:60:e2:e2:05:15:64:26:1a:25:3a:2d:c3:7c:2e:b0:
78:68:b2:24:76:9e:8f:60:b5:68:1e:a2:d4:ea:1f:c8:b4:34:
53:9b:8b:fa:8d:fe:94:34:b8:74:35:24:38:56:b1:f0:12:a8:
b2:e4:49:10:89:bc:ff:42:3e:73:2d:80:45:47:eb:1e:2a:57:
f4:31:e0:75:8d:12:d6:41:09:7a:a4:a2:71:8f:7d:46:3b:7e:
bf:5a:5d:b0:5d:33:b7:cc:80:d9:7b:b7:c4:7a:2b:3e:13:36:
2a:0e:68:1a:28:00:9b:80:39:09:b2:f8:ea:54:43:77:1e:2f:
9b:59:05:b8:e6:24:2a:97:4f:3e:9c:3f:52:49:3e:23:9f:6d:
51:9c:fb:ec:89:e0:4b:42:1f:e3:b2:2e:17:c2:7b:e2:6c:16:
47:f3:a6:39:dc:cb:f9:9c:9f:f2:ee:36:16:98:22:d6:f6:36:
26:87:b9:80:ec:00:cd:3d:d8:45:9b:9b:0d:67:91:2f:4d:ae:
e8:5b:48:88:fc:df:0b:bf:c5:8a:ff:8c:62:58:c8:80:b7:e9:
5e:cf:9d:4c:a2:51:b9:05:b7:7e:34:52:70:81:b3:32:90:a6:
71:41:bb:af:c9:50:6f:90:1d:a3:9a:72:8e:31:0f:25:c5:17:
54:57:fe:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZPsRxnql9Icrba2ueeXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMmFiYjExNGYzMjU3MGM1ZGQ1MjA2NjI1OWJkYzgwYzk4
NzY4ZmQwHhcNMjUxMDE5MTEwMTIyWhcNMjUxMDIwMTEwMTIyWjAzMTEwLwYDVQQD
Eyg0NGIyNDBlM2Q2MzM2M2QxYWIzMGQzYzA2MjJiN2NiOGJlMmY1ZGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPyobaQJ2x9Yix03R3Ct+UUe/pmH
CWQLuxuMshsRMOd6tNKbCg47/Nw1JIV9cMdH0gb+un66dSjnrkbdwpNr1TYeHVOq
KoNkKhvlbujKix7ofiKJQVGf6n9NGOfYSFftLbMySGkSkXIJxpm57w+QveIrMApq
zt0LP+aGb6xPGrZEZXr/1TfV95tv0432WdO5+CrFj6XgSvWTsN8RyTUMSKh823eO
iNNnREAG4Y+2lvNwGIuGEvpgmPVP+QcI6zBxredXGqgZHkU8UlHg5Tf8yQDYtps+
6gCBZp4SSibxIPWFzYuWuUWUoXgCKPTSMRYVc5kzBZwlG04AinbpPgFb2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESyQOPWM2PRqzDTwGIrfLi+L138MB8GA1UdIwQY
MBaAFEEquxFPMlcMXdUgZiWb3IDJh2j9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MzEyNzgtOWM1Yy00OTM1LWE0ZjEt
YTM1MDdkYzY3NGMyLzEvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85MzEyNzgtOWM1Yy00OTM1LWE0ZjEtYTM1MDdkYzY3NGMy
LzEvUVNxN0VVOHlWd3hkMVNCbUpadmNnTW1IYVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEfBYOLi
BRVkJholOi3DfC6weGiyJHaej2C1aB6i1OofyLQ0U5uL+o3+lDS4dDUkOFax8BKo
suRJEIm8/0I+cy2ARUfrHipX9DHgdY0S1kEJeqSicY99Rjt+v1pdsF0zt8yA2Xu3
xHorPhM2Kg5oGigAm4A5CbL46lRDdx4vm1kFuOYkKpdPPpw/Ukk+I59tUZz77Ing
S0If47IuF8J74mwWR/OmOdzL+Zyf8u42Fpgi1vY2Joe5gOwAzT3YRZubDWeRL02u
6FtIiPzfC7/Fiv+MYljIgLfpXs+dTKJRuQW3fjRScIGzMpCmcUG7r8lQb5Ado5py
jjEPJcUXVFf+8A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:35 2025 by rpki-client