Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: yqcZBVaapQ44qEt3NadEknkAO75tkQ+u1sp/Di0DPmU=
Subject key identifier: 62:53:17:3F:4D:2C:80:CE:F4:61:24:7D:AB:A2:01:E9:C8:30:9B:BD
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 0199FAD7C85969A6ACD730234E22F0F95B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: VCLZp+EZseBq+DYBPq+mBltx++DTzDqdzTFFYAeZXkQ=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c8:59:69:a6:ac:d7:30:23:4e:22:f0:f9:5b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=6253173f4d2c80cef461247daba201e9c8309bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:42:63:3f:5d:2b:56:7c:9c:49:42:a1:b4:
21:e8:c6:0a:0f:fd:bc:ba:84:7d:a3:bf:57:ad:37:
74:a4:9a:7f:19:13:b2:f1:79:ff:f4:82:b3:62:33:
3b:94:37:3e:72:96:e0:af:fd:af:0e:5a:b5:a3:26:
87:4a:42:34:f7:c1:56:80:b6:65:10:70:1a:d7:a1:
92:ea:2e:31:c0:10:6d:f1:6b:ab:52:fb:7d:8d:ae:
44:44:a1:f0:d8:32:ce:9c:c7:d2:1f:2b:48:31:c0:
b1:1c:db:86:85:58:74:40:17:f0:da:5e:aa:c4:de:
b1:fa:00:a0:eb:3a:c7:75:d5:10:52:82:ca:34:71:
2e:65:ed:9e:a1:29:2f:9e:bb:0e:78:d6:46:7d:99:
27:39:70:3d:45:a9:6a:60:42:9a:b0:a8:15:e3:c0:
42:cf:d8:7e:71:aa:ba:13:4e:eb:18:8f:f3:17:cf:
12:9b:dc:23:3a:65:eb:28:a9:57:65:5c:af:e3:93:
4d:68:8d:0a:31:45:77:1e:f9:6f:4e:02:8c:82:6d:
28:9c:62:71:90:da:10:e1:be:fd:04:69:8e:ab:63:
39:5a:98:d7:d8:ce:ea:5d:09:23:e8:ae:04:73:84:
0b:39:6f:79:bc:e6:c3:6f:48:47:dd:92:16:0e:7d:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:53:17:3F:4D:2C:80:CE:F4:61:24:7D:AB:A2:01:E9:C8:30:9B:BD
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b2:0a:17:b6:81:9f:30:79:4c:74:e0:fb:3a:1f:79:65:c2:
94:c0:f6:56:c5:e8:ae:02:79:b0:a0:ad:6d:79:d8:08:74:64:
97:4a:e0:b1:d8:1e:fc:4d:88:2f:9b:3a:2f:9b:0b:2d:10:76:
60:aa:d5:87:5c:78:0e:68:43:9c:72:b9:19:10:7e:c4:a9:72:
c9:e7:ba:44:95:2d:de:e5:cb:d7:dd:87:58:9b:13:a8:12:4d:
18:c7:34:93:f0:13:63:58:d0:fa:f1:0f:47:d3:cd:50:92:fe:
6d:47:97:4e:59:8c:2e:08:bc:f6:dc:b7:ce:21:97:13:91:e8:
82:5f:3a:b2:f9:5e:a0:5f:81:25:c5:ff:75:e0:e0:88:c9:0d:
d3:1c:9d:63:66:b4:00:1d:e9:ad:bc:b6:7c:51:6b:26:3e:e6:
ed:ba:fc:53:e5:38:fe:7e:7e:4d:92:bd:d6:95:de:b5:e0:5f:
65:37:c4:2e:23:59:de:81:4a:38:9b:82:e6:65:73:1c:ae:7a:
96:4a:26:b0:09:a9:f5:ec:88:8d:9f:2d:f0:8c:99:b7:3f:36:
c2:13:4b:72:4f:d6:e1:52:50:75:a4:79:a4:e3:8c:ea:71:14:
ca:db:b2:9f:0e:e6:65:2d:9f:84:63:3a:64:45:fc:fc:5a:e7:
8f:2a:32:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618hZaaas1zAjTiLw+VtUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjdkZmI4ODJhZTdkOGU1NWQyNTg2NTE3NDJmNGU2Y2U0
MzcwMTkwHhcNMjUxMDE5MDUwMTA5WhcNMjUxMDIwMDUwMTA5WjAzMTEwLwYDVQQD
Eyg2MjUzMTczZjRkMmM4MGNlZjQ2MTI0N2RhYmEyMDFlOWM4MzA5YmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKJCYz9dK1Z8nElCobQh6MYKD/28
uoR9o79XrTd0pJp/GROy8Xn/9IKzYjM7lDc+cpbgr/2vDlq1oyaHSkI098FWgLZl
EHAa16GS6i4xwBBt8WurUvt9ja5ERKHw2DLOnMfSHytIMcCxHNuGhVh0QBfw2l6q
xN6x+gCg6zrHddUQUoLKNHEuZe2eoSkvnrsOeNZGfZknOXA9RalqYEKasKgV48BC
z9h+caq6E07rGI/zF88Sm9wjOmXrKKlXZVyv45NNaI0KMUV3HvlvTgKMgm0onGJx
kNoQ4b79BGmOq2M5WpjX2M7qXQkj6K4Ec4QLOW95vObDb0hH3ZIWDn1Y6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJTFz9NLIDO9GEkfauiAenIMJu9MB8GA1UdIwQY
MBaAFKpn37iCrn2OVdJYZRdC9ObOQ3AZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgt
ZTFmZjg2Mzg2MzRiLzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80ODRkNTQtZjQ2OC00NzlmLTk3NTgtZTFmZjg2Mzg2MzRi
LzEvcW1mZnVJS3VmWTVWMGxobEYwTDA1czVEY0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLIKF7aB
nzB5THTg+zofeWXClMD2VsXorgJ5sKCtbXnYCHRkl0rgsdge/E2IL5s6L5sLLRB2
YKrVh1x4DmhDnHK5GRB+xKlyyee6RJUt3uXL192HWJsTqBJNGMc0k/ATY1jQ+vEP
R9PNUJL+bUeXTlmMLgi89ty3ziGXE5Hogl86svleoF+BJcX/deDgiMkN0xydY2a0
AB3prby2fFFrJj7m7br8U+U4/n5+TZK91pXeteBfZTfELiNZ3oFKOJuC5mVzHK56
lkomsAmp9eyIjZ8t8IyZtz82whNLck/W4VJQdaR5pOOM6nEUytuynw7mZS2fhGM6
ZEX8/FrnjyoyvQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:58 2025 by rpki-client