Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: QKJaCUL8Eio4kUuD0F7OW/OdBLF8Rvo2E5tR4M6aK1o=
Subject key identifier: BB:5E:FA:80:BD:78:77:95:CA:50:9A:B0:53:89:99:CD:B3:0E:18:CB
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 0199FC589FAFF962C258E623175DE74DF24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 0FF9
Signing time: Sun 19 Oct 2025 12:01:30 +0000
Manifest this update: Sun 19 Oct 2025 12:01:30 +0000
Manifest next update: Mon 20 Oct 2025 12:01:30 +0000
Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=)
2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=)
3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: XFbLQCr5ySXjnKkuiRFbntGq7vAqEGtsCyouCEeUQt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9f:af:f9:62:c2:58:e6:23:17:5d:e7:4d:f2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Oct 19 12:01:30 2025 GMT
Not After : Oct 20 12:01:30 2025 GMT
Subject: CN=bb5efa80bd787795ca509ab0538999cdb30e18cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:3e:ea:72:7f:f2:cf:fe:ff:10:62:4f:2e:
dd:96:15:8e:34:c6:86:fa:6e:90:3f:5a:a3:02:c3:
91:4f:ba:48:08:5c:27:65:6c:dd:af:81:d6:5d:bd:
7c:d7:e8:2f:23:43:8e:7c:5b:0c:b4:91:ef:f1:c8:
dc:a5:2f:ea:a6:f8:e0:f3:d2:4e:48:18:8d:d9:96:
49:9c:a9:2a:df:85:d3:2b:74:1b:bd:f7:20:eb:ed:
64:fe:dd:77:60:69:3f:6d:27:bf:34:03:06:95:9e:
40:26:bd:ee:d3:e4:7b:b4:c5:a5:47:f2:48:0f:da:
27:2e:2f:f9:fd:2f:21:bb:ed:90:21:9b:77:06:5f:
3c:32:55:78:a4:23:2c:8c:49:be:20:ac:0c:18:cd:
cf:ee:ef:8f:4e:b8:ae:25:5d:11:07:ce:ab:ea:c5:
c3:cf:b8:27:28:af:ed:95:18:f4:48:dc:c6:50:52:
f2:68:28:9b:dd:d5:77:aa:fe:d4:04:f2:43:ea:b5:
22:c8:70:aa:09:74:b5:cd:7a:ba:3e:a6:79:21:5d:
24:c8:d1:e6:38:5d:75:53:5c:d6:c2:31:06:20:34:
5b:63:fa:1d:70:47:a8:7b:08:82:c5:16:95:87:13:
f2:f1:15:20:1b:39:82:5d:15:99:d6:20:6f:6d:ef:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5E:FA:80:BD:78:77:95:CA:50:9A:B0:53:89:99:CD:B3:0E:18:CB
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:77:48:7a:ad:f0:17:2f:5e:b7:79:54:bc:1b:23:73:83:95:
4a:e0:c4:de:96:04:e7:22:e5:8d:27:3d:51:83:24:44:76:11:
7a:5d:db:5b:8d:6c:b5:fc:6d:58:34:1d:a8:ca:6f:58:39:ef:
72:fd:13:26:6a:05:e2:1b:13:63:67:99:63:be:f5:15:7f:a8:
7f:11:6f:1b:d4:a3:8b:f8:8e:b5:0b:be:be:a3:3e:db:11:c3:
13:c6:8c:73:9d:29:e3:4b:87:e1:85:f4:36:e1:e9:b6:d6:26:
e9:79:1e:bb:ce:06:df:b9:a1:20:ff:b0:69:53:a9:ba:d1:22:
93:63:bd:dd:1e:ee:01:5e:b7:d1:1f:bb:85:dd:a8:ff:95:80:
8b:63:be:c3:6a:b9:35:b5:8b:38:15:18:78:7d:f8:3b:ba:1b:
88:44:48:af:90:4b:a3:e0:d4:26:a9:07:62:4c:bb:f4:3a:2f:
47:77:08:70:a3:2f:5d:ac:5c:f7:41:5f:c1:69:78:88:ff:00:
5d:83:cf:e0:76:5d:27:44:f0:fc:bd:82:c7:2e:b9:61:5e:5a:
6d:17:39:31:49:9e:8b:a8:e2:bc:ae:a3:49:a6:26:7f:88:e8:
05:12:6d:8c:44:d8:87:e8:63:cf:98:8f:98:c0:0c:65:29:c2:
d5:21:e3:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJ+v+WLCWOYjF13nTfJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2Y0YTEyOGQwOWRmYzRiOGIwMzVhMTJjZDgzMWY5Zjdi
MDE0NjkwHhcNMjUxMDE5MTIwMTMwWhcNMjUxMDIwMTIwMTMwWjAzMTEwLwYDVQQD
EyhiYjVlZmE4MGJkNzg3Nzk1Y2E1MDlhYjA1Mzg5OTljZGIzMGUxOGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD4+6nJ/8s/+/xBiTy7dlhWONMaG
+m6QP1qjAsORT7pICFwnZWzdr4HWXb181+gvI0OOfFsMtJHv8cjcpS/qpvjg89JO
SBiN2ZZJnKkq34XTK3Qbvfcg6+1k/t13YGk/bSe/NAMGlZ5AJr3u0+R7tMWlR/JI
D9onLi/5/S8hu+2QIZt3Bl88MlV4pCMsjEm+IKwMGM3P7u+PTriuJV0RB86r6sXD
z7gnKK/tlRj0SNzGUFLyaCib3dV3qv7UBPJD6rUiyHCqCXS1zXq6PqZ5IV0kyNHm
OF11U1zWwjEGIDRbY/odcEeoewiCxRaVhxPy8RUgGzmCXRWZ1iBvbe8vZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLte+oC9eHeVylCasFOJmc2zDhjLMB8GA1UdIwQY
MBaAFELPShKNCd/EuLA1oSzYMfn3sBRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEt
MGIwNDM3NWY5YjM2LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEtMGIwNDM3NWY5YjM2
LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWndIeq3w
Fy9et3lUvBsjc4OVSuDE3pYE5yLljSc9UYMkRHYRel3bW41stfxtWDQdqMpvWDnv
cv0TJmoF4hsTY2eZY771FX+ofxFvG9Sji/iOtQu+vqM+2xHDE8aMc50p40uH4YX0
NuHpttYm6Xkeu84G37mhIP+waVOputEik2O93R7uAV630R+7hd2o/5WAi2O+w2q5
NbWLOBUYeH34O7obiERIr5BLo+DUJqkHYky79DovR3cIcKMvXaxc90FfwWl4iP8A
XYPP4HZdJ0Tw/L2Cxy65YV5abRc5MUmei6jivK6jSaYmf4joBRJtjETYh+hjz5iP
mMAMZSnC1SHjlA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:53 2025 by rpki-client