Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: MZXVjWjrS2d8HxJDT3bqr5LtUeu5BL6KEF0R71tJvPk=
Subject key identifier: 51:09:1A:D1:F8:49:92:4A:07:8E:44:64:F6:7B:EC:FF:79:AB:70:E8
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 0199FC8F74FEC508B2B7E0B9A050056806AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: ckoH55CBjEJCcjC1y251h9U1u0nouXkW1u0QdeAEMKs=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:74:fe:c5:08:b2:b7:e0:b9:a0:50:05:68:06:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=51091ad1f849924a078e4464f67becff79ab70e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:98:fd:0e:64:60:24:c9:e9:59:83:00:d2:
2f:ff:cc:e1:f6:26:79:67:36:14:7d:26:3c:a9:44:
a7:8a:50:b0:3d:0c:9a:ff:5f:7c:61:6d:ae:aa:2b:
35:3a:d2:10:a3:1e:94:9c:fb:3a:71:56:99:0d:5b:
03:c7:13:24:8d:e1:16:cd:76:be:5b:8c:6d:1c:93:
4a:ee:aa:a0:14:f9:a1:d9:4c:08:bf:f4:ce:bb:35:
8d:d1:bc:99:6a:46:9e:79:4c:43:f9:8a:2f:50:9a:
36:d6:00:44:cf:c7:b1:68:b3:2e:28:2c:e4:fc:47:
5f:c3:cf:e4:8c:80:95:e4:3c:10:19:0f:ff:28:e4:
3b:78:c0:61:4f:37:9c:95:95:2f:bc:0d:a6:5a:31:
c4:e3:c6:81:28:53:72:d3:c5:f9:3a:51:ba:d3:4f:
dd:00:77:7b:d2:88:8e:12:8a:04:f4:96:f4:a7:9a:
2b:c6:e3:0c:df:b5:60:a4:54:25:fc:bd:fc:32:63:
ec:74:b3:0a:28:c2:17:82:60:55:ac:a3:03:1b:51:
46:48:73:a0:5c:1d:ad:c6:e5:24:81:54:c9:e5:e0:
f0:0f:90:c0:31:ad:04:8c:97:0e:91:82:03:fc:0b:
d6:12:8a:01:d2:9c:c1:bc:b3:af:67:b2:2d:38:7b:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:09:1A:D1:F8:49:92:4A:07:8E:44:64:F6:7B:EC:FF:79:AB:70:E8
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d1:c8:f8:e5:33:02:30:67:94:d0:80:35:8e:6e:33:d3:1e:
15:44:b2:74:cf:ae:84:cf:46:da:8d:d5:3a:65:11:17:75:36:
db:18:ef:f5:95:1f:21:34:60:3f:a5:ec:40:94:d5:a3:d6:63:
5d:f5:bb:10:bc:ec:74:17:45:37:db:8c:e6:0b:25:a9:f6:ad:
3c:3d:48:bb:51:08:ab:fe:d4:58:d7:19:68:28:7a:8e:a4:7d:
6f:34:e6:7b:c0:e4:28:c6:81:7f:26:02:9e:e6:c7:85:f1:59:
d6:70:3d:68:05:da:2c:84:ca:ca:9a:4b:b0:bb:74:47:5e:69:
7b:8b:9f:f0:5a:59:e5:97:eb:b8:93:a1:47:5e:1d:3c:c9:50:
6b:10:e9:1f:a3:06:81:04:35:6b:53:3a:4c:a8:56:6d:8d:0f:
66:2f:90:ee:2b:f9:84:98:b9:a3:a3:81:42:c7:12:53:9c:96:
6c:06:80:e1:31:cf:a8:47:cb:61:c2:ca:c3:17:f6:c1:0e:ed:
c1:90:06:13:e2:83:51:a2:26:22:62:38:a4:45:8c:ae:db:b3:
b8:b3:73:1f:88:ea:67:54:03:29:8e:73:5e:a7:fe:b0:e2:8c:
78:ca:29:d5:1c:1e:14:9f:d3:ea:a3:b1:1c:5d:4f:82:c0:c7:
c3:08:68:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3T+xQiyt+C5oFAFaAavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMjFkZmYzNWVkZjBjZTZlNDI4ZDZhZmZjMjEyYzQ3MTc2
NzllZTEwHhcNMjUxMDE5MTMwMTIzWhcNMjUxMDIwMTMwMTIzWjAzMTEwLwYDVQQD
Eyg1MTA5MWFkMWY4NDk5MjRhMDc4ZTQ0NjRmNjdiZWNmZjc5YWI3MGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNuY/Q5kYCTJ6VmDANIv/8zh9iZ5
ZzYUfSY8qUSnilCwPQya/198YW2uqis1OtIQox6UnPs6cVaZDVsDxxMkjeEWzXa+
W4xtHJNK7qqgFPmh2UwIv/TOuzWN0byZakaeeUxD+YovUJo21gBEz8exaLMuKCzk
/Edfw8/kjICV5DwQGQ//KOQ7eMBhTzeclZUvvA2mWjHE48aBKFNy08X5OlG600/d
AHd70oiOEooE9Jb0p5orxuMM37VgpFQl/L38MmPsdLMKKMIXgmBVrKMDG1FGSHOg
XB2txuUkgVTJ5eDwD5DAMa0EjJcOkYID/AvWEooB0pzBvLOvZ7ItOHvyqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEJGtH4SZJKB45EZPZ77P95q3DoMB8GA1UdIwQY
MBaAFEAh3/Ne3wzm5CjWr/whLEcXZ57hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAt
ZWI1M2E1MThjMjYzLzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wMTQwODgtNTY4NC00OWMyLWI2MzAtZWI1M2E1MThjMjYz
LzEvUUNIZjgxN2ZET2JrS05hdl9DRXNSeGRubnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtHI+OUz
AjBnlNCANY5uM9MeFUSydM+uhM9G2o3VOmURF3U22xjv9ZUfITRgP6XsQJTVo9Zj
XfW7ELzsdBdFN9uM5gslqfatPD1Iu1EIq/7UWNcZaCh6jqR9bzTme8DkKMaBfyYC
nubHhfFZ1nA9aAXaLITKyppLsLt0R15pe4uf8FpZ5ZfruJOhR14dPMlQaxDpH6MG
gQQ1a1M6TKhWbY0PZi+Q7iv5hJi5o6OBQscSU5yWbAaA4THPqEfLYcLKwxf2wQ7t
wZAGE+KDUaImImI4pEWMrtuzuLNzH4jqZ1QDKY5zXqf+sOKMeMop1RweFJ/T6qOx
HF1PgsDHwwhoPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:08 2025 by rpki-client