Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: yDyAUx/RprFpWc8hAjFkQ7xivU17PLvvgwr8w6vjpMA=
Subject key identifier: A7:D1:C8:81:84:34:7C:0B:96:AB:77:99:64:0E:CC:D1:80:F4:92:47
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 0199FB7C976DE98C3F4BF96620827DBB7AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 162D
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: MJnlC7qEFxX11/9O25AHGH1WcBLQqrFh3ilTRGA1mHU=)
2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:97:6d:e9:8c:3f:4b:f9:66:20:82:7d:bb:7a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=a7d1c88184347c0b96ab7799640eccd180f49247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:2a:78:8a:5f:5c:99:4f:3d:14:26:ca:b9:
d7:79:02:ae:9c:26:38:3d:a0:0f:6b:c2:38:aa:7c:
2d:59:b6:0a:c2:b4:5b:9d:7e:80:27:8c:75:47:fa:
51:64:83:18:87:e9:f9:75:97:9d:e5:e0:67:95:c2:
a5:50:de:19:a2:51:d1:52:ff:28:46:c5:db:7c:0b:
6c:9e:5a:c6:3b:7b:1d:5b:15:2e:6a:65:b8:aa:63:
2d:12:e5:8b:2c:d0:a1:43:da:94:66:ef:35:dd:50:
2c:e1:59:85:88:a8:52:73:37:0d:93:1e:62:b0:e5:
55:4c:d7:97:ac:09:cc:8c:4d:e0:6a:d3:b5:b5:ab:
d1:d9:b7:49:9c:fd:07:05:2e:5a:bd:a9:ed:eb:1c:
e7:da:d6:74:de:fa:07:ae:1b:81:98:59:48:19:02:
50:e8:cf:57:6f:96:89:27:b3:2c:48:f5:e5:2c:09:
60:24:28:17:17:5e:0c:1d:97:e5:53:81:ba:2c:d0:
25:fa:85:b4:0a:d3:b2:49:4d:56:b7:b0:93:66:fe:
c5:73:7a:45:ea:58:9d:b8:08:58:38:f4:92:b7:5f:
19:7e:77:4e:f5:ee:c0:c4:bb:9b:8f:b2:24:c2:c9:
aa:8b:0a:cc:09:24:86:ca:81:dd:4e:65:1e:36:cf:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:C8:81:84:34:7C:0B:96:AB:77:99:64:0E:CC:D1:80:F4:92:47
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7e:a4:0f:70:ab:9b:6b:e2:c1:4c:a7:c6:e6:49:97:51:f1:
dc:52:6a:f9:7e:8e:8f:f9:cd:01:76:45:58:03:68:9d:ff:ae:
83:f8:24:b2:d4:ce:fc:3e:7a:db:56:cd:e5:af:c8:3f:d3:de:
1c:e8:ec:63:6b:cc:17:e6:33:cf:00:82:00:b0:26:45:a0:1f:
6d:20:fd:66:5f:c2:43:ea:3d:70:84:76:db:88:20:81:61:33:
80:1c:8a:62:2f:f2:9c:73:e4:11:68:b2:7a:18:d1:e6:e9:fe:
56:2b:fc:69:19:9d:ca:02:5e:7d:c9:5b:71:bb:ff:8d:e0:c7:
11:70:8c:0f:dc:6c:d1:d7:29:f2:a4:64:80:b1:99:9d:db:30:
a3:ae:ec:3f:50:b3:6d:ad:3e:94:f4:fa:b6:db:ae:f3:8f:c2:
67:c0:66:38:6d:9c:e0:f4:ab:88:d0:71:ae:36:e3:73:f7:35:
10:2a:7c:77:86:87:60:0b:43:72:4f:91:fd:8e:57:81:9e:31:
1c:70:cd:83:60:50:67:c1:20:d4:d4:8b:69:20:ed:46:3c:6d:
11:68:33:8c:7b:45:35:80:a5:8f:e9:d9:1c:d1:ed:30:66:49:
39:44:34:43:75:60:22:5a:77:85:71:8f:b9:04:12:89:ca:22:
4a:0d:ec:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJdt6Yw/S/lmIIJ9u3rHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGU0MDI2Y2E5NjRjZjM1MTI5NDBiMjZiMTFlNjQ4NzFj
NDc5NDQwHhcNMjUxMDE5MDgwMTEwWhcNMjUxMDIwMDgwMTEwWjAzMTEwLwYDVQQD
EyhhN2QxYzg4MTg0MzQ3YzBiOTZhYjc3OTk2NDBlY2NkMTgwZjQ5MjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w8qeIpfXJlPPRQmyrnXeQKunCY4
PaAPa8I4qnwtWbYKwrRbnX6AJ4x1R/pRZIMYh+n5dZed5eBnlcKlUN4ZolHRUv8o
RsXbfAtsnlrGO3sdWxUuamW4qmMtEuWLLNChQ9qUZu813VAs4VmFiKhSczcNkx5i
sOVVTNeXrAnMjE3gatO1tavR2bdJnP0HBS5avant6xzn2tZ03voHrhuBmFlIGQJQ
6M9Xb5aJJ7MsSPXlLAlgJCgXF14MHZflU4G6LNAl+oW0CtOySU1Wt7CTZv7Fc3pF
6liduAhYOPSSt18ZfndO9e7AxLubj7IkwsmqiwrMCSSGyoHdTmUeNs9J/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfRyIGENHwLlqt3mWQOzNGA9JJHMB8GA1UdIwQY
MBaAFEMOQCbKlkzzUSlAsmsR5khxxHlEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTIt
MTExM2FlNTYzMzY5LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xMzI0MTAtNDgzOS00MTc0LThkZTItMTExM2FlNTYzMzY5
LzEvUXc1QUpzcVdUUE5SS1VDeWF4SG1TSEhFZVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJn6kD3Cr
m2viwUynxuZJl1Hx3FJq+X6Oj/nNAXZFWANonf+ug/gkstTO/D5621bN5a/IP9Pe
HOjsY2vMF+YzzwCCALAmRaAfbSD9Zl/CQ+o9cIR224gggWEzgByKYi/ynHPkEWiy
ehjR5un+Viv8aRmdygJefclbcbv/jeDHEXCMD9xs0dcp8qRkgLGZndswo67sP1Cz
ba0+lPT6ttuu84/CZ8BmOG2c4PSriNBxrjbjc/c1ECp8d4aHYAtDck+R/Y5XgZ4x
HHDNg2BQZ8Eg1NSLaSDtRjxtEWgzjHtFNYClj+nZHNHtMGZJOUQ0Q3VgIlp3hXGP
uQQSicoiSg3spw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:00:24 2025 by rpki-client