Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: Qg8AQoo5vJAhGM00vd/+lepK9CcYYD/2dSb+mcr9BQk=
Subject key identifier: F7:09:E5:E6:A8:70:FE:CE:8F:B9:D6:35:7E:6A:04:6D:F7:F9:BD:30
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 0199FC58363F00B55FF70107125D1595FFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 11E0
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: p+j9TJ8z5UVFaYqrgntRFbgikqQLuNeKW+z+Zz7w+04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:36:3f:00:b5:5f:f7:01:07:12:5d:15:95:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=f709e5e6a870fece8fb9d6357e6a046df7f9bd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fb:37:dd:f3:48:7e:c8:41:2f:ce:3b:56:27:
2c:6e:f4:67:ef:15:05:91:af:94:57:06:be:8a:e0:
ac:96:3c:5c:6a:b3:14:5b:8c:6d:fd:5a:73:2b:43:
10:7f:84:f1:40:5c:fc:77:74:a0:32:0e:58:4c:11:
51:e9:22:51:fb:cc:e9:80:9c:ae:92:d6:64:91:e5:
15:cb:61:9a:10:79:1f:6c:20:07:80:1d:da:fb:29:
78:8f:4d:c6:2b:92:98:3d:3a:11:43:e9:86:95:d8:
56:b2:f6:d2:e6:9f:81:7f:8b:59:33:a7:8e:ab:c3:
65:4f:07:16:ac:b7:eb:93:a5:04:fd:7b:36:4a:98:
4e:4b:36:e5:8c:e3:8a:2f:f7:73:91:d2:a4:a3:f0:
c9:14:6f:ae:c9:2e:d5:36:b8:b9:f0:87:12:a0:d6:
f0:f5:c7:d8:85:3c:e8:5e:ac:2c:c9:80:a5:7e:1f:
c7:e7:ad:e9:cd:c0:91:14:91:f4:69:00:a2:19:a4:
72:18:c8:56:5c:3c:7f:04:f5:e3:36:08:7e:4d:24:
d0:31:91:a2:37:d6:96:7d:b1:b1:2b:82:91:b9:e2:
16:29:dc:34:82:c7:6f:4b:74:aa:8d:e7:38:06:59:
bf:fc:7a:6b:e7:50:ea:5e:e8:7a:df:63:d8:88:3a:
80:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:E5:E6:A8:70:FE:CE:8F:B9:D6:35:7E:6A:04:6D:F7:F9:BD:30
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:17:d5:4f:cc:df:bd:d9:df:86:99:c3:e9:ba:fb:0e:fa:cf:
09:32:f9:97:25:48:a8:db:8e:5a:1a:8d:73:f6:86:bc:52:61:
ea:7f:ab:a9:a1:cc:a9:3d:7a:b3:90:7d:82:e4:2d:81:af:13:
82:f9:3d:11:3c:62:5b:c3:b6:be:4b:95:87:a9:9a:b4:9f:33:
a9:cd:a7:b1:d4:1b:cd:2a:b0:a3:6a:e0:bf:19:47:3a:0e:a3:
db:ff:49:b5:39:3d:55:b0:92:5e:c4:d9:8c:28:d0:11:11:ca:
fc:e9:15:f2:25:18:6b:f6:3e:39:86:f1:66:64:3a:64:9b:9b:
15:96:7f:3f:c6:eb:a3:4c:6c:e6:86:4b:1a:be:7f:67:87:35:
f4:75:06:ee:03:c8:68:a5:e3:61:f6:a5:82:cf:07:1c:e6:67:
54:1e:00:f2:20:f6:f4:bf:89:eb:ce:4e:7b:3f:fe:e3:6d:53:
cb:43:b9:49:52:0a:c7:f1:6a:b5:14:85:f9:f8:f9:e1:75:77:
4e:d9:62:e3:89:51:f7:46:eb:d1:7b:34:31:2b:99:b4:61:93:
a9:1b:52:4d:d6:9e:43:09:eb:0a:7f:f9:31:92:25:ac:f0:17:
96:d3:37:67:45:ff:09:12:73:fa:5b:8a:b1:1d:a7:e7:19:50:
aa:5d:72:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WDY/ALVf9wEHEl0Vlf/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2I1NDA2ZWNkYWI4ZTViNDBkZGM1NGJjNjE1Y2EyYTcw
OTIyZjEwHhcNMjUxMDE5MTIwMTAzWhcNMjUxMDIwMTIwMTAzWjAzMTEwLwYDVQQD
EyhmNzA5ZTVlNmE4NzBmZWNlOGZiOWQ2MzU3ZTZhMDQ2ZGY3ZjliZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/s33fNIfshBL847VicsbvRn7xUF
ka+UVwa+iuCsljxcarMUW4xt/VpzK0MQf4TxQFz8d3SgMg5YTBFR6SJR+8zpgJyu
ktZkkeUVy2GaEHkfbCAHgB3a+yl4j03GK5KYPToRQ+mGldhWsvbS5p+Bf4tZM6eO
q8NlTwcWrLfrk6UE/Xs2SphOSzbljOOKL/dzkdKko/DJFG+uyS7VNri58IcSoNbw
9cfYhTzoXqwsyYClfh/H563pzcCRFJH0aQCiGaRyGMhWXDx/BPXjNgh+TSTQMZGi
N9aWfbGxK4KRueIWKdw0gsdvS3Sqjec4Blm//Hpr51DqXuh632PYiDqAjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcJ5eaocP7Oj7nWNX5qBG33+b0wMB8GA1UdIwQY
MBaAFEJ7VAbs2rjltA3cVLxhXKKnCSLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yNzhiN2QtY2Y0My00YWMyLWFkNmIt
N2JjMTJhNjJhMGQzLzEvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yNzhiN2QtY2Y0My00YWMyLWFkNmItN2JjMTJhNjJhMGQz
LzEvUW50VUJ1emF1T1cwRGR4VXZHRmNvcWNKSXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRfVT8zf
vdnfhpnD6br7DvrPCTL5lyVIqNuOWhqNc/aGvFJh6n+rqaHMqT16s5B9guQtga8T
gvk9ETxiW8O2vkuVh6matJ8zqc2nsdQbzSqwo2rgvxlHOg6j2/9JtTk9VbCSXsTZ
jCjQERHK/OkV8iUYa/Y+OYbxZmQ6ZJubFZZ/P8bro0xs5oZLGr5/Z4c19HUG7gPI
aKXjYfalgs8HHOZnVB4A8iD29L+J685Oez/+421Ty0O5SVIKx/FqtRSF+fj54XV3
Ttli44lR90br0Xs0MSuZtGGTqRtSTdaeQwnrCn/5MZIlrPAXltM3Z0X/CRJz+luK
sR2n5xlQql1yZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:29 2025 by rpki-client