Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: xSuG9iQq9erIVgtpVBvo3htARmlrvt1VYMZMH4gJQSE=
Subject key identifier: 9C:71:07:0F:2E:E5:9F:D3:B1:40:F4:93:BF:CC:81:63:DA:42:61:62
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 0199FB462CBAC63EC9B06A9AD567098FC09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:44 +0000
Manifest this update: Sun 19 Oct 2025 07:01:44 +0000
Manifest next update: Mon 20 Oct 2025 07:01:44 +0000
Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: yVy4uv6xpivfi9+UWI2RwCCWf98uC+DyEuGbtylKwMQ=)
2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:2c:ba:c6:3e:c9:b0:6a:9a:d5:67:09:8f:c0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Oct 19 07:01:44 2025 GMT
Not After : Oct 20 07:01:44 2025 GMT
Subject: CN=9c71070f2ee59fd3b140f493bfcc8163da426162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:dc:ec:e1:ad:7e:98:79:a3:58:11:a4:0e:
8c:68:88:5f:52:e7:09:f6:19:50:29:ff:bb:7b:21:
0b:cc:6f:26:c5:ab:4a:5b:17:fc:82:3e:8c:ad:89:
ec:fb:88:86:c8:46:05:63:99:aa:36:86:28:9e:61:
98:95:09:76:49:87:1a:3e:87:aa:4c:ac:44:13:1e:
dc:b1:dc:69:06:f1:a1:ec:8c:28:5b:4e:7c:7f:5e:
67:21:9d:e4:ae:bb:39:d4:51:31:df:f6:b8:e7:d9:
cd:3b:79:74:f8:bd:cb:8b:8e:78:cd:c2:5d:14:bb:
10:f5:cc:c8:7a:c4:08:69:f6:59:c4:35:3f:21:ec:
61:c2:9d:7e:d7:c1:d4:1f:6f:d7:61:38:f7:b3:4b:
91:07:f9:6f:69:8f:e1:45:a0:c0:7d:80:61:b9:78:
2f:98:92:d1:93:db:ef:83:f7:9e:36:a3:7b:b1:49:
ad:3b:f3:3c:26:90:58:d5:bd:02:b8:d0:09:0f:83:
49:58:1a:f9:8b:dd:08:82:6d:d7:4f:4c:9d:77:2d:
cf:9c:ab:5d:96:33:3e:e4:54:37:93:74:b9:5a:b0:
57:b9:2c:50:a3:da:f6:d0:cb:91:84:b9:63:51:a7:
29:b7:0a:29:ea:43:99:98:dd:c8:e5:90:1f:c8:6f:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:71:07:0F:2E:E5:9F:D3:B1:40:F4:93:BF:CC:81:63:DA:42:61:62
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:c4:67:3d:be:42:b9:f9:59:6f:9d:42:5d:6e:03:c0:17:
e5:60:63:b3:42:1f:26:e0:e8:b7:86:0e:84:69:d0:2e:95:7e:
79:0b:88:f4:2a:ba:e9:5b:a6:06:89:98:9c:45:05:01:e6:4f:
87:95:67:19:fd:32:b3:fe:07:38:22:de:c3:f1:e1:2b:b7:dd:
f9:a1:e9:dc:45:fb:22:af:2b:34:6a:40:67:b3:29:2e:49:b0:
ed:e4:fd:fc:c5:ec:5a:1b:28:8c:06:6e:d8:6a:b2:97:88:3d:
ea:c8:9a:18:d0:90:a3:05:44:98:62:65:a9:3c:ad:d7:00:24:
e1:ef:bf:b1:0b:03:65:6c:ae:64:9a:4c:69:6e:8b:97:dc:dc:
56:ec:a3:40:d3:50:d8:1a:66:3f:64:95:75:43:3c:d3:b1:79:
8b:92:41:80:db:eb:56:8a:80:48:95:8e:f0:23:5a:a8:03:55:
a8:3e:1a:6d:d7:fc:31:2e:a8:59:15:34:8b:14:07:01:c2:36:
f1:1d:81:80:ef:cd:3d:b8:88:4d:d2:52:09:b3:eb:0f:b8:31:
e6:42:8b:e2:16:f7:65:8b:8b:cf:84:46:f4:96:1b:fe:63:f7:
43:43:bb:93:82:f5:06:c2:3c:84:07:6d:cd:14:ed:53:c9:80:
31:9e:bd:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Riy6xj7JsGqa1WcJj8CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDE0ZjI4Zjk4ZDNiZGNjNDVlMTkyMjZmMWY1NjE3MGUz
MTJhYmYwHhcNMjUxMDE5MDcwMTQ0WhcNMjUxMDIwMDcwMTQ0WjAzMTEwLwYDVQQD
Eyg5YzcxMDcwZjJlZTU5ZmQzYjE0MGY0OTNiZmNjODE2M2RhNDI2MTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNzc7OGtfph5o1gRpA6MaIhfUucJ
9hlQKf+7eyELzG8mxatKWxf8gj6MrYns+4iGyEYFY5mqNoYonmGYlQl2SYcaPoeq
TKxEEx7csdxpBvGh7IwoW058f15nIZ3krrs51FEx3/a459nNO3l0+L3Li454zcJd
FLsQ9czIesQIafZZxDU/Iexhwp1+18HUH2/XYTj3s0uRB/lvaY/hRaDAfYBhuXgv
mJLRk9vvg/eeNqN7sUmtO/M8JpBY1b0CuNAJD4NJWBr5i90Igm3XT0yddy3PnKtd
ljM+5FQ3k3S5WrBXuSxQo9r20MuRhLljUacptwop6kOZmN3I5ZAfyG/T1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxxBw8u5Z/TsUD0k7/MgWPaQmFiMB8GA1UdIwQY
MBaAFEHRTyj5jTvcxF4ZIm8fVhcOMSq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTct
YjM4MDQ1MzI2N2Y5LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTctYjM4MDQ1MzI2N2Y5
LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEjEZz2+
Qrn5WW+dQl1uA8AX5WBjs0IfJuDot4YOhGnQLpV+eQuI9Cq66VumBomYnEUFAeZP
h5VnGf0ys/4HOCLew/HhK7fd+aHp3EX7Iq8rNGpAZ7MpLkmw7eT9/MXsWhsojAZu
2Gqyl4g96siaGNCQowVEmGJlqTyt1wAk4e+/sQsDZWyuZJpMaW6Ll9zcVuyjQNNQ
2BpmP2SVdUM807F5i5JBgNvrVoqASJWO8CNaqANVqD4abdf8MS6oWRU0ixQHAcI2
8R2BgO/NPbiITdJSCbPrD7gx5kKL4hb3ZYuLz4RG9JYb/mP3Q0O7k4L1BsI8hAdt
zRTtU8mAMZ69Xg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:21 2025 by rpki-client