Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: OVS7YcCDB9hmg5lv8DwgSDMCl9rafDYUze4VYLPk4EY=
Subject key identifier: 30:5D:A6:9E:5D:E8:F2:BD:69:1C:D1:D5:56:40:0B:12:A1:81:EF:CD
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 0199FE1000EEBA20C04C35204B451DBF6BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 015B
Signing time: Sun 19 Oct 2025 20:01:25 +0000
Manifest this update: Sun 19 Oct 2025 20:01:25 +0000
Manifest next update: Mon 20 Oct 2025 20:01:25 +0000
Files and hashes: 1: CDUsDykTOJjzj2PfEalP5NWfeaM.roa (hash: MDsxP0rZPQ79FjaH/eHSpSKbqQZrO2HQf+/0HhGuzhE=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: vC/X7cYXcXvt/8OnyGBB6vDbKR6jV+YucIM38R13BIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:00:ee:ba:20:c0:4c:35:20:4b:45:1d:bf:6b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Oct 19 20:01:25 2025 GMT
Not After : Oct 20 20:01:25 2025 GMT
Subject: CN=305da69e5de8f2bd691cd1d556400b12a181efcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:92:7e:fb:02:f1:a0:d9:ab:c8:8d:b8:de:
f3:85:b4:46:ea:90:e7:3e:33:55:c2:b1:7d:8e:51:
7e:37:5c:69:2b:38:6a:ba:3b:82:9f:d8:4d:e0:c8:
33:39:ba:e5:48:ab:64:d3:e3:80:5c:da:6d:18:45:
5d:fd:26:8c:b9:6a:bf:4f:dd:4b:d5:a4:3d:42:85:
8b:27:8b:26:90:fc:55:13:2a:93:85:a1:4d:c7:45:
2f:e9:b1:05:22:29:3d:a4:a9:d7:8f:1b:f2:b6:c1:
2f:e5:52:66:d6:41:5c:8f:9c:c3:2d:a9:2b:05:58:
02:b1:ad:f8:4d:f6:0e:45:f4:54:bc:d4:c7:9c:d1:
95:ec:81:68:40:f6:f8:14:e3:fe:61:10:ad:6a:b4:
e5:ab:6d:f6:b8:26:d8:4d:61:6a:cb:fc:25:39:d4:
b8:a1:21:78:b1:d4:54:3e:96:37:11:40:e7:cf:1e:
d6:08:e4:1f:1a:32:e8:2d:b1:a0:45:ee:9d:e7:e4:
9d:39:6b:fa:cd:a0:2a:11:a2:4d:0b:a7:ba:87:55:
13:b2:1c:1a:d4:b1:f1:d4:c0:32:b3:6d:66:e9:c7:
3e:79:83:38:95:eb:a7:f3:5d:71:cc:a6:7d:6d:f8:
48:72:e3:5a:c9:89:3f:c3:2b:7a:5b:10:41:ea:c4:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:A6:9E:5D:E8:F2:BD:69:1C:D1:D5:56:40:0B:12:A1:81:EF:CD
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2b:9e:02:13:dd:1c:b9:ca:db:b8:ec:53:86:b2:13:67:99:
13:3c:8a:43:15:90:7a:87:c1:2c:71:dd:c3:65:2c:11:cf:74:
62:24:15:40:30:07:b6:66:50:73:09:30:eb:cc:1f:e3:d7:d7:
e4:5b:46:51:74:fe:c5:0a:75:73:b8:c6:e0:36:e6:68:1c:33:
1e:9e:f7:2d:6f:70:e9:9c:8e:5b:73:f3:66:69:2a:f1:d9:c5:
5c:9b:ac:0d:5c:00:a1:f8:15:ff:b7:7f:4e:e4:df:92:9f:1a:
b0:e2:bd:f9:bb:0c:d1:9f:dc:b0:31:63:e1:8a:c9:f8:eb:01:
b6:0f:c5:26:ff:c9:c1:5c:00:83:05:de:83:f2:37:f6:82:e4:
6a:00:cc:f9:b2:54:42:a9:45:92:7c:08:86:6c:ce:fc:a7:01:
4f:b1:33:c9:5f:c5:13:a6:09:b4:4d:4c:e8:b4:e8:2e:56:4e:
db:64:f9:14:7d:79:82:bd:51:9a:73:e5:bd:a5:c2:5f:a0:c9:
3d:6b:66:2d:86:fd:06:52:89:02:9a:18:45:62:35:72:a0:86:
f9:1d:d6:33:4d:89:2c:6e:a7:d3:aa:1e:93:9e:99:87:07:00:
6f:5a:71:7a:b9:18:73:a1:f3:4d:98:ae:9f:ab:ac:f2:52:88:
54:ec:97:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EADuuiDATDUgS0Udv2vHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1
NWY2NGIwHhcNMjUxMDE5MjAwMTI1WhcNMjUxMDIwMjAwMTI1WjAzMTEwLwYDVQQD
EygzMDVkYTY5ZTVkZThmMmJkNjkxY2QxZDU1NjQwMGIxMmExODFlZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKqSfvsC8aDZq8iNuN7zhbRG6pDn
PjNVwrF9jlF+N1xpKzhqujuCn9hN4MgzObrlSKtk0+OAXNptGEVd/SaMuWq/T91L
1aQ9QoWLJ4smkPxVEyqThaFNx0Uv6bEFIik9pKnXjxvytsEv5VJm1kFcj5zDLakr
BVgCsa34TfYORfRUvNTHnNGV7IFoQPb4FOP+YRCtarTlq232uCbYTWFqy/wlOdS4
oSF4sdRUPpY3EUDnzx7WCOQfGjLoLbGgRe6d5+SdOWv6zaAqEaJNC6e6h1UTshwa
1LHx1MAys21m6cc+eYM4leun811xzKZ9bfhIcuNayYk/wyt6WxBB6sTtSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBdpp5d6PK9aRzR1VZACxKhge/NMB8GA1UdIwQY
MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt
M2E2YTA2ZTE4OGMzLzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz
LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyueAhPd
HLnK27jsU4ayE2eZEzyKQxWQeofBLHHdw2UsEc90YiQVQDAHtmZQcwkw68wf49fX
5FtGUXT+xQp1c7jG4DbmaBwzHp73LW9w6ZyOW3PzZmkq8dnFXJusDVwAofgV/7d/
TuTfkp8asOK9+bsM0Z/csDFj4YrJ+OsBtg/FJv/JwVwAgwXeg/I39oLkagDM+bJU
QqlFknwIhmzO/KcBT7EzyV/FE6YJtE1M6LToLlZO22T5FH15gr1RmnPlvaXCX6DJ
PWtmLYb9BlKJApoYRWI1cqCG+R3WM02JLG6n06oek56ZhwcAb1pxerkYc6HzTZiu
n6us8lKIVOyXtQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:02 2025 by rpki-client