Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: ResPzysbeL205kbCWwUcJLPO5dIFR1Ka2iSbaUbunXA=
Subject key identifier: C9:57:74:EF:9C:CD:15:AD:2F:FA:78:8D:A1:23:89:53:80:60:77:87
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 0199FBEAB33AC3F8C583C1417D9C6C81C077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: ZokelEVZ230I4/bb26OS1fJrSEoGCbnyIKZv6sfmI6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b3:3a:c3:f8:c5:83:c1:41:7d:9c:6c:81:c0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=c95774ef9ccd15ad2ffa788da123895380607787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:3d:89:62:17:80:19:39:e7:7a:61:a0:bc:
ff:e1:c6:00:6d:a2:7b:4a:9f:3e:60:7a:28:cf:97:
33:5d:c7:c1:59:e6:97:73:d7:55:cd:18:80:3f:e0:
c6:d0:dc:bc:c7:22:0c:6b:dd:0e:6f:ce:c5:84:14:
74:ff:64:00:e5:94:9f:eb:fd:12:16:43:5f:a8:24:
69:89:9d:b8:27:cc:26:27:e9:3d:f8:81:1d:63:c5:
58:02:68:eb:52:c2:e1:5b:7e:c0:ce:b3:05:c1:15:
fe:59:54:fc:66:9c:04:10:17:44:9f:06:04:57:dd:
5b:a9:f7:d1:19:74:d2:8a:c6:74:7a:53:a2:a3:ad:
b4:10:79:a1:b0:b0:8b:cc:3a:8b:46:33:86:0b:7e:
ce:8d:46:09:44:bc:ab:15:76:2a:98:df:96:16:f4:
c0:69:8b:18:57:63:40:2e:9e:46:5b:e8:4a:13:65:
b1:f3:d6:ef:f3:c3:88:2b:04:ba:76:62:fa:43:01:
d5:4d:e9:20:19:07:2e:93:7d:99:c2:4f:51:b0:a3:
ff:01:1b:5b:8c:0b:f1:30:d8:44:fe:d0:7b:de:e2:
54:74:59:fc:8a:9d:5d:99:60:ec:fe:0c:27:fa:eb:
32:2f:9b:fd:a3:3f:19:1d:3f:4c:a8:4f:4f:f8:ca:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:57:74:EF:9C:CD:15:AD:2F:FA:78:8D:A1:23:89:53:80:60:77:87
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f1:9b:43:43:5e:c8:21:34:0e:c8:69:44:c3:05:4a:f6:bd:
dd:a8:58:f9:75:86:f9:6b:24:4c:ac:a2:1d:ed:a7:88:5e:57:
77:da:b8:a7:9c:52:5e:36:70:ec:06:86:b3:2c:0b:56:7f:e2:
08:47:09:38:ab:84:4c:6e:56:fb:d2:15:57:2f:89:6a:8e:ad:
df:09:4f:eb:e7:57:8a:94:45:63:ba:af:49:a7:b5:29:a2:ab:
8f:21:99:20:de:8f:e6:89:e3:4e:9c:14:9d:50:85:39:10:a0:
00:59:15:74:5c:2d:0e:c5:42:fe:13:01:cf:91:82:39:29:01:
1f:1e:8e:59:0e:34:0c:3f:7d:af:7b:3a:30:32:cd:2a:f2:51:
9c:57:29:ea:86:3f:fe:52:3c:95:48:03:62:5c:01:71:be:f1:
ff:82:4c:33:74:75:b7:41:42:36:74:b5:27:db:a6:aa:ab:bf:
2d:19:d3:d6:0a:52:5a:8e:34:bd:7e:d3:80:bc:d7:49:28:11:
72:61:cc:2d:e4:ae:66:7c:6f:6f:fd:d5:85:79:b7:a3:b5:a2:
22:97:62:02:bc:8d:6e:86:1f:6c:38:2a:6b:91:d0:3a:7e:62:
2d:af:9b:42:bb:72:13:4b:9d:f7:25:5e:ba:d9:8c:07:31:97:
b6:c6:96:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rM6w/jFg8FBfZxsgcB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNjRjOWFlNWJlMjY0MGE1ZmQ2OTQ1ODZhNzA0Y2EzNGMy
MDg3YmYwHhcNMjUxMDE5MTAwMTI2WhcNMjUxMDIwMTAwMTI2WjAzMTEwLwYDVQQD
EyhjOTU3NzRlZjljY2QxNWFkMmZmYTc4OGRhMTIzODk1MzgwNjA3Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN49iWIXgBk553phoLz/4cYAbaJ7
Sp8+YHooz5czXcfBWeaXc9dVzRiAP+DG0Ny8xyIMa90Ob87FhBR0/2QA5ZSf6/0S
FkNfqCRpiZ24J8wmJ+k9+IEdY8VYAmjrUsLhW37AzrMFwRX+WVT8ZpwEEBdEnwYE
V91bqffRGXTSisZ0elOio620EHmhsLCLzDqLRjOGC37OjUYJRLyrFXYqmN+WFvTA
aYsYV2NALp5GW+hKE2Wx89bv88OIKwS6dmL6QwHVTekgGQcuk32Zwk9RsKP/ARtb
jAvxMNhE/tB73uJUdFn8ip1dmWDs/gwn+usyL5v9oz8ZHT9MqE9P+Mo6ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlXdO+czRWtL/p4jaEjiVOAYHeHMB8GA1UdIwQY
MBaAFKtkya5b4mQKX9aUWGpwTKNMIIe/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTVjYmMtZTQzZC00MGNiLTg0NGYt
MzFjNTEzN2VjMzhhLzEvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jNTVjYmMtZTQzZC00MGNiLTg0NGYtMzFjNTEzN2VjMzhh
LzEvcTJUSnJsdmlaQXBmMXBSWWFuQk1vMHdnaDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/GbQ0Ne
yCE0DshpRMMFSva93ahY+XWG+WskTKyiHe2niF5Xd9q4p5xSXjZw7AaGsywLVn/i
CEcJOKuETG5W+9IVVy+Jao6t3wlP6+dXipRFY7qvSae1KaKrjyGZIN6P5onjTpwU
nVCFORCgAFkVdFwtDsVC/hMBz5GCOSkBHx6OWQ40DD99r3s6MDLNKvJRnFcp6oY/
/lI8lUgDYlwBcb7x/4JMM3R1t0FCNnS1J9umqqu/LRnT1gpSWo40vX7TgLzXSSgR
cmHMLeSuZnxvb/3VhXm3o7WiIpdiAryNboYfbDgqa5HQOn5iLa+bQrtyE0ud9yVe
utmMBzGXtsaWuA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:57 2025 by rpki-client