Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: 7NC+1BV1gxlG6oLJzBXgcayE4F8jEU99iwUd67wmvYs=
Subject key identifier: BA:A6:4E:3F:AC:4C:CB:85:E3:C8:C1:A6:DF:95:22:90:76:C5:5A:A3
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 0199FBEB1B648C6501A0E446791E9F337B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:01:53 +0000
Manifest this update: Sun 19 Oct 2025 10:01:53 +0000
Manifest next update: Mon 20 Oct 2025 10:01:53 +0000
Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=)
2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: 6A3pqkJkSTAbBQRFF2F2J7oktJRKeO6nk2DMKhw9eKI=)
3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:1b:64:8c:65:01:a0:e4:46:79:1e:9f:33:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Oct 19 10:01:53 2025 GMT
Not After : Oct 20 10:01:53 2025 GMT
Subject: CN=baa64e3fac4ccb85e3c8c1a6df95229076c55aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:48:15:7f:ac:96:26:12:ea:83:f8:45:aa:
72:16:cb:c3:21:dd:ea:60:76:54:0e:58:02:8e:e8:
99:de:30:59:fa:4b:67:7f:0b:d0:30:c7:10:cf:6a:
53:39:e1:90:a4:c9:91:2f:18:ee:ce:48:ad:b2:0c:
6a:50:a4:20:cd:03:52:a0:55:83:d2:08:0a:db:32:
79:53:ce:8b:d3:52:57:36:e3:ab:7d:c2:90:f8:95:
1a:44:99:dd:f8:24:10:22:01:fd:d4:f9:b0:9b:9b:
e7:c2:cd:b7:9c:65:bb:d1:ce:c8:47:57:6b:62:90:
69:3c:3e:ce:6f:02:ad:2e:a2:77:e4:c8:8a:92:a7:
27:ab:af:eb:fa:16:a6:d0:16:1d:83:f2:27:4d:da:
5f:11:07:49:27:e1:fd:11:49:92:f8:47:de:81:30:
06:c5:1e:d3:fb:31:cb:6f:0e:c4:d8:8c:4b:cd:84:
88:3e:ba:bb:04:6e:b0:3d:56:a3:01:57:77:0e:96:
cc:75:5b:98:af:e5:00:96:ce:0d:4e:3e:ff:62:55:
b4:d4:86:77:d9:34:5f:c9:e4:21:3f:08:20:3e:15:
4f:c2:ea:13:85:42:77:7c:59:45:a4:18:e0:35:63:
23:94:0a:7b:16:22:19:7d:af:59:e5:5c:5d:c7:5e:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:4E:3F:AC:4C:CB:85:E3:C8:C1:A6:DF:95:22:90:76:C5:5A:A3
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:53:dc:86:27:4b:d3:cf:15:c2:43:b4:6e:c9:57:ce:4e:06:
65:8d:24:f6:5f:48:79:6a:1c:13:48:d8:38:dd:46:14:46:8f:
62:5f:b3:2f:a3:fc:50:55:ec:ae:b9:d7:55:81:4f:3b:48:be:
08:d6:86:13:bc:d5:df:55:05:3a:ee:85:96:5a:c8:fc:43:9a:
f6:55:90:06:21:87:36:77:84:9b:03:6e:d7:9e:cc:ae:14:14:
11:3d:64:e5:2d:ab:7d:0c:c8:e7:b0:d1:3b:1b:09:a6:4b:2a:
a2:eb:df:c1:31:da:6d:28:26:3b:04:f1:f6:46:31:bc:5c:3b:
1c:3e:93:d6:cd:f1:ea:3b:f9:19:e4:7f:c7:5b:0c:f4:f4:bf:
97:31:7f:f5:e8:36:0e:5a:d9:18:6b:fe:be:cb:f4:58:02:d5:
3f:86:3a:5c:b9:37:d6:e8:8a:aa:d7:a0:42:29:07:97:4e:30:
8f:4c:b4:bd:89:e0:0c:53:c8:67:cf:8a:19:57:66:8c:35:82:
d5:74:45:86:4b:70:24:db:f5:9e:02:a1:80:1f:8b:b9:cd:5a:
41:bb:ba:8a:fd:b4:9d:e4:8e:d7:cb:8f:08:e3:80:e5:dd:9b:
3f:ef:ed:81:f2:f9:da:4b:6c:44:74:37:b2:a3:b5:09:1b:78:
23:ee:5e:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76xtkjGUBoORGeR6fM3s3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmM1NjMwZDU3YjE5NzFmM2EyNTZlZDZkOTgzYWZhZDZi
MjhkNzUwHhcNMjUxMDE5MTAwMTUzWhcNMjUxMDIwMTAwMTUzWjAzMTEwLwYDVQQD
EyhiYWE2NGUzZmFjNGNjYjg1ZTNjOGMxYTZkZjk1MjI5MDc2YzU1YWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqNIFX+sliYS6oP4RapyFsvDId3q
YHZUDlgCjuiZ3jBZ+ktnfwvQMMcQz2pTOeGQpMmRLxjuzkitsgxqUKQgzQNSoFWD
0ggK2zJ5U86L01JXNuOrfcKQ+JUaRJnd+CQQIgH91Pmwm5vnws23nGW70c7IR1dr
YpBpPD7ObwKtLqJ35MiKkqcnq6/r+ham0BYdg/InTdpfEQdJJ+H9EUmS+EfegTAG
xR7T+zHLbw7E2IxLzYSIPrq7BG6wPVajAVd3DpbMdVuYr+UAls4NTj7/YlW01IZ3
2TRfyeQhPwggPhVPwuoThUJ3fFlFpBjgNWMjlAp7FiIZfa9Z5Vxdx14sJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqmTj+sTMuF48jBpt+VIpB2xVqjMB8GA1UdIwQY
MBaAFKn8VjDVexlx86JW7W2YOvrWso11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMt
YzVkNGYwYTAwOTA3LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZjA3ODgtZjFjNC00ZWFlLWIwYzMtYzVkNGYwYTAwOTA3
LzEvcWZ4V01OVjdHWEh6b2xidGJaZzYtdGF5alhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlPchidL
088VwkO0bslXzk4GZY0k9l9IeWocE0jYON1GFEaPYl+zL6P8UFXsrrnXVYFPO0i+
CNaGE7zV31UFOu6FllrI/EOa9lWQBiGHNneEmwNu157MrhQUET1k5S2rfQzI57DR
OxsJpksqouvfwTHabSgmOwTx9kYxvFw7HD6T1s3x6jv5GeR/x1sM9PS/lzF/9eg2
DlrZGGv+vsv0WALVP4Y6XLk31uiKqtegQikHl04wj0y0vYngDFPIZ8+KGVdmjDWC
1XRFhktwJNv1ngKhgB+Luc1aQbu6iv20neSO18uPCOOA5d2bP+/tgfL52ktsRHQ3
sqO1CRt4I+5eCA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:27 2025 by rpki-client