Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: eOpg6bVgSgT2uy32rseBC9UF3JggPTZmm3TwWIkPkI0=
Subject key identifier: F7:AF:E9:E5:13:B7:CA:D8:03:1E:EE:52:6A:6F:CE:7E:B6:32:1D:0B
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 0199FD6AFFE9DC00AD7CFF9728083D67D2E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 127B
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
2: d03ojnbuBeIJ-lnd7OihnLWEVxw.roa (hash: XlMC0ZRLbmiqoXJQRP7mRdNP4FsXpGfEzY9nYp5h2sg=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: ZHrgEBiX5n5CODTORlOdR9j/T2NcbwhyWD0neXCVWvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ff:e9:dc:00:ad:7c:ff:97:28:08:3d:67:d2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=f7afe9e513b7cad8031eee526a6fce7eb6321d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:a5:37:fe:f9:e2:0a:17:62:b1:f3:e8:0b:
1a:0f:69:17:d1:63:bc:9a:8a:de:2e:46:85:f8:9e:
d8:6e:b4:3e:ec:c8:06:72:a0:37:f6:2a:54:a2:83:
8e:4a:53:da:89:5e:be:7c:44:ef:a1:a0:6e:2e:24:
84:a3:6d:d8:3a:f1:dd:1a:6b:25:b9:15:de:8d:2a:
e9:01:6e:73:ad:d8:3c:10:d7:c4:ee:27:ef:d4:09:
c5:c1:fa:4d:6f:57:4b:ce:8e:ab:f8:08:0f:11:a8:
e8:a8:6a:e2:8e:03:fa:be:f4:65:4b:c5:f4:65:75:
e2:8a:52:81:18:0a:6a:30:1c:29:d3:f4:1f:9a:77:
51:53:a3:43:77:14:cd:31:c3:c7:71:5e:aa:0e:de:
a8:67:05:f5:dd:40:69:2d:21:f9:5e:80:e7:e5:5b:
20:6f:26:56:c6:51:77:4c:d5:33:7d:34:21:e9:2b:
18:66:9a:1d:af:61:0f:0b:1c:11:88:5d:5e:c8:63:
40:b3:23:91:6a:05:00:b1:f9:34:54:fd:4d:7c:9d:
65:5c:31:f4:4a:e7:d5:3d:da:4e:e8:f5:c5:a0:e2:
65:67:b9:5b:84:78:6a:d8:a1:41:0b:20:31:ac:45:
28:b2:99:23:b6:67:7e:64:07:09:98:33:c2:a5:da:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:E9:E5:13:B7:CA:D8:03:1E:EE:52:6A:6F:CE:7E:B6:32:1D:0B
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e5:5c:6c:67:66:b2:a5:98:40:90:75:d6:d9:94:ba:79:93:
55:e1:d4:d2:47:8c:4e:c1:38:c0:0c:e2:d4:cd:14:9d:99:d1:
aa:0a:73:bb:ef:1a:d0:b1:4b:3a:59:7e:ab:1b:ce:77:cd:79:
d4:12:5a:a7:57:6a:7a:fe:fe:ef:6c:bb:51:53:42:0a:43:07:
8d:29:7b:a4:93:8f:8a:ef:60:01:4d:68:8a:a0:5e:f9:50:2f:
cb:65:b7:28:7e:eb:bb:ca:81:21:a7:57:5f:7b:52:dc:fb:80:
13:86:90:e5:f0:9b:5e:f9:a8:7b:e3:bc:af:05:2d:53:b4:aa:
1f:73:ad:fc:28:b8:c7:d7:5a:4a:44:1f:50:52:95:3a:48:b7:
57:89:79:54:27:8b:2f:5c:9a:13:cb:b2:be:62:27:fd:3d:83:
f3:ab:24:e6:27:fd:35:76:a1:f9:ca:b1:85:22:8c:ae:e8:24:
04:0b:cf:c2:65:51:11:58:53:70:d0:e1:1c:b4:c2:36:db:96:
f4:58:99:cb:38:cd:7e:c4:c0:c1:8d:fd:75:19:3f:b2:35:90:
bb:43:7f:7b:5e:00:f6:4c:b2:14:db:d7:df:35:c5:a1:82:23:
6d:c6:f7:5b:14:75:26:3b:77:1f:1c:d0:a8:af:c1:7d:fb:29:
96:75:bd:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9av/p3ACtfP+XKAg9Z9LnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZGZmMDFmNTZlMzQxOWQwMjdiZTc1OTFjZWVmNjI4NTFj
ZTBmNmIwHhcNMjUxMDE5MTcwMTExWhcNMjUxMDIwMTcwMTExWjAzMTEwLwYDVQQD
EyhmN2FmZTllNTEzYjdjYWQ4MDMxZWVlNTI2YTZmY2U3ZWI2MzIxZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPGlN/754goXYrHz6AsaD2kX0WO8
moreLkaF+J7YbrQ+7MgGcqA39ipUooOOSlPaiV6+fETvoaBuLiSEo23YOvHdGmsl
uRXejSrpAW5zrdg8ENfE7ifv1AnFwfpNb1dLzo6r+AgPEajoqGrijgP6vvRlS8X0
ZXXiilKBGApqMBwp0/QfmndRU6NDdxTNMcPHcV6qDt6oZwX13UBpLSH5XoDn5Vsg
byZWxlF3TNUzfTQh6SsYZpodr2EPCxwRiF1eyGNAsyORagUAsfk0VP1NfJ1lXDH0
SufVPdpO6PXFoOJlZ7lbhHhq2KFBCyAxrEUospkjtmd+ZAcJmDPCpdo3owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPev6eUTt8rYAx7uUmpvzn62Mh0LMB8GA1UdIwQY
MBaAFKjf8B9W40GdAnvnWRzu9ihRzg9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUt
ODgyYzQ0OGUyZWY2LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS80NzMzNjYtNzAyZC00NzNmLWJmYmUtODgyYzQ0OGUyZWY2
LzEvcU5fd0gxYmpRWjBDZS1kWkhPNzJLRkhPRDJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOVcbGdm
sqWYQJB11tmUunmTVeHU0keMTsE4wAzi1M0UnZnRqgpzu+8a0LFLOll+qxvOd815
1BJap1dqev7+72y7UVNCCkMHjSl7pJOPiu9gAU1oiqBe+VAvy2W3KH7ru8qBIadX
X3tS3PuAE4aQ5fCbXvmoe+O8rwUtU7SqH3Ot/Ci4x9daSkQfUFKVOki3V4l5VCeL
L1yaE8uyvmIn/T2D86sk5if9NXah+cqxhSKMrugkBAvPwmVREVhTcNDhHLTCNtuW
9FiZyzjNfsTAwY39dRk/sjWQu0N/e14A9kyyFNvX3zXFoYIjbcb3WxR1Jjt3HxzQ
qK/BffsplnW9qQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:20 2025 by rpki-client