Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: gVhbNvZh/tf4zvIYPXQY2BvPG7N+ZcVeJ6jPHI5FKWM=
Subject key identifier: E4:63:A6:35:E6:FF:22:F5:7C:64:B9:78:49:26:4A:96:78:DB:08:CB
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 019A01B499CCF8C4F0862F6658188EBE37AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0ED0
Signing time: Mon 20 Oct 2025 13:00:04 +0000
Manifest this update: Mon 20 Oct 2025 13:00:04 +0000
Manifest next update: Tue 21 Oct 2025 13:00:04 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: Vxjse7D1/G2trTqEsArTUQ556bnMOJ3/T3UuokAMhKc=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:99:cc:f8:c4:f0:86:2f:66:58:18:8e:be:37:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Oct 20 13:00:04 2025 GMT
Not After : Oct 21 13:00:04 2025 GMT
Subject: CN=e463a635e6ff22f57c64b97849264a9678db08cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:c9:b1:6c:4b:65:47:7c:ee:8c:f7:40:e0:
16:10:49:f9:04:92:4b:df:1a:e6:5b:d4:94:96:2c:
2c:27:fd:a8:ca:b2:2b:70:cd:f2:94:44:02:09:47:
cb:18:f5:f7:0d:90:79:53:9f:1d:d8:64:87:77:15:
ca:5c:b3:ef:a0:ed:8b:2e:08:e6:db:d7:11:ed:bc:
31:a6:f2:5c:0f:d5:91:39:4c:bb:43:bd:b8:7a:5d:
1d:63:3d:30:87:33:35:a8:4d:c5:eb:66:57:24:e0:
40:d4:0e:b8:b3:55:67:21:8f:c2:de:b1:12:4d:25:
df:eb:16:fc:d9:f0:40:e8:5f:ae:a4:27:b7:d8:6c:
4f:9e:c5:5e:a9:64:30:f6:1c:f2:57:ea:e4:eb:20:
ec:84:2a:94:f7:6a:2e:55:a3:49:67:8b:32:02:8b:
34:1f:89:5b:27:58:64:7a:5d:43:4f:5b:dc:9d:56:
9c:6c:8b:f9:d2:01:2b:53:bb:44:d6:2b:2a:e9:a9:
bf:d4:b1:d5:e4:0f:17:8c:1f:a3:2e:e2:23:34:ad:
1b:97:66:e4:35:e6:9d:96:f5:a7:fb:4a:64:3c:43:
a4:8d:77:49:31:a5:d8:d1:21:3d:2c:f9:cb:de:14:
05:48:31:45:66:90:1e:d5:a1:c2:b0:56:0e:09:24:
cb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:63:A6:35:E6:FF:22:F5:7C:64:B9:78:49:26:4A:96:78:DB:08:CB
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fa:cb:66:a5:02:63:d0:6a:af:e8:63:35:83:c4:7a:09:11:
38:fd:48:55:72:d4:be:c6:06:42:a1:e8:7c:90:35:f0:5c:3e:
5a:94:8e:7c:14:a0:34:d8:97:de:c6:67:3e:7a:e3:0e:8a:25:
4d:39:2e:38:31:e6:73:e4:de:3a:2f:db:ef:27:fb:9f:c1:9e:
20:6a:20:d0:cf:bb:6d:9d:2d:00:a4:27:b6:04:9b:d1:53:b6:
db:40:74:e1:97:a9:75:c3:a5:50:14:e2:6b:95:40:96:ea:c5:
7b:bd:fc:3c:d3:b8:9d:7c:80:9c:fb:5b:5d:76:51:32:f5:68:
2f:6a:63:07:be:30:2e:91:35:8f:82:e7:0c:b4:92:3b:24:27:
5f:3a:34:34:d4:a8:a6:ad:7e:b4:bc:7b:09:95:76:f3:c3:48:
8a:68:78:be:84:94:85:cd:7a:3d:da:42:9c:dc:ec:d8:80:76:
46:0d:aa:32:e2:f0:b3:ee:a1:77:d5:a7:aa:84:67:60:78:58:
e7:37:f7:50:e4:2e:d7:e6:fc:de:b8:47:ab:09:1c:f3:95:fd:
ea:07:db:9a:3b:b7:dd:c4:58:84:9b:c2:c2:ec:ae:1a:fa:f7:
74:ad:b3:d0:df:42:a6:e7:b3:01:e9:25:f3:a0:f2:04:3b:b1:
d4:18:1b:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtJnM+MTwhi9mWBiOvjeqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YTRiMzVjOGUwMjU2ZWFhMmZiZjc1MWU2YzAxZTVlOTA5
YzBhMWYwHhcNMjUxMDIwMTMwMDA0WhcNMjUxMDIxMTMwMDA0WjAzMTEwLwYDVQQD
EyhlNDYzYTYzNWU2ZmYyMmY1N2M2NGI5Nzg0OTI2NGE5Njc4ZGIwOGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZvJsWxLZUd87oz3QOAWEEn5BJJL
3xrmW9SUliwsJ/2oyrIrcM3ylEQCCUfLGPX3DZB5U58d2GSHdxXKXLPvoO2LLgjm
29cR7bwxpvJcD9WROUy7Q724el0dYz0whzM1qE3F62ZXJOBA1A64s1VnIY/C3rES
TSXf6xb82fBA6F+upCe32GxPnsVeqWQw9hzyV+rk6yDshCqU92ouVaNJZ4syAos0
H4lbJ1hkel1DT1vcnVacbIv50gErU7tE1isq6am/1LHV5A8XjB+jLuIjNK0bl2bk
NeadlvWn+0pkPEOkjXdJMaXY0SE9LPnL3hQFSDFFZpAe1aHCsFYOCSTLbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORjpjXm/yL1fGS5eEkmSpZ42wjLMB8GA1UdIwQY
MBaAFEaks1yOAlbqovv3UebAHl6QnAofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmIt
MTE3ODg2ZWI3ZDY3LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xMTkxZDYtNTQyMy00MmNmLThmNmItMTE3ODg2ZWI3ZDY3
LzEvUnFTelhJNENWdXFpLV9kUjVzQWVYcENjQ2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPrLZqUC
Y9Bqr+hjNYPEegkROP1IVXLUvsYGQqHofJA18Fw+WpSOfBSgNNiX3sZnPnrjDool
TTkuODHmc+TeOi/b7yf7n8GeIGog0M+7bZ0tAKQntgSb0VO220B04ZepdcOlUBTi
a5VAlurFe738PNO4nXyAnPtbXXZRMvVoL2pjB74wLpE1j4LnDLSSOyQnXzo0NNSo
pq1+tLx7CZV288NIimh4voSUhc16PdpCnNzs2IB2Rg2qMuLws+6hd9WnqoRnYHhY
5zf3UOQu1+b83rhHqwkc85X96gfbmju33cRYhJvCwuyuGvr3dK2z0N9CpuezAekl
86DyBDux1Bgbeg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:26 2025 by rpki-client