Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: bluPlie7rVzPiLCGKnif57xL9v+2SU+IpsTQd4Fb4CA=
Subject key identifier: 84:F5:6E:41:EC:BF:97:02:EF:46:29:F5:95:21:06:F1:3F:A3:76:89
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 0199FB7C8B12606A7CB97D216DC4C165E944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:07 +0000
Manifest this update: Sun 19 Oct 2025 08:01:07 +0000
Manifest next update: Mon 20 Oct 2025 08:01:07 +0000
Files and hashes: 1: NcqRg7UrtJE68j0DY1PSHwYSu_4.roa (hash: O3F0k70QFpKk+LVxYcWwtpQ0YuG4zUsaxS4NlfXzPQ0=)
2: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: OvGNkNQmUDUViJTH3DAU56SEIezFLhmjeWjwNysnnM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:8b:12:60:6a:7c:b9:7d:21:6d:c4:c1:65:e9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Oct 19 08:01:07 2025 GMT
Not After : Oct 20 08:01:07 2025 GMT
Subject: CN=84f56e41ecbf9702ef4629f5952106f13fa37689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:36:53:54:05:d5:dd:b1:0f:14:90:44:c3:28:
b9:82:e9:0e:56:33:33:6a:75:89:ca:4b:d1:6f:f6:
29:35:ae:00:39:7e:87:ca:4e:97:65:06:67:e1:7b:
01:e3:81:f1:22:88:55:2b:ab:63:d2:48:52:5d:ea:
f3:03:4f:c9:dc:1e:94:7b:05:32:c4:76:30:4e:b6:
c9:b6:25:bf:cb:c7:c5:47:4b:39:09:d0:77:d3:8d:
b5:ff:54:5a:04:0c:1b:b9:22:fd:d7:4c:62:89:53:
f0:b9:32:97:2e:ff:13:d0:81:76:c3:a4:e0:70:14:
e6:e6:33:a7:b8:ea:81:74:2c:75:0b:46:dd:fe:7b:
a6:6e:74:dc:c6:f6:af:73:24:2b:ed:91:17:6a:a9:
2e:54:c8:3e:16:83:f3:a7:1c:b8:94:4c:cf:e0:2a:
fe:0b:f7:fb:c3:ff:80:dd:6e:77:67:fb:f8:d1:40:
6a:f0:d4:db:af:7a:42:5b:71:5b:f3:42:22:2d:b4:
0c:a0:f0:64:e5:6f:53:5b:d2:4e:2b:6f:1e:57:6d:
ed:79:6d:8c:a5:5b:99:c3:ef:09:5f:0e:25:40:67:
3a:4e:48:08:ff:04:d1:71:fb:f8:ee:e2:68:97:13:
27:31:b2:89:dd:c0:f1:28:8c:d2:52:12:ac:0a:51:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:6E:41:EC:BF:97:02:EF:46:29:F5:95:21:06:F1:3F:A3:76:89
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:18:06:08:0d:91:32:07:72:78:55:c1:88:52:1d:74:d9:99:
4d:7a:3c:c2:ff:8c:36:9e:d3:35:ef:7c:ac:c6:1b:5e:cd:5a:
b8:cc:64:64:1d:8a:19:55:f9:34:73:84:80:6f:06:46:fe:08:
cf:34:eb:3e:e0:1e:f0:1d:08:3e:91:dc:2d:d4:42:37:91:07:
64:24:bb:fe:be:27:fd:15:26:78:49:5c:4e:75:ea:1c:98:ef:
d9:ee:19:ea:b2:15:ba:bf:44:bf:ff:3b:55:d1:f4:cb:38:2d:
06:fd:21:b1:4b:0e:31:6c:85:32:bd:a3:61:7a:3e:6b:49:66:
b9:99:b7:64:b5:1b:4e:7a:46:3a:3c:90:a5:a5:7c:78:c0:89:
5a:c5:6e:15:fd:65:49:f0:6d:02:f6:93:eb:08:b0:8d:5d:42:
14:32:d0:19:73:17:43:63:68:11:67:61:4f:a7:f2:14:76:0d:
5f:99:86:fd:e5:90:cf:d7:1f:d5:2f:c5:53:89:2f:cc:94:b1:
61:ab:30:07:2c:6c:14:96:71:24:29:1b:7a:dc:ff:77:6e:ac:
92:51:a5:ae:16:2b:26:83:c3:46:6c:22:b2:70:bf:68:7c:bb:
2e:bd:2d:32:12:2e:0a:f3:fc:ac:a3:fc:59:fc:b9:d7:85:03:
fc:db:80:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fIsSYGp8uX0hbcTBZelEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj
MzkzYjIwHhcNMjUxMDE5MDgwMTA3WhcNMjUxMDIwMDgwMTA3WjAzMTEwLwYDVQQD
Eyg4NGY1NmU0MWVjYmY5NzAyZWY0NjI5ZjU5NTIxMDZmMTNmYTM3Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzZTVAXV3bEPFJBEwyi5gukOVjMz
anWJykvRb/YpNa4AOX6Hyk6XZQZn4XsB44HxIohVK6tj0khSXerzA0/J3B6UewUy
xHYwTrbJtiW/y8fFR0s5CdB30421/1RaBAwbuSL910xiiVPwuTKXLv8T0IF2w6Tg
cBTm5jOnuOqBdCx1C0bd/numbnTcxvavcyQr7ZEXaqkuVMg+FoPzpxy4lEzP4Cr+
C/f7w/+A3W53Z/v40UBq8NTbr3pCW3Fb80IiLbQMoPBk5W9TW9JOK28eV23teW2M
pVuZw+8JXw4lQGc6TkgI/wTRcfv47uJolxMnMbKJ3cDxKIzSUhKsClGZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT1bkHsv5cC70Yp9ZUhBvE/o3aJMB8GA1UdIwQY
MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt
MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh
LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxgGCA2R
MgdyeFXBiFIddNmZTXo8wv+MNp7TNe98rMYbXs1auMxkZB2KGVX5NHOEgG8GRv4I
zzTrPuAe8B0IPpHcLdRCN5EHZCS7/r4n/RUmeElcTnXqHJjv2e4Z6rIVur9Ev/87
VdH0yzgtBv0hsUsOMWyFMr2jYXo+a0lmuZm3ZLUbTnpGOjyQpaV8eMCJWsVuFf1l
SfBtAvaT6wiwjV1CFDLQGXMXQ2NoEWdhT6fyFHYNX5mG/eWQz9cf1S/FU4kvzJSx
YaswByxsFJZxJCkbetz/d26sklGlrhYrJoPDRmwisnC/aHy7Lr0tMhIuCvP8rKP8
Wfy514UD/NuA1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:33 2025 by rpki-client