Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: pVBDCU18sjO7YkWPhpP/AL1zLYR0t5q/C+IGhXnf3EU=
Subject key identifier: F4:A1:49:F6:7A:AC:13:9C:1E:A5:EC:A7:CD:D6:D4:3C:55:5B:D7:58
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 0199FD3410FD638703FBEC5B2136291ECFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 03CF
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: jWZFNmg5w6n5U0cx3KUGcl2gI6/SD58jJy0pOOec5io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:10:fd:63:87:03:fb:ec:5b:21:36:29:1e:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=f4a149f67aac139c1ea5eca7cdd6d43c555bd758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:9f:70:4f:bd:46:62:28:eb:d3:c5:c1:c4:
05:d9:64:6c:64:ab:8b:c9:48:18:f1:ff:61:5f:a9:
6a:52:b4:86:fe:68:db:29:40:d4:e3:b5:88:1f:ff:
99:0f:44:75:1b:8a:80:76:e1:5d:2c:51:94:47:a1:
11:83:6a:77:26:3d:9f:0b:ae:4d:8d:48:75:76:3d:
93:7f:1b:1b:72:15:83:5b:fb:c5:6e:95:59:40:bf:
59:30:8e:b6:12:c9:a0:78:50:91:e0:1a:52:1f:72:
04:e4:0c:48:65:31:2d:f4:c3:ba:ec:9e:99:29:0a:
85:f7:c7:99:32:6b:f9:fd:9b:c9:0d:35:4e:cb:6e:
90:ea:6a:46:e6:27:9b:73:1e:4f:d6:59:31:e3:a3:
42:db:09:ae:92:00:5c:ab:e8:ec:e7:91:d7:8e:25:
12:c4:d5:a8:65:f8:c6:d8:e5:61:ab:89:ac:5e:60:
fd:51:94:c1:19:2d:a6:e3:02:cc:65:eb:37:61:b0:
73:a5:88:7c:bf:9a:83:c3:f2:1f:65:bb:d5:a8:1f:
3b:08:ec:7f:62:50:f1:9d:7c:35:da:55:1a:93:2f:
89:cc:a4:7f:cd:2d:98:ae:c9:01:bd:00:01:14:53:
5c:44:bb:96:8d:2a:71:7a:5d:11:e6:c8:f5:c1:e6:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:49:F6:7A:AC:13:9C:1E:A5:EC:A7:CD:D6:D4:3C:55:5B:D7:58
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:75:b5:92:da:6e:d5:99:7b:5e:84:30:be:b1:a7:cb:82:db:
e5:8f:23:2a:73:ba:f9:6b:27:1c:78:e9:60:cd:d9:a5:13:e1:
87:13:1e:3d:aa:e8:e9:6c:29:c6:f1:7f:65:aa:3f:d3:c0:c5:
e3:03:95:cb:50:20:a1:ad:52:c9:71:84:57:9c:a7:71:4a:d3:
d3:00:e8:cb:62:d3:19:12:b9:38:7d:ae:60:d8:b8:6c:bf:b7:
e3:aa:82:50:50:d1:37:2b:3c:b5:d2:af:23:48:fe:5c:83:c6:
12:ab:f2:82:10:20:ef:eb:b9:e6:40:19:42:e3:09:2e:e7:15:
b2:b8:35:fd:48:15:2c:6e:bc:fc:15:76:6b:60:2a:a9:0c:f0:
cc:cc:2f:c6:d6:77:40:b1:47:a3:97:23:8b:1a:e2:da:4a:57:
9f:9e:a4:9b:31:76:56:4e:90:d6:3a:71:8e:dd:96:8e:cf:ce:
69:7b:86:55:d8:e1:45:f6:78:9d:c3:65:d3:08:7b:1d:fd:60:
3d:b8:06:2d:47:31:95:24:31:67:b9:f2:3a:80:eb:97:62:d4:
d0:a0:2b:c3:25:56:b9:95:60:3f:87:04:d0:b7:3b:04:22:87:
87:27:c5:6b:2a:24:dc:50:ee:1d:73:4b:d9:9e:d0:3a:33:84:
38:b0:56:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NBD9Y4cD++xbITYpHs/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYmE2YzA1MDUwYjUwYzcwYjlhMzVkMzQyMzBiN2FjMzA5
ZDRkOWEwHhcNMjUxMDE5MTYwMTExWhcNMjUxMDIwMTYwMTExWjAzMTEwLwYDVQQD
EyhmNGExNDlmNjdhYWMxMzljMWVhNWVjYTdjZGQ2ZDQzYzU1NWJkNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQyfcE+9RmIo69PFwcQF2WRsZKuL
yUgY8f9hX6lqUrSG/mjbKUDU47WIH/+ZD0R1G4qAduFdLFGUR6ERg2p3Jj2fC65N
jUh1dj2TfxsbchWDW/vFbpVZQL9ZMI62EsmgeFCR4BpSH3IE5AxIZTEt9MO67J6Z
KQqF98eZMmv5/ZvJDTVOy26Q6mpG5iebcx5P1lkx46NC2wmukgBcq+js55HXjiUS
xNWoZfjG2OVhq4msXmD9UZTBGS2m4wLMZes3YbBzpYh8v5qDw/IfZbvVqB87COx/
YlDxnXw12lUaky+JzKR/zS2YrskBvQABFFNcRLuWjSpxel0R5sj1webVKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPShSfZ6rBOcHqXsp83W1DxVW9dYMB8GA1UdIwQY
MBaAFEG6bAUFC1DHC5o100Iwt6wwnU2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgt
YjBiODU4YzBmYmE0LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wNzJkMTAtZDRkZi00ZjUxLTkxYjgtYjBiODU4YzBmYmE0
LzEvUWJwc0JRVUxVTWNMbWpYVFFqQzNyRENkVFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHW1ktpu
1Zl7XoQwvrGny4Lb5Y8jKnO6+WsnHHjpYM3ZpRPhhxMeParo6WwpxvF/Zao/08DF
4wOVy1Agoa1SyXGEV5yncUrT0wDoy2LTGRK5OH2uYNi4bL+346qCUFDRNys8tdKv
I0j+XIPGEqvyghAg7+u55kAZQuMJLucVsrg1/UgVLG68/BV2a2AqqQzwzMwvxtZ3
QLFHo5cjixri2kpXn56kmzF2Vk6Q1jpxjt2Wjs/OaXuGVdjhRfZ4ncNl0wh7Hf1g
PbgGLUcxlSQxZ7nyOoDrl2LU0KArwyVWuZVgP4cE0Lc7BCKHhyfFayok3FDuHXNL
2Z7QOjOEOLBWng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:27 2025 by rpki-client