Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier: /bY07hLGb3bZmGy5criG17Ptz6+LuBNYeIJdjsVLqOc=
Subject key identifier: DD:34:25:82:07:67:AD:F7:B1:C8:28:1C:7C:4A:24:A9:12:2A:AB:B1
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 0199FEEBBBAEE4F356E445F76DB9C6B8B1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number: 1340
Signing time: Mon 20 Oct 2025 00:01:25 +0000
Manifest this update: Mon 20 Oct 2025 00:01:25 +0000
Manifest next update: Tue 21 Oct 2025 00:01:25 +0000
Files and hashes: 1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=)
2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=)
3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=)
4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: 5Sw/P+HRY80kIYGkTA/51Bp/Yf5pHC8DBjyuMEBmwBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:bb:ae:e4:f3:56:e4:45:f7:6d:b9:c6:b8:b1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Oct 20 00:01:25 2025 GMT
Not After : Oct 21 00:01:25 2025 GMT
Subject: CN=dd3425820767adf7b1c8281c7c4a24a9122aabb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:09:92:25:81:28:7b:1c:4e:e1:6e:14:be:
65:ce:ea:30:d9:68:d6:86:ab:22:bc:dc:22:26:09:
89:69:3e:8a:00:52:e0:d6:31:9f:0b:71:2f:9d:14:
5a:90:af:2c:b3:19:d0:2a:99:f9:47:20:05:15:5d:
dd:37:c6:e9:96:f7:2f:d4:90:01:da:86:cf:5a:8b:
be:4f:ae:06:47:b4:39:90:4e:b8:a5:fb:4c:17:ca:
4f:70:5d:12:27:81:62:d8:9f:b5:54:68:72:42:38:
ed:06:cb:b5:24:f1:39:c2:1a:1b:92:6f:7a:e7:90:
9b:39:09:2a:d1:a3:2b:f4:4b:2f:fc:f2:e9:ac:b7:
7d:c3:07:8c:0e:0f:e8:9d:25:92:8b:ad:fc:ea:21:
72:78:48:8c:b9:85:81:3e:46:f1:5d:b4:20:df:e0:
da:bc:96:8b:16:4d:96:03:5e:b0:38:a7:6b:64:c9:
22:06:14:77:fc:e6:d4:f8:d5:e5:38:5f:8f:05:fe:
f0:14:a4:f8:75:55:6e:45:27:54:44:3c:57:0d:6e:
3d:c6:2e:80:73:58:90:cc:d0:e1:0f:80:25:ca:5a:
7f:36:dd:f6:62:a5:cf:0c:b8:29:ec:49:5f:c5:8f:
f2:fb:9e:de:6e:8d:19:33:b6:cf:98:f6:4e:b3:06:
7b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:25:82:07:67:AD:F7:B1:C8:28:1C:7C:4A:24:A9:12:2A:AB:B1
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:58:f9:25:a4:c9:31:82:a2:c3:1f:78:9e:51:be:06:ba:54:
98:27:b4:73:ed:a4:85:21:56:e0:34:c6:dd:73:b8:77:67:b5:
36:62:0a:07:72:15:d6:df:b6:87:83:be:7f:11:71:88:77:39:
e9:16:a3:7f:a2:98:7b:1c:2f:2d:39:f4:e8:91:7e:56:81:e4:
ef:c9:16:f2:bc:14:c2:1e:aa:73:6a:63:0b:48:c6:0d:31:23:
96:e7:f5:92:98:96:47:c2:4b:1c:57:b9:9c:00:9a:45:0a:b5:
58:57:61:a0:a5:37:70:01:fe:bb:a1:ee:28:8f:18:6a:67:9d:
08:d1:ff:67:5f:85:d5:a7:ab:45:e9:9c:05:ca:cc:50:70:f9:
a5:d7:5c:7e:25:1d:4c:61:c4:59:ea:d8:0a:35:1d:6b:c4:a4:
01:e9:84:b3:7e:61:87:1a:93:b6:40:71:c0:2b:32:4e:01:a4:
61:89:44:c8:d1:e4:6f:ab:ef:5e:dc:0d:53:86:d2:57:85:19:
42:be:e8:48:31:80:65:84:b4:63:1e:e3:d5:12:5f:5b:82:c6:
40:44:d3:8e:49:6d:e1:8d:aa:ab:cb:5d:d2:d5:0b:f7:fc:89:
ca:6d:39:3e:b4:9c:e6:76:39:6b:8c:94:84:e1:87:10:05:f4:
82:9d:72:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+67uu5PNW5EX3bbnGuLHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh
NjVjYTMwHhcNMjUxMDIwMDAwMTI1WhcNMjUxMDIxMDAwMTI1WjAzMTEwLwYDVQQD
EyhkZDM0MjU4MjA3NjdhZGY3YjFjODI4MWM3YzRhMjRhOTEyMmFhYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23sJkiWBKHscTuFuFL5lzuow2WjW
hqsivNwiJgmJaT6KAFLg1jGfC3EvnRRakK8ssxnQKpn5RyAFFV3dN8bplvcv1JAB
2obPWou+T64GR7Q5kE64pftMF8pPcF0SJ4Fi2J+1VGhyQjjtBsu1JPE5whobkm96
55CbOQkq0aMr9Esv/PLprLd9wweMDg/onSWSi6386iFyeEiMuYWBPkbxXbQg3+Da
vJaLFk2WA16wOKdrZMkiBhR3/ObU+NXlOF+PBf7wFKT4dVVuRSdURDxXDW49xi6A
c1iQzNDhD4Alylp/Nt32YqXPDLgp7ElfxY/y+57ebo0ZM7bPmPZOswZ7RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN00JYIHZ633scgoHHxKJKkSKquxMB8GA1UdIwQY
MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt
ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2
LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlj5JaTJ
MYKiwx94nlG+BrpUmCe0c+2khSFW4DTG3XO4d2e1NmIKB3IV1t+2h4O+fxFxiHc5
6Rajf6KYexwvLTn06JF+VoHk78kW8rwUwh6qc2pjC0jGDTEjluf1kpiWR8JLHFe5
nACaRQq1WFdhoKU3cAH+u6HuKI8YamedCNH/Z1+F1aerRemcBcrMUHD5pddcfiUd
TGHEWerYCjUda8SkAemEs35hhxqTtkBxwCsyTgGkYYlEyNHkb6vvXtwNU4bSV4UZ
Qr7oSDGAZYS0Yx7j1RJfW4LGQETTjklt4Y2qq8td0tUL9/yJym05PrSc5nY5a4yU
hOGHEAX0gp1y1g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:51 2025 by rpki-client