Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: Qs1/2h1NcZ4bh8X2U8qJcqO63+gECcP9a7pZ6Q1vV1U=
Subject key identifier: 6C:23:7E:27:65:39:05:C4:7A:96:6E:C4:D6:99:6D:AC:91:5A:7F:38
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 0199FE1053BAB7971ADDBB06ED990AC05F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 20:01:46 +0000
Manifest this update: Sun 19 Oct 2025 20:01:46 +0000
Manifest next update: Mon 20 Oct 2025 20:01:46 +0000
Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: HSjE/iKy/omjHWfqFPxi9TKEDqDMtuHenc7OsTMWSUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:53:ba:b7:97:1a:dd:bb:06:ed:99:0a:c0:5f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Oct 19 20:01:46 2025 GMT
Not After : Oct 20 20:01:46 2025 GMT
Subject: CN=6c237e27653905c47a966ec4d6996dac915a7f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:b0:0d:c4:8b:7c:59:96:14:25:8d:ab:bf:
b7:83:96:3d:6f:8d:b6:aa:58:09:3f:f1:d1:62:31:
e4:3c:fc:20:ea:ba:be:e4:5e:65:41:5f:46:c1:b2:
ad:44:10:c1:19:e4:77:91:8a:19:f4:36:cf:e7:12:
13:3e:59:3a:34:d8:71:cd:d4:36:83:78:67:ab:82:
5e:b8:08:b0:6a:c3:f0:10:0c:a6:68:1d:87:fa:44:
7c:a8:6d:bb:28:86:0b:71:6c:d8:d6:59:f6:77:04:
10:31:1f:fe:a6:90:49:38:4c:e1:b3:d2:7e:28:e8:
9c:30:be:0d:d4:1b:71:69:76:8c:4b:b0:59:b7:60:
49:62:35:e3:f4:e8:3e:46:0e:68:72:a9:41:30:68:
35:fa:ae:ab:f1:fa:71:18:97:bc:11:2e:ee:b0:62:
d0:f0:69:e2:7f:7f:6a:51:4a:71:59:4f:1e:1a:ea:
f2:9b:e2:da:1b:9f:0b:c3:97:fa:38:0c:d0:09:79:
e4:62:ac:b8:2c:af:05:bc:6d:92:f4:75:9b:36:50:
15:fe:71:77:65:cf:9f:bf:0f:ea:ea:14:88:c4:ea:
7a:04:77:b3:30:01:87:d1:66:87:4d:b6:08:06:2e:
fe:93:2a:d7:7a:f9:43:d3:51:f2:66:ef:51:f2:10:
aa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:7E:27:65:39:05:C4:7A:96:6E:C4:D6:99:6D:AC:91:5A:7F:38
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:94:4a:6e:a3:cb:10:4c:4b:a5:99:0c:37:84:34:b0:d2:7f:
ac:ed:ce:af:48:3e:d2:c4:80:67:9b:ac:52:c1:38:9f:0b:9b:
00:5f:4b:e8:18:73:51:fb:24:25:88:90:0d:5e:ce:10:ea:f7:
4e:76:71:1a:58:f7:3a:85:e9:16:d1:e2:31:2e:f5:ec:af:7a:
9d:5d:14:aa:6d:a7:31:f5:e1:f3:34:98:dd:1b:9f:d5:a8:8a:
c1:87:79:d8:00:70:67:fc:50:50:25:c6:d9:01:e3:9c:bf:83:
97:16:a5:9c:7c:4f:ff:96:3e:4d:db:0f:36:67:5e:46:f8:fc:
d8:8a:3b:0f:74:38:42:1d:d0:11:0e:f3:35:cd:a3:4b:c8:c1:
c1:1e:2f:1a:e4:c8:7b:9c:6d:37:f3:93:07:ee:3e:3d:ff:95:
4a:94:f7:5c:1c:61:b7:5c:03:80:16:ae:30:7c:e8:0f:45:21:
eb:8e:52:d2:94:54:34:3f:89:ce:19:39:56:e5:a0:c6:42:ec:
99:d3:5a:cc:9e:f5:63:1f:b7:ea:d6:0d:21:d4:fe:00:ae:d7:
5d:34:80:ea:e8:e2:54:3a:bf:dd:e0:91:7f:8f:19:6c:7b:e8:
28:39:fc:1a:95:51:de:ef:db:80:46:bb:7c:b7:8b:ee:aa:70:
81:c0:fd:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EFO6t5ca3bsG7ZkKwF9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDNlMmIxMmY0NzkxOTgyOTRmYWY2MGM2ZTM2YTBhMWI3
YmZkNTQwHhcNMjUxMDE5MjAwMTQ2WhcNMjUxMDIwMjAwMTQ2WjAzMTEwLwYDVQQD
Eyg2YzIzN2UyNzY1MzkwNWM0N2E5NjZlYzRkNjk5NmRhYzkxNWE3ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDywDcSLfFmWFCWNq7+3g5Y9b422
qlgJP/HRYjHkPPwg6rq+5F5lQV9GwbKtRBDBGeR3kYoZ9DbP5xITPlk6NNhxzdQ2
g3hnq4JeuAiwasPwEAymaB2H+kR8qG27KIYLcWzY1ln2dwQQMR/+ppBJOEzhs9J+
KOicML4N1BtxaXaMS7BZt2BJYjXj9Og+Rg5ocqlBMGg1+q6r8fpxGJe8ES7usGLQ
8Gnif39qUUpxWU8eGurym+LaG58Lw5f6OAzQCXnkYqy4LK8FvG2S9HWbNlAV/nF3
Zc+fvw/q6hSIxOp6BHezMAGH0WaHTbYIBi7+kyrXevlD01HyZu9R8hCqPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwjfidlOQXEepZuxNaZbayRWn84MB8GA1UdIwQY
MBaAFKvT4rEvR5GYKU+vYMbjagobe/1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEt
OTk3ZjQ3YWI3ZGYyLzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83OTFmYjUtYTVlYi00N2Y1LWFkOWEtOTk3ZjQ3YWI3ZGYy
LzEvcTlQaXNTOUhrWmdwVDY5Z3h1TnFDaHQ3X1ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJRKbqPL
EExLpZkMN4Q0sNJ/rO3Or0g+0sSAZ5usUsE4nwubAF9L6BhzUfskJYiQDV7OEOr3
TnZxGlj3OoXpFtHiMS717K96nV0Uqm2nMfXh8zSY3Ruf1aiKwYd52ABwZ/xQUCXG
2QHjnL+DlxalnHxP/5Y+TdsPNmdeRvj82Io7D3Q4Qh3QEQ7zNc2jS8jBwR4vGuTI
e5xtN/OTB+4+Pf+VSpT3XBxht1wDgBauMHzoD0Uh645S0pRUND+Jzhk5VuWgxkLs
mdNazJ71Yx+36tYNIdT+AK7XXTSA6ujiVDq/3eCRf48ZbHvoKDn8GpVR3u/bgEa7
fLeL7qpwgcD9wg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:16 2025 by rpki-client