Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
File: QBMclDl36gqT787s000dXRyxgq8.mft (raw, json)
Hash identifier: RqtEG684Sdt0KkNSglVtHB/kFlRPzyZIISfbzNTmd5w=
Subject key identifier: 29:64:94:07:C1:99:A1:1E:2C:91:B0:A6:2A:C8:08:8C:04:93:F7:8E
Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Certificate serial: 019A00A2E53015A6C0A6AD8955C10E6A3C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
Manifest number: 0F93
Signing time: Mon 20 Oct 2025 08:01:06 +0000
Manifest this update: Mon 20 Oct 2025 08:01:06 +0000
Manifest next update: Tue 21 Oct 2025 08:01:06 +0000
Files and hashes: 1: QBMclDl36gqT787s000dXRyxgq8.crl (hash: IhMTU/aWW77iIFBGOo5Vshf7lWlO86TCbFcHzXDCx14=)
2: ULUALQSKNZEpPcNq68X1y69o-9w.roa (hash: u+zVU0SkY5ZMKNVKnpjmcvlKMcttm6HzHNnhk032Vso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:e5:30:15:a6:c0:a6:ad:89:55:c1:0e:6a:3c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Validity
Not Before: Oct 20 08:01:06 2025 GMT
Not After : Oct 21 08:01:06 2025 GMT
Subject: CN=29649407c199a11e2c91b0a62ac8088c0493f78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fc:19:a2:e7:26:b7:4b:b7:43:57:28:27:52:
dc:37:c9:28:8b:03:5c:21:18:0f:4d:7d:ac:f4:c1:
22:64:d6:6f:b9:aa:01:7c:c7:3b:5e:14:74:76:4f:
cf:e7:3e:08:3c:56:1d:01:ce:c4:b8:17:b6:36:d8:
e8:d3:c5:7f:9a:1f:67:3f:e6:dc:c6:f1:b1:dc:5b:
77:ce:56:e4:b6:2a:ac:0d:ef:6c:8a:d7:13:f3:a2:
86:6e:ba:ba:bb:0f:2d:6a:cb:07:3a:b3:65:d2:53:
54:30:09:1d:8d:fe:e0:3e:af:ee:a3:47:31:ff:29:
32:fe:d6:37:fa:d9:68:66:0d:e7:c6:c2:3b:0b:a2:
a5:01:d0:47:7a:51:96:ca:18:e2:bd:ae:8f:40:cf:
cd:e7:53:fd:f6:ba:58:87:92:d9:44:bc:f4:57:3b:
a4:54:2d:49:41:8d:0d:a4:27:87:f6:c5:0f:ca:7a:
30:78:f0:8e:a0:47:2f:d5:ae:34:25:d1:30:bc:99:
08:b1:21:96:50:39:08:e6:97:cf:de:c3:95:af:30:
57:5d:ac:7b:f5:d7:95:8d:23:4c:f3:50:30:d1:ac:
72:aa:e7:c9:b3:85:4e:dd:58:04:2a:64:34:29:0e:
c0:9f:08:0c:69:0c:29:65:da:89:64:cd:b0:98:0f:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:94:07:C1:99:A1:1E:2C:91:B0:A6:2A:C8:08:8C:04:93:F7:8E
X509v3 Authority Key Identifier:
keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9c:84:ab:8a:2b:63:8e:7a:16:df:57:1f:0a:03:62:ae:25:
6f:dd:2f:23:3c:86:d1:cb:42:f1:b5:a8:87:81:73:1e:0b:17:
d9:42:78:9c:10:1e:d2:f3:54:d4:b7:ab:ae:64:27:bc:92:7b:
8c:ac:be:27:54:57:97:7d:47:9b:ca:39:4e:9e:9d:2d:76:ec:
d3:71:c1:c8:61:4e:8d:17:c3:7d:bc:16:32:56:a9:d8:2e:d7:
50:a2:79:6c:f9:ed:64:ec:b1:ab:07:c7:79:b0:d5:50:84:e3:
45:b7:ad:ac:08:c7:36:47:93:ff:3f:b4:39:57:af:66:d6:bd:
6b:e9:85:bd:d1:6c:fb:96:cb:68:3d:93:8e:95:eb:63:e4:21:
c3:70:72:f5:ed:f7:f0:79:86:ab:4e:d0:ac:9a:ee:8c:56:8b:
7c:3e:68:e4:16:90:2d:71:91:a5:98:00:0f:54:8b:21:44:5f:
1f:80:e9:bf:1c:a3:ab:1b:75:5e:8e:73:e2:e8:ad:71:bf:35:
1e:d2:e2:9d:2c:33:5e:3e:0a:b4:c0:7b:b4:cc:1a:1c:54:62:
37:37:e4:f9:44:9f:4a:79:ae:a9:a9:e8:38:f6:99:51:9a:53:
ce:1c:b8:f0:77:25:4c:ae:4e:99:7f:0d:69:ca:d7:21:45:17:
70:ab:ff:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAouUwFabApq2JVcEOajwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMTMxYzk0Mzk3N2VhMGE5M2VmY2VlY2QzNGQxZDVkMWNi
MTgyYWYwHhcNMjUxMDIwMDgwMTA2WhcNMjUxMDIxMDgwMTA2WjAzMTEwLwYDVQQD
EygyOTY0OTQwN2MxOTlhMTFlMmM5MWIwYTYyYWM4MDg4YzA0OTNmNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvwZoucmt0u3Q1coJ1LcN8koiwNc
IRgPTX2s9MEiZNZvuaoBfMc7XhR0dk/P5z4IPFYdAc7EuBe2Ntjo08V/mh9nP+bc
xvGx3Ft3zlbktiqsDe9sitcT86KGbrq6uw8tassHOrNl0lNUMAkdjf7gPq/uo0cx
/yky/tY3+tloZg3nxsI7C6KlAdBHelGWyhjiva6PQM/N51P99rpYh5LZRLz0Vzuk
VC1JQY0NpCeH9sUPynowePCOoEcv1a40JdEwvJkIsSGWUDkI5pfP3sOVrzBXXax7
9deVjSNM81Aw0axyqufJs4VO3VgEKmQ0KQ7AnwgMaQwpZdqJZM2wmA9BDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClklAfBmaEeLJGwpirICIwEk/eOMB8GA1UdIwQY
MBaAFEATHJQ5d+oKk+/O7NNNHV0csYKvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEt
MmI2NDlkNWViYWYzLzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81YzliNzQtNzUzYi00MmUyLWI0MWEtMmI2NDlkNWViYWYz
LzEvUUJNY2xEbDM2Z3FUNzg3czAwMGRYUnl4Z3E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpyEq4or
Y456Ft9XHwoDYq4lb90vIzyG0ctC8bWoh4FzHgsX2UJ4nBAe0vNU1LerrmQnvJJ7
jKy+J1RXl31Hm8o5Tp6dLXbs03HByGFOjRfDfbwWMlap2C7XUKJ5bPntZOyxqwfH
ebDVUITjRbetrAjHNkeT/z+0OVevZta9a+mFvdFs+5bLaD2TjpXrY+Qhw3By9e33
8HmGq07QrJrujFaLfD5o5BaQLXGRpZgAD1SLIURfH4Dpvxyjqxt1Xo5z4uitcb81
HtLinSwzXj4KtMB7tMwaHFRiNzfk+USfSnmuqanoOPaZUZpTzhy48HclTK5OmX8N
acrXIUUXcKv/PA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:34:16 2025 by rpki-client