Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
File: qX_5V51boEXbuQGijCxRWI0E_RE.mft (raw, json)
Hash identifier: fgx+Or+VEM/6OeHwzVapRHEEirdJ7l+iksx68EeqUT4=
Subject key identifier: 23:DE:D1:E8:05:23:7C:B0:EE:70:7F:6F:15:5C:05:4F:9B:34:74:24
Authority key identifier: A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11
Certificate issuer: /CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11
Certificate serial: 0199FAD7A70FD0451302A0452D4411DB0BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
Manifest number: 6E
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: iUuETCEbGtwWmtCdQKzT9MtsuME.roa (hash: MRtjhtm+DjeKhdCjunhlsOl8ue7lCEfAuSo2rForAtw=)
2: qX_5V51boEXbuQGijCxRWI0E_RE.crl (hash: DO+yk3xP9HjzaX0pxUAdb3GGj0sF2GUqrFwJbWms1+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a7:0f:d0:45:13:02:a0:45:2d:44:11:db:0b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=23ded1e805237cb0ee707f6f155c054f9b347424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:98:fe:cf:b4:f4:15:2d:e6:47:bd:ad:38:
8c:f4:6a:14:f5:20:64:ad:a1:59:79:df:2a:f7:3c:
50:51:f9:39:08:1c:64:e8:f4:67:b2:af:54:ca:05:
39:20:4e:f4:18:79:8a:19:81:3a:a6:41:f7:1d:00:
b4:e7:1e:87:6a:00:2b:8b:b3:85:74:2d:73:80:d9:
88:71:4a:62:2a:38:d5:6a:69:a8:2d:ec:fc:4c:98:
e8:6f:a8:d1:22:9d:b6:6c:d3:f4:bd:a9:c4:32:57:
7c:b4:a6:e3:7b:75:38:82:9c:b1:87:85:4d:ee:ab:
b6:8e:8c:e3:c4:e8:b1:7e:c0:b3:ec:23:20:5d:26:
4c:74:62:59:88:b9:f4:57:c9:6f:d7:8e:3e:ad:9c:
fb:da:6e:bc:d3:24:ca:cf:90:a3:51:7e:24:ea:d8:
d1:5e:96:cc:49:75:af:33:a7:4f:4e:1e:53:a5:a9:
6d:0b:2d:15:33:0e:dd:35:cc:22:f4:40:a0:3e:03:
e7:7d:a1:eb:8e:fb:34:2b:fa:bb:77:29:77:1d:b4:
ab:67:e8:40:9f:f1:c7:1b:3a:f5:e7:46:a1:52:84:
cc:36:51:b3:a9:68:20:e6:52:2c:72:51:ca:cc:1c:
ac:52:9f:99:54:83:06:bf:52:d6:51:94:23:41:02:
aa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:D1:E8:05:23:7C:B0:EE:70:7F:6F:15:5C:05:4F:9B:34:74:24
X509v3 Authority Key Identifier:
keyid:A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:56:26:df:92:73:52:86:a2:3c:7a:28:7c:ac:d1:94:33:19:
59:74:b5:19:6f:14:34:06:7b:57:cb:5c:d1:1b:8a:71:a8:bd:
80:9d:72:f8:1d:9f:95:81:14:12:3b:66:1d:96:24:5e:6a:47:
78:62:e3:30:20:37:71:37:15:17:ef:2e:23:1a:fb:6f:9e:89:
46:ec:5a:c2:09:c9:0d:7f:5f:24:8d:5f:8f:16:bc:86:89:d9:
e5:0c:1a:41:9a:bb:65:0a:6c:84:bd:7e:12:02:99:13:b2:1c:
2d:b8:b0:74:37:9a:89:a8:7b:c1:e8:e6:2c:47:94:9f:d6:47:
69:58:4e:31:8a:c6:bc:75:80:f4:2b:b0:23:b6:83:3e:64:e5:
82:34:83:29:4d:75:6a:52:43:db:ad:70:b9:17:0a:4e:bd:e9:
ac:54:43:53:8f:1c:b2:c9:75:0f:94:82:6a:83:ee:72:04:3a:
3a:f9:f1:23:98:2e:b4:82:73:63:8d:f9:14:5d:eb:3f:bd:89:
23:ed:24:98:61:98:7e:1d:6c:3a:fd:f6:9b:b7:29:fd:cf:5e:
54:53:bc:1a:7d:cf:95:ef:84:75:23:60:98:29:2c:e2:84:d1:
5e:3a:30:6d:ab:59:56:1a:73:40:40:83:3f:32:52:1d:fb:46:
22:74:3b:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn616cP0EUTAqBFLUQR2wutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5N2ZmOTU3OWQ1YmEwNDVkYmI5MDFhMjhjMmM1MTU4OGQw
NGZkMTEwHhcNMjUxMDE5MDUwMTAwWhcNMjUxMDIwMDUwMTAwWjAzMTEwLwYDVQQD
EygyM2RlZDFlODA1MjM3Y2IwZWU3MDdmNmYxNTVjMDU0ZjliMzQ3NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iiY/s+09BUt5ke9rTiM9GoU9SBk
raFZed8q9zxQUfk5CBxk6PRnsq9UygU5IE70GHmKGYE6pkH3HQC05x6HagAri7OF
dC1zgNmIcUpiKjjVammoLez8TJjob6jRIp22bNP0vanEMld8tKbje3U4gpyxh4VN
7qu2jozjxOixfsCz7CMgXSZMdGJZiLn0V8lv144+rZz72m680yTKz5CjUX4k6tjR
XpbMSXWvM6dPTh5TpaltCy0VMw7dNcwi9ECgPgPnfaHrjvs0K/q7dyl3HbSrZ+hA
n/HHGzr150ahUoTMNlGzqWgg5lIsclHKzBysUp+ZVIMGv1LWUZQjQQKqOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPe0egFI3yw7nB/bxVcBU+bNHQkMB8GA1UdIwQY
MBaAFKl/+VedW6BF27kBoowsUViNBP0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZTQ2YmQtNjdkYS00ZGZlLTljYjQt
ZTI1ZDM4ZjVjOTMwLzEvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mZTQ2YmQtNjdkYS00ZGZlLTljYjQtZTI1ZDM4ZjVjOTMw
LzEvcVhfNVY1MWJvRVhidVFHaWpDeFJXSTBFX1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVYm35Jz
UoaiPHoofKzRlDMZWXS1GW8UNAZ7V8tc0RuKcai9gJ1y+B2flYEUEjtmHZYkXmpH
eGLjMCA3cTcVF+8uIxr7b56JRuxawgnJDX9fJI1fjxa8honZ5QwaQZq7ZQpshL1+
EgKZE7IcLbiwdDeaiah7wejmLEeUn9ZHaVhOMYrGvHWA9CuwI7aDPmTlgjSDKU11
alJD261wuRcKTr3prFRDU48cssl1D5SCaoPucgQ6OvnxI5gutIJzY435FF3rP72J
I+0kmGGYfh1sOv32m7cp/c9eVFO8Gn3Ple+EdSNgmCks4oTRXjowbatZVhpzQECD
PzJSHftGInQ7LA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:44 2025 by rpki-client