Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: xYMFF4aNVsdiO9+cBpZzWRcj74QZJgKA2Q7DGKafRug=
Subject key identifier: 48:11:F0:1D:1F:55:E1:A1:90:53:A5:88:29:AA:36:2A:D0:41:D5:E0
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 0199FD33F4D19B24C9A9DB3DCBFE2C678C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 0AB3
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=)
2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: ZrB8FX9eAExBD67R2RS+5wgsHSEc2eKPWOf8KBnRQJQ=)
7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=)
8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f4:d1:9b:24:c9:a9:db:3d:cb:fe:2c:67:8c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=4811f01d1f55e1a19053a58829aa362ad041d5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:c3:d0:cb:5d:74:5e:28:c0:79:1a:91:bb:
f6:22:c7:48:f7:fc:56:21:28:64:ca:e2:dc:84:93:
ce:9f:5a:86:25:57:c7:c4:4f:bb:75:75:bf:79:cb:
01:3a:1e:ee:ea:cf:52:18:c1:30:6a:5e:33:d1:bf:
cc:67:2c:ed:87:2c:91:6f:81:80:42:d8:7f:96:a3:
b9:28:db:fc:09:f5:c9:28:d3:96:f2:56:b0:57:a0:
34:7b:3a:5e:19:95:7b:35:32:e1:c1:26:e4:a1:b1:
d3:a6:12:ff:b6:d3:be:7d:75:e5:34:ab:ea:d2:a3:
57:03:1e:af:b4:35:92:63:ad:e2:02:d4:c5:c4:d9:
c0:01:90:1e:f0:80:82:a1:42:13:44:ec:f4:88:06:
f6:b1:42:84:5b:24:74:90:86:b4:cb:44:92:59:6a:
f8:8c:9b:1f:8e:7b:8d:6f:d8:3a:b1:b2:6b:d3:33:
7b:9c:90:19:f9:e1:4b:15:f5:76:ec:c2:f5:69:fd:
6b:4d:01:e1:30:b7:a2:d9:fa:0c:06:e5:ae:0a:45:
98:1d:cd:27:03:8b:2b:4d:03:44:7e:9f:ab:a8:37:
f2:74:c8:5b:7e:d6:dc:60:fe:b6:79:88:3a:64:11:
fa:d1:17:37:aa:6e:6b:b2:4d:50:58:91:95:34:85:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:11:F0:1D:1F:55:E1:A1:90:53:A5:88:29:AA:36:2A:D0:41:D5:E0
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:be:a5:ed:e5:3d:b4:e6:e3:dd:20:b2:44:de:2e:a3:77:4c:
e4:f7:d1:69:6f:13:96:b5:86:ed:9e:d4:37:fe:a3:46:63:8b:
ac:d3:1d:ca:63:fd:a6:20:ea:4e:f9:36:13:13:fc:f6:0e:72:
01:f9:3e:1c:cf:2c:f8:6c:8a:2f:70:c5:21:c8:65:48:e0:1e:
8a:b8:2b:fd:40:38:26:28:73:6a:2c:34:f8:28:f0:05:d1:bf:
9f:52:d1:0d:e5:d7:d3:ac:eb:39:0e:ac:ec:ac:8b:31:44:98:
3b:70:5a:bd:29:c0:a8:d4:58:bc:96:0d:ef:57:58:61:4c:3e:
b4:15:01:3b:6d:dd:f5:3c:db:4c:44:19:1a:79:f1:b6:35:4e:
ec:38:40:93:74:83:c7:fe:b2:0a:b8:89:39:19:5c:88:d0:0d:
40:68:44:87:cc:e8:36:dc:41:6e:47:89:93:07:2a:41:02:6e:
9e:d4:3e:cf:22:c9:3a:40:62:23:6b:68:d2:75:fe:a5:0d:72:
81:f4:ba:5f:b1:87:cb:74:2d:9f:52:8b:6c:8a:a7:76:bb:11:
85:2c:15:63:2f:2e:2d:43:27:9e:aa:02:8b:92:71:a9:47:c4:
97:f9:ab:97:09:04:84:0c:fa:8d:17:f4:93:6c:11:02:96:c5:
4b:eb:57:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/TRmyTJqds9y/4sZ4yTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjUxMDE5MTYwMTA0WhcNMjUxMDIwMTYwMTA0WjAzMTEwLwYDVQQD
Eyg0ODExZjAxZDFmNTVlMWExOTA1M2E1ODgyOWFhMzYyYWQwNDFkNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lLD0MtddF4owHkakbv2IsdI9/xW
IShkyuLchJPOn1qGJVfHxE+7dXW/ecsBOh7u6s9SGMEwal4z0b/MZyzthyyRb4GA
Qth/lqO5KNv8CfXJKNOW8lawV6A0ezpeGZV7NTLhwSbkobHTphL/ttO+fXXlNKvq
0qNXAx6vtDWSY63iAtTFxNnAAZAe8ICCoUITROz0iAb2sUKEWyR0kIa0y0SSWWr4
jJsfjnuNb9g6sbJr0zN7nJAZ+eFLFfV27ML1af1rTQHhMLei2foMBuWuCkWYHc0n
A4srTQNEfp+rqDfydMhbftbcYP62eYg6ZBH60Rc3qm5rsk1QWJGVNIXaZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgR8B0fVeGhkFOliCmqNirQQdXgMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv76l7eU9
tObj3SCyRN4uo3dM5PfRaW8TlrWG7Z7UN/6jRmOLrNMdymP9piDqTvk2ExP89g5y
Afk+HM8s+GyKL3DFIchlSOAeirgr/UA4Jihzaiw0+CjwBdG/n1LRDeXX06zrOQ6s
7KyLMUSYO3BavSnAqNRYvJYN71dYYUw+tBUBO23d9TzbTEQZGnnxtjVO7DhAk3SD
x/6yCriJORlciNANQGhEh8zoNtxBbkeJkwcqQQJuntQ+zyLJOkBiI2to0nX+pQ1y
gfS6X7GHy3Qtn1KLbIqndrsRhSwVYy8uLUMnnqoCi5JxqUfEl/mrlwkEhAz6jRf0
k2wRApbFS+tXOw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:38 2025 by rpki-client