Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: cVe6ouYVILEPdyPh9BuS30RT+t51H4uwM4Ljuzs1pLU=
Subject key identifier: 2E:CD:BC:E6:28:8E:29:7D:F5:21:F5:24:F5:F3:14:42:F0:F5:7A:3B
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 0199FBEC1640128F12122CC1F4986B081EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: zxtdqDa10cVl+EBTG5jYP3Rk6x1pJkt5p3xOxxZuZY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:16:40:12:8f:12:12:2c:c1:f4:98:6b:08:1e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=2ecdbce6288e297df521f524f5f31442f0f57a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:5f:76:38:a1:82:83:18:10:eb:85:b6:1a:
18:ac:31:57:74:de:7b:22:a0:68:d8:75:31:e1:2f:
3c:52:72:f0:1f:c6:8c:9a:3b:99:89:d2:7d:c8:b2:
6e:40:05:77:ca:10:03:d3:83:91:46:a5:6a:ab:5c:
de:7c:e0:6e:de:18:0e:ee:a7:c3:cf:fd:45:e5:c7:
ee:87:c5:6e:7e:6c:8b:91:5c:76:51:4c:f5:88:85:
8d:14:39:f6:63:fa:6d:4e:6a:f7:b2:67:b8:cb:7d:
ab:88:d0:46:95:ce:46:f6:1e:08:00:f8:e8:78:29:
26:c1:c6:53:37:99:9c:e0:01:92:73:72:be:c7:79:
10:44:07:62:26:d7:15:68:eb:89:cd:56:95:54:f8:
cf:9d:3f:6a:d2:16:99:2f:4a:51:c0:73:26:e1:0b:
a4:1a:94:c4:38:4f:96:74:55:03:b3:74:dd:04:11:
f4:bd:35:29:fb:56:d6:99:54:4f:ce:21:a1:71:f2:
30:37:44:00:2e:74:d7:94:93:5f:cf:fd:cc:a3:4a:
51:14:a2:64:d7:c9:cb:e5:e9:d4:e0:be:93:83:6c:
5f:f8:92:f0:08:ce:ee:90:51:7d:26:0a:92:f0:c0:
56:62:55:46:20:54:87:a8:a4:81:7f:87:2e:cb:0e:
e1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CD:BC:E6:28:8E:29:7D:F5:21:F5:24:F5:F3:14:42:F0:F5:7A:3B
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a0:2b:b0:ff:9e:fd:f5:0d:f2:63:32:4f:61:e1:3e:45:f4:
1e:00:de:5e:b2:ab:6f:c3:b0:90:9d:8d:b3:0a:46:b4:e3:35:
b3:84:74:22:d3:2b:1a:57:8d:9e:5a:13:90:2b:7f:16:0e:8a:
40:bd:81:cd:da:bc:64:7e:9c:5a:96:a0:08:52:c7:85:19:2a:
f6:26:c0:c2:6d:bd:c0:86:b6:78:58:ff:ae:67:83:c6:66:5e:
e2:51:05:43:bc:48:6f:cd:20:49:8a:27:90:92:a2:32:45:46:
0f:19:50:14:f7:3f:ba:4d:9c:0f:13:25:e4:d9:0b:83:8f:ab:
ff:c3:1e:ec:e8:56:2a:de:3d:16:15:73:1a:f4:d1:4c:87:a7:
e2:e8:24:0e:2d:c7:1f:b8:fc:3a:ca:ee:80:93:6e:df:64:c8:
10:13:7d:45:d9:b2:99:3d:b6:57:b7:a0:cb:40:ed:29:74:66:
9d:c2:be:00:3d:f3:da:27:75:f3:32:69:e9:a6:8c:97:6d:7c:
0c:ff:0c:dd:e1:25:f0:8e:c2:25:b5:be:cc:62:9f:bf:e7:5f:
f1:a4:7b:f3:b5:e5:1b:7a:e7:a8:48:4c:27:57:12:dd:b4:5c:
5b:4b:1f:39:6f:a7:02:e4:6c:c8:45:49:57:72:e5:76:61:85:
9f:47:6c:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77BZAEo8SEizB9JhrCB6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzhkNmYyZTFjMWJlZGZlN2JiOGNmNzlkYjI4YzhlZjNm
Yjc3NmYwHhcNMjUxMDE5MTAwMjU3WhcNMjUxMDIwMTAwMjU3WjAzMTEwLwYDVQQD
EygyZWNkYmNlNjI4OGUyOTdkZjUyMWY1MjRmNWYzMTQ0MmYwZjU3YTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUBfdjihgoMYEOuFthoYrDFXdN57
IqBo2HUx4S88UnLwH8aMmjuZidJ9yLJuQAV3yhAD04ORRqVqq1zefOBu3hgO7qfD
z/1F5cfuh8VufmyLkVx2UUz1iIWNFDn2Y/ptTmr3sme4y32riNBGlc5G9h4IAPjo
eCkmwcZTN5mc4AGSc3K+x3kQRAdiJtcVaOuJzVaVVPjPnT9q0haZL0pRwHMm4Quk
GpTEOE+WdFUDs3TdBBH0vTUp+1bWmVRPziGhcfIwN0QALnTXlJNfz/3Mo0pRFKJk
18nL5enU4L6Tg2xf+JLwCM7ukFF9JgqS8MBWYlVGIFSHqKSBf4cuyw7hNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7NvOYojil99SH1JPXzFELw9Xo7MB8GA1UdIwQY
MBaAFELI1vLhwb7f57uM952yjI7z+3dvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgt
MGZkYjdiY2RmZmQ2LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS81ZWY3NzQtMzA5OS00NTZhLTg3ZTgtMGZkYjdiY2RmZmQ2
LzEvUXNqVzh1SEJ2dF9udTR6M25iS01qdlA3ZDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuaArsP+e
/fUN8mMyT2HhPkX0HgDeXrKrb8OwkJ2NswpGtOM1s4R0ItMrGleNnloTkCt/Fg6K
QL2Bzdq8ZH6cWpagCFLHhRkq9ibAwm29wIa2eFj/rmeDxmZe4lEFQ7xIb80gSYon
kJKiMkVGDxlQFPc/uk2cDxMl5NkLg4+r/8Me7OhWKt49FhVzGvTRTIen4ugkDi3H
H7j8OsrugJNu32TIEBN9RdmymT22V7egy0DtKXRmncK+AD3z2id18zJp6aaMl218
DP8M3eEl8I7CJbW+zGKfv+df8aR787XlG3rnqEhMJ1cS3bRcW0sfOW+nAuRsyEVJ
V3LldmGFn0dsCg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:33 2025 by rpki-client