Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: i9+Be4xhDpzN5/OhYr2tZsNwJGB9kR8qExLxuPeJcmM=
Subject key identifier: A3:D3:6F:3D:8C:BE:E6:B1:F4:D8:C4:BD:F7:22:49:64:5D:6C:20:EA
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 0199FB45DB4D97F2129F28F59CE818E922C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:23 +0000
Manifest this update: Sun 19 Oct 2025 07:01:23 +0000
Manifest next update: Mon 20 Oct 2025 07:01:23 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: PwgItMxoOCdOZaivooXkARYYeX/+MLv6/hObeltY/8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:db:4d:97:f2:12:9f:28:f5:9c:e8:18:e9:22:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Oct 19 07:01:23 2025 GMT
Not After : Oct 20 07:01:23 2025 GMT
Subject: CN=a3d36f3d8cbee6b1f4d8c4bdf72249645d6c20ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:cd:2d:10:64:11:11:4e:0a:d9:ae:fe:bf:
2b:a8:3b:93:33:c3:93:76:40:1f:37:57:fd:4a:06:
35:73:7e:df:05:24:2e:14:2d:7d:86:71:68:34:ba:
f5:6e:d8:5c:4e:ed:81:13:1a:8f:b1:d7:0b:8d:04:
49:56:55:54:11:14:a6:57:1b:e8:a3:b5:fa:2b:33:
ad:3a:36:73:af:fa:80:0a:cc:d1:fc:33:f9:09:8c:
41:d3:34:1a:f6:1f:97:54:5e:bf:47:d3:b8:7b:16:
1a:3a:9d:3f:e6:74:63:62:9f:71:4e:d4:62:50:7b:
61:32:2e:19:0e:10:cf:51:b8:0f:54:45:38:20:6b:
4e:fb:67:bd:1b:30:72:cc:2b:91:d9:97:23:38:fc:
8f:14:dc:c1:f3:fb:b6:bf:a9:62:0e:d0:6e:3d:da:
bf:dd:d5:90:ba:f0:4d:e2:46:bf:ea:7e:c0:5b:e4:
df:65:24:07:7c:fe:cb:37:e6:14:5c:7b:97:94:a3:
a6:0e:57:66:e2:76:b5:ef:5e:54:3c:2f:06:5a:4a:
c0:80:e1:03:01:60:5f:d6:40:0c:c3:21:0d:8b:89:
bf:76:95:a0:e2:eb:13:ea:c8:82:b5:17:3d:b9:de:
a8:ae:45:e1:64:3f:77:01:e9:d0:46:71:92:c5:3f:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D3:6F:3D:8C:BE:E6:B1:F4:D8:C4:BD:F7:22:49:64:5D:6C:20:EA
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9f:e7:0d:36:60:46:55:d1:08:70:55:23:45:c4:2d:bc:90:
e1:f4:96:81:bd:4c:61:08:b0:bf:fe:f1:49:70:06:50:67:2e:
a7:4f:ba:db:e1:e1:43:45:f3:0a:27:dc:b3:ce:6f:c8:cd:44:
3b:9a:22:27:13:bd:f3:7e:0e:6c:31:80:7d:33:b2:ca:12:39:
e2:b4:a0:2f:f1:16:e1:a6:a2:a4:bf:46:82:b9:5d:d7:4a:17:
39:ba:46:5e:8c:03:ca:37:37:3b:a8:84:20:82:6d:eb:ad:53:
dc:d6:af:47:84:14:2f:61:87:9f:a4:6d:e6:d4:5e:8b:35:1d:
8d:88:a8:39:18:67:ee:85:0d:46:e0:b5:b5:ab:f6:37:72:b2:
12:d0:91:f5:9e:77:2a:fa:2e:22:9b:9f:b0:e7:13:0e:39:b3:
a2:94:66:b8:78:5a:f4:fc:7f:9a:f1:e2:c7:d1:f8:9f:52:4c:
18:fa:75:1c:b4:99:8b:b3:85:25:e1:3e:4d:00:ca:03:8a:f6:
12:8e:11:5f:af:c9:f5:25:6a:a2:40:b9:1d:7b:8e:3b:ee:0f:
a6:8c:4d:39:8f:6e:92:17:ee:c5:1a:84:d5:38:8c:15:d3:7e:
35:10:2d:9c:58:a2:53:d7:21:cb:f5:71:c7:a8:6e:2e:e4:2f:
bd:ea:0a:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RdtNl/ISnyj1nOgY6SLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzc3M2FhMWM3MWEwMjI2NTE0NmJhMzM2Y2NjMmU1OGRl
YWRiODgwHhcNMjUxMDE5MDcwMTIzWhcNMjUxMDIwMDcwMTIzWjAzMTEwLwYDVQQD
EyhhM2QzNmYzZDhjYmVlNmIxZjRkOGM0YmRmNzIyNDk2NDVkNmMyMGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMXNLRBkERFOCtmu/r8rqDuTM8OT
dkAfN1f9SgY1c37fBSQuFC19hnFoNLr1bthcTu2BExqPsdcLjQRJVlVUERSmVxvo
o7X6KzOtOjZzr/qACszR/DP5CYxB0zQa9h+XVF6/R9O4exYaOp0/5nRjYp9xTtRi
UHthMi4ZDhDPUbgPVEU4IGtO+2e9GzByzCuR2ZcjOPyPFNzB8/u2v6liDtBuPdq/
3dWQuvBN4ka/6n7AW+TfZSQHfP7LN+YUXHuXlKOmDldm4na1715UPC8GWkrAgOED
AWBf1kAMwyENi4m/dpWg4usT6siCtRc9ud6orkXhZD93AenQRnGSxT8FHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPTbz2Mvuax9NjEvfciSWRdbCDqMB8GA1UdIwQY
MBaAFKt3c6occaAiZRRrozbMwuWN6tuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTIt
ZTZkZmJhMWRmMjMwLzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTItZTZkZmJhMWRmMjMw
LzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZ/nDTZg
RlXRCHBVI0XELbyQ4fSWgb1MYQiwv/7xSXAGUGcup0+62+HhQ0XzCifcs85vyM1E
O5oiJxO9834ObDGAfTOyyhI54rSgL/EW4aaipL9Ggrld10oXObpGXowDyjc3O6iE
IIJt661T3NavR4QUL2GHn6Rt5tReizUdjYioORhn7oUNRuC1tav2N3KyEtCR9Z53
KvouIpufsOcTDjmzopRmuHha9Px/mvHix9H4n1JMGPp1HLSZi7OFJeE+TQDKA4r2
Eo4RX6/J9SVqokC5HXuOO+4PpoxNOY9ukhfuxRqE1TiMFdN+NRAtnFiiU9chy/Vx
x6huLuQvveoK0Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:39 2025 by rpki-client