
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File: qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier: 7sTGEBf+2pzbvVmeq0vtxrX33liBMbSEKIFR+iKnwkI=
Subject key identifier: A8:B8:E4:D5:7C:53:74:55:3B:EB:44:E2:D6:1D:1A:A2:97:FD:2A:FD
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer: /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial: 019A003540C754A1029D592840995F4A3EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number: 0C3F
Signing time: Mon 20 Oct 2025 06:01:21 +0000
Manifest this update: Mon 20 Oct 2025 06:01:21 +0000
Manifest next update: Tue 21 Oct 2025 06:01:21 +0000
Files and hashes: 1: FHgmJVzT42MAfIzapVC9e2NA_iY.roa (hash: ZFuf9CA7YgoKL9WKUlfIU4bCNAlr9XJKo81l94myN/w=)
2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: itz+ehlk2JbXeYXuKU/VcTLbDMBNy30poNbBwgxuLhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:40:c7:54:a1:02:9d:59:28:40:99:5f:4a:3e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Validity
Not Before: Oct 20 06:01:21 2025 GMT
Not After : Oct 21 06:01:21 2025 GMT
Subject: CN=a8b8e4d57c5374553beb44e2d61d1aa297fd2afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b1:bd:f7:cb:47:8e:f2:ed:43:92:19:7c:39:
a0:c4:e2:4c:e8:c2:6b:81:96:fb:a3:95:fa:bc:b7:
70:fe:23:fe:ee:f8:59:09:10:1d:58:8e:bf:fc:2a:
57:fd:e6:ed:0b:9c:cf:8f:48:ed:d9:69:d1:e4:bc:
6b:4c:2f:f0:8d:f0:d4:a8:57:1f:5c:98:79:02:d8:
30:d3:6a:53:54:b8:33:78:50:67:58:72:2d:3d:65:
9f:13:f1:6f:4e:69:e1:c6:a4:aa:a0:cc:53:c0:01:
f0:2b:c3:35:6e:93:af:23:54:c7:e9:88:9b:4f:15:
13:3a:97:1b:b9:0b:21:8d:46:c4:82:33:35:ed:cc:
3b:be:a4:02:77:91:b2:06:73:e6:3d:31:24:85:1c:
59:18:d5:d3:67:3b:87:6a:ff:0a:f2:b2:fe:23:c4:
10:83:c4:37:90:ae:97:00:eb:aa:95:b8:18:73:25:
cc:56:f0:da:de:af:3b:af:60:1c:64:f1:0e:7a:2e:
f6:fa:9d:42:38:20:38:59:b7:db:a8:44:37:6f:03:
e8:ce:0c:75:90:0e:b1:d5:c4:ff:e4:af:c2:1b:73:
3f:85:96:5f:a8:0d:0d:50:8b:a3:15:68:87:bd:f8:
b3:c1:93:9d:76:98:3b:ac:4b:c1:ac:57:9a:9d:f3:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B8:E4:D5:7C:53:74:55:3B:EB:44:E2:D6:1D:1A:A2:97:FD:2A:FD
X509v3 Authority Key Identifier:
keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1c:92:be:e5:a9:7d:7b:55:bb:8c:fd:97:3a:67:dd:50:34:
03:15:8e:50:7b:ab:5e:7c:8a:3b:c9:e3:26:8a:b9:4f:9e:d5:
61:7b:97:3a:67:95:fe:cd:bf:26:c4:40:df:ab:13:d1:69:84:
45:d2:4c:47:aa:64:21:e7:19:46:e5:ba:78:4d:55:1d:00:af:
66:18:cb:48:93:b9:26:68:34:5a:1a:ae:44:a8:ee:d5:af:b9:
44:b7:13:96:72:ba:22:3a:3f:2d:d1:ca:ef:7a:9d:a3:c9:fb:
b7:77:ba:71:ba:90:bf:12:80:42:8c:ef:51:62:3b:d5:74:01:
d1:6f:7e:6a:a5:d0:5e:f7:59:4c:94:ab:ef:fa:a4:01:1f:3e:
2e:99:de:9c:77:a5:c0:25:ee:92:05:b6:66:1d:60:6e:85:72:
86:7a:3b:f4:16:2e:c3:c7:a9:4d:d0:16:93:ad:3c:49:26:e6:
97:a7:13:91:07:cb:6e:4b:1d:5a:7b:c1:65:93:0a:e7:8a:67:
0b:0e:e1:81:3b:a2:d8:83:01:51:81:30:d0:55:e2:9f:97:20:
77:ae:fd:99:42:69:96:a0:42:4c:a7:e1:60:6a:a7:4a:0f:70:
78:71:28:59:cc:f6:a2:51:42:86:48:b2:cb:a9:c3:96:11:af:
d6:5a:00:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANUDHVKECnVkoQJlfSj6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzA4NGEwOWVkZGNmNTU2ZDE5YjNiNzM1NWM5ZGVmZTBh
Mjc4ZjUwHhcNMjUxMDIwMDYwMTIxWhcNMjUxMDIxMDYwMTIxWjAzMTEwLwYDVQQD
EyhhOGI4ZTRkNTdjNTM3NDU1M2JlYjQ0ZTJkNjFkMWFhMjk3ZmQyYWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bG998tHjvLtQ5IZfDmgxOJM6MJr
gZb7o5X6vLdw/iP+7vhZCRAdWI6//CpX/ebtC5zPj0jt2WnR5LxrTC/wjfDUqFcf
XJh5Atgw02pTVLgzeFBnWHItPWWfE/FvTmnhxqSqoMxTwAHwK8M1bpOvI1TH6Yib
TxUTOpcbuQshjUbEgjM17cw7vqQCd5GyBnPmPTEkhRxZGNXTZzuHav8K8rL+I8QQ
g8Q3kK6XAOuqlbgYcyXMVvDa3q87r2AcZPEOei72+p1COCA4WbfbqEQ3bwPozgx1
kA6x1cT/5K/CG3M/hZZfqA0NUIujFWiHvfizwZOddpg7rEvBrFeanfOWOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi45NV8U3RVO+tE4tYdGqKX/Sr9MB8GA1UdIwQY
MBaAFKgwhKCe3c9VbRmztzVcne/gonj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMjE3ZTYtZDJjMy00NmY4LThlNDkt
M2YxNDM5YTE1ZjFiLzEvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wMjE3ZTYtZDJjMy00NmY4LThlNDktM2YxNDM5YTE1ZjFi
LzEvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRySvuWp
fXtVu4z9lzpn3VA0AxWOUHurXnyKO8njJoq5T57VYXuXOmeV/s2/JsRA36sT0WmE
RdJMR6pkIecZRuW6eE1VHQCvZhjLSJO5Jmg0WhquRKju1a+5RLcTlnK6Ijo/LdHK
73qdo8n7t3e6cbqQvxKAQozvUWI71XQB0W9+aqXQXvdZTJSr7/qkAR8+LpnenHel
wCXukgW2Zh1gboVyhno79BYuw8epTdAWk608SSbml6cTkQfLbksdWnvBZZMK54pn
Cw7hgTui2IMBUYEw0FXin5cgd679mUJplqBCTKfhYGqnSg9weHEoWcz2olFChkiy
y6nDlhGv1loAAw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:26 2025 by rpki-client