Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
File: QfIoYMpivSg4-DKPF4OdHoYI0m0.mft (raw, json)
Hash identifier: D1jq0t837aanmsAdGdHOpyl8FYjYBRUJLagu21ww8yc=
Subject key identifier: 7A:17:14:C4:95:FC:A7:1F:E4:6F:92:B4:49:C8:89:2E:90:E8:D3:61
Authority key identifier: 41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
Certificate issuer: /CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Certificate serial: 0199FB7CB387DD3071C604B37B4356909B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
Manifest number: 02BB
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: QfIoYMpivSg4-DKPF4OdHoYI0m0.crl (hash: TLxskNzzDziav02XSB34R5EkkayWTLjGzFYGl+bFeHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b3:87:dd:30:71:c6:04:b3:7b:43:56:90:9b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=7a1714c495fca71fe46f92b449c8892e90e8d361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:92:8f:da:28:c2:07:fd:2f:03:67:d1:fe:
ab:0b:08:59:87:f4:26:29:fe:3e:fd:3f:c2:72:36:
3f:e5:47:37:78:a6:c8:6f:89:b3:46:0e:6e:c6:40:
6a:78:03:34:ec:88:fa:34:c3:9e:25:25:56:dd:e6:
a3:9e:38:82:46:33:ae:af:7d:3f:7c:24:4a:44:e8:
76:ba:2c:5d:7f:90:90:db:5b:b8:3e:e7:51:f7:48:
32:1e:a7:e8:80:89:0d:65:54:5b:c8:2d:22:54:9a:
e5:74:ec:e4:8c:d7:46:ba:4a:4c:56:e5:14:aa:91:
13:62:72:76:d9:e6:0e:26:b0:fb:7b:6b:51:33:9d:
4b:20:8a:df:49:cc:70:90:02:8e:ae:16:98:f5:92:
96:b1:b5:b0:e8:17:2e:13:27:56:d2:d6:0a:62:c6:
90:4c:06:71:0e:62:a7:bc:5b:cb:61:17:96:e0:bd:
c5:f9:85:da:09:16:d5:78:14:7a:76:7e:f8:0f:c4:
76:aa:16:a2:c9:ef:bc:ea:9a:3f:a6:e0:56:1a:62:
b8:ee:5c:6b:54:a3:f1:53:51:45:7e:1b:a2:e2:d3:
4f:46:35:29:81:18:3c:63:b4:fa:48:2b:47:c5:f7:
93:cc:81:a5:dc:21:c0:47:63:da:db:67:56:b8:2c:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:17:14:C4:95:FC:A7:1F:E4:6F:92:B4:49:C8:89:2E:90:E8:D3:61
X509v3 Authority Key Identifier:
keyid:41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f5:74:35:6a:a2:b1:77:3d:f8:b0:cd:e4:c9:eb:37:70:a4:
9e:99:62:1c:4e:d3:2e:f7:e0:cc:16:16:3a:ef:28:db:08:8e:
bb:31:ab:8e:a2:bc:ee:fd:2a:38:a4:cb:7e:0e:e5:ee:e1:4f:
c4:0a:0b:15:5f:26:c7:17:b3:47:d2:c4:b1:5b:14:55:c3:6e:
e5:cf:ac:d6:1a:ec:63:dc:e1:44:bd:2c:3f:43:b1:04:eb:4a:
7b:0f:12:52:3e:cb:08:0c:d9:7d:a6:05:e9:07:70:00:20:90:
6b:ac:a3:5d:63:90:a8:35:8a:46:c5:61:db:1a:00:3c:af:7f:
a9:4c:36:a5:9f:90:01:84:28:50:3b:0a:f0:88:9f:f3:c5:d3:
6c:e9:5f:55:a5:e4:aa:f5:e2:1e:2a:d7:c9:f5:44:d5:88:17:
d2:0c:f5:a0:01:92:92:e1:f0:28:aa:4c:55:58:66:e5:d9:e1:
40:f5:39:68:58:8b:58:d4:2b:4c:01:95:8a:18:64:4f:a7:4d:
6c:f5:06:8d:98:b7:54:7e:9a:67:0b:56:e7:43:55:49:85:a0:
d6:55:64:21:9a:64:68:2b:1d:3b:0e:23:52:71:e6:62:e0:40:
28:31:5a:68:5a:86:55:d7:51:2f:1a:45:2b:09:c8:e7:aa:85:
91:11:fb:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLOH3TBxxgSze0NWkJtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjIyODYwY2E2MmJkMjgzOGY4MzI4ZjE3ODM5ZDFlODYw
OGQyNmQwHhcNMjUxMDE5MDgwMTE3WhcNMjUxMDIwMDgwMTE3WjAzMTEwLwYDVQQD
Eyg3YTE3MTRjNDk1ZmNhNzFmZTQ2ZjkyYjQ0OWM4ODkyZTkwZThkMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh6Sj9oowgf9LwNn0f6rCwhZh/Qm
Kf4+/T/CcjY/5Uc3eKbIb4mzRg5uxkBqeAM07Ij6NMOeJSVW3eajnjiCRjOur30/
fCRKROh2uixdf5CQ21u4PudR90gyHqfogIkNZVRbyC0iVJrldOzkjNdGukpMVuUU
qpETYnJ22eYOJrD7e2tRM51LIIrfScxwkAKOrhaY9ZKWsbWw6BcuEydW0tYKYsaQ
TAZxDmKnvFvLYReW4L3F+YXaCRbVeBR6dn74D8R2qhaiye+86po/puBWGmK47lxr
VKPxU1FFfhui4tNPRjUpgRg8Y7T6SCtHxfeTzIGl3CHAR2Pa22dWuCy5QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoXFMSV/Kcf5G+StEnIiS6Q6NNhMB8GA1UdIwQY
MBaAFEHyKGDKYr0oOPgyjxeDnR6GCNJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZJb1lNcGl2U2c0LURLUEY0T2RIb1lJMG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82M2E5OTAtMDRiZi00Zjc3LTg0YTEt
ZmFjNjRlMWZiMzQyLzEvUWZJb1lNcGl2U2c0LURLUEY0T2RIb1lJMG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82M2E5OTAtMDRiZi00Zjc3LTg0YTEtZmFjNjRlMWZiMzQy
LzEvUWZJb1lNcGl2U2c0LURLUEY0T2RIb1lJMG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/V0NWqi
sXc9+LDN5MnrN3CknpliHE7TLvfgzBYWOu8o2wiOuzGrjqK87v0qOKTLfg7l7uFP
xAoLFV8mxxezR9LEsVsUVcNu5c+s1hrsY9zhRL0sP0OxBOtKew8SUj7LCAzZfaYF
6QdwACCQa6yjXWOQqDWKRsVh2xoAPK9/qUw2pZ+QAYQoUDsK8Iif88XTbOlfVaXk
qvXiHirXyfVE1YgX0gz1oAGSkuHwKKpMVVhm5dnhQPU5aFiLWNQrTAGVihhkT6dN
bPUGjZi3VH6aZwtW50NVSYWg1lVkIZpkaCsdOw4jUnHmYuBAKDFaaFqGVddRLxpF
KwnI56qFkRH7ig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:33 2025 by rpki-client