Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: R4BxJ+ZNR1hnCNwdsNt0BDTU3J/sKIKC9SQkgaHxAhY=
Subject key identifier: 96:37:82:3B:B5:50:DA:4A:CD:79:A1:87:03:A7:05:88:02:34:05:7B
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 0199FA6A6F3ABC8E9398F2B4348F79E3B771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 35
Signing time: Sun 19 Oct 2025 03:01:43 +0000
Manifest this update: Sun 19 Oct 2025 03:01:43 +0000
Manifest next update: Mon 20 Oct 2025 03:01:43 +0000
Files and hashes: 1: CxgM5umcJQIKAphd4HGRMxjPCiQ.roa (hash: A0nE+ddeI2g2MvTBC556Td71a5D11i+c62doMFlZiC8=)
2: JknyP3Ybin2U1sEXva4KCDR1c1I.roa (hash: O0vUT6Dy38kn7d3i/5/I+631QCA6tRSEMUbIaeBWKKg=)
3: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: U6vQR80hP5dxPagf+YJZwKWk8VbtVkjDWlWzdUD/WyU=)
4: hraQuSPXm_BKduHB1VDVz3ZUcQY.roa (hash: WS2hCjy7E85ll6h/ANkIKpGGT1mve9bfebhKK3l26Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:6f:3a:bc:8e:93:98:f2:b4:34:8f:79:e3:b7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Oct 19 03:01:43 2025 GMT
Not After : Oct 20 03:01:43 2025 GMT
Subject: CN=9637823bb550da4acd79a18703a705880234057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:1b:21:aa:d6:61:0f:d6:15:8c:5a:1d:69:
0d:94:9f:e7:49:f7:50:1b:c8:8c:44:09:10:02:cc:
9e:96:01:c4:99:fa:0e:62:4e:07:cf:0b:85:02:f4:
f3:7e:2a:41:c1:0c:d1:c5:0b:77:d2:f5:b0:55:22:
e4:07:67:4b:35:e2:43:04:2e:06:cd:4f:d7:09:48:
b0:2b:0c:b2:72:a2:5c:b0:50:cf:52:04:9a:93:2a:
7c:7c:fe:49:f5:a7:0d:b2:5d:6c:7d:3f:c1:37:1f:
53:2e:b4:80:74:99:e6:84:68:e9:06:f1:f9:20:07:
92:d6:97:54:f3:74:93:c1:d4:da:b5:0e:31:0c:ca:
7b:81:35:ff:21:c2:65:20:88:a2:e3:7e:a7:e4:6e:
13:61:f5:be:50:b0:72:35:7e:80:e1:5b:41:5c:75:
ba:17:b8:80:6a:50:91:f6:8a:f0:df:08:17:5c:44:
69:60:f9:37:80:ea:b5:86:84:84:d2:c8:80:38:7c:
db:dc:ac:ce:0d:6e:66:c7:58:cd:a7:ac:9f:36:f0:
31:6a:08:7e:25:e1:ac:ab:e7:55:a1:90:97:fd:a4:
64:1f:02:4b:0a:2d:f0:ae:69:a3:98:78:17:8e:b4:
f6:5d:1a:25:58:a5:0c:a3:63:eb:b8:c9:92:7f:fb:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:82:3B:B5:50:DA:4A:CD:79:A1:87:03:A7:05:88:02:34:05:7B
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e5:a0:61:4a:e7:c3:bb:99:c1:07:44:7a:1b:95:8f:b0:33:
7c:80:fe:9f:50:a2:73:d8:84:2c:93:76:54:d5:20:f6:9c:c9:
66:41:7a:a4:0d:69:bf:d9:4b:4d:c0:56:7a:42:12:6f:ab:c1:
43:67:d6:64:93:38:07:f6:8c:1a:e7:17:86:b6:cd:fa:72:72:
6c:c0:d4:0a:aa:0b:d7:b2:1b:d8:73:62:59:14:97:64:f8:95:
93:82:8e:ac:99:1a:96:40:45:53:4b:67:eb:54:79:31:f3:fe:
62:6f:5f:f2:68:75:fd:11:ed:3d:d1:8f:16:ff:4f:9e:e7:fa:
53:88:99:ab:b6:e4:c8:0c:45:fe:cd:f8:4c:dc:30:0f:17:30:
f1:d2:57:90:a1:3c:fc:8a:5a:a5:28:b3:0c:08:b8:a5:79:53:
b9:00:ce:7e:c0:40:8e:a8:88:9a:10:23:08:77:fa:3f:03:8e:
8f:f5:91:97:05:7f:ef:b8:11:90:3c:36:47:d4:6a:f6:d1:11:
f2:6e:e7:f9:c3:cf:3a:93:eb:24:78:a8:03:3f:85:d8:13:93:
c0:03:89:d6:6f:00:24:e1:6d:a5:a2:55:de:54:73:e7:31:ae:
76:01:65:6a:58:d3:bf:3c:a3:19:59:41:e5:c4:a0:2e:d0:d0:
25:cd:3a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6am86vI6TmPK0NI9547dxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZjA2YzM2OTg3MjRiMzdmZTFhMTcxMTQxN2RiZDg4ZWJi
ZjBhOTEwHhcNMjUxMDE5MDMwMTQzWhcNMjUxMDIwMDMwMTQzWjAzMTEwLwYDVQQD
Eyg5NjM3ODIzYmI1NTBkYTRhY2Q3OWExODcwM2E3MDU4ODAyMzQwNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdUbIarWYQ/WFYxaHWkNlJ/nSfdQ
G8iMRAkQAsyelgHEmfoOYk4HzwuFAvTzfipBwQzRxQt30vWwVSLkB2dLNeJDBC4G
zU/XCUiwKwyycqJcsFDPUgSakyp8fP5J9acNsl1sfT/BNx9TLrSAdJnmhGjpBvH5
IAeS1pdU83STwdTatQ4xDMp7gTX/IcJlIIii436n5G4TYfW+ULByNX6A4VtBXHW6
F7iAalCR9orw3wgXXERpYPk3gOq1hoSE0siAOHzb3KzODW5mx1jNp6yfNvAxagh+
JeGsq+dVoZCX/aRkHwJLCi3wrmmjmHgXjrT2XRolWKUMo2PruMmSf/t9hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJY3gju1UNpKzXmhhwOnBYgCNAV7MB8GA1UdIwQY
MBaAFEPwbDaYcks3/hoXEUF9vYjrvwqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjct
MGUxZWZkNWEzNzQ2LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjctMGUxZWZkNWEzNzQ2
LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeWgYUrn
w7uZwQdEehuVj7AzfID+n1Cic9iELJN2VNUg9pzJZkF6pA1pv9lLTcBWekISb6vB
Q2fWZJM4B/aMGucXhrbN+nJybMDUCqoL17Ib2HNiWRSXZPiVk4KOrJkalkBFU0tn
61R5MfP+Ym9f8mh1/RHtPdGPFv9Pnuf6U4iZq7bkyAxF/s34TNwwDxcw8dJXkKE8
/IpapSizDAi4pXlTuQDOfsBAjqiImhAjCHf6PwOOj/WRlwV/77gRkDw2R9Rq9tER
8m7n+cPPOpPrJHioAz+F2BOTwAOJ1m8AJOFtpaJV3lRz5zGudgFlaljTvzyjGVlB
5cSgLtDQJc068Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:26 2025 by rpki-client