Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: lil5olKbJGa16Ofup6KQ74MXrA+IAhiQ6lmCqhUb9wU=
Subject key identifier: E4:01:7E:4A:C3:A0:14:4F:12:42:22:4F:7E:92:B1:53:0C:A4:32:A0
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 0199FB45AE527600F092588112CECB0FF9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1424
Signing time: Sun 19 Oct 2025 07:01:11 +0000
Manifest this update: Sun 19 Oct 2025 07:01:11 +0000
Manifest next update: Mon 20 Oct 2025 07:01:11 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: AeUAh6+/aKnmSuNGAnAHTUHBOcTfH/PYJUHLJQBJ/Hk=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ae:52:76:00:f0:92:58:81:12:ce:cb:0f:f9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Oct 19 07:01:11 2025 GMT
Not After : Oct 20 07:01:11 2025 GMT
Subject: CN=e4017e4ac3a0144f1242224f7e92b1530ca432a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:74:40:60:1f:2a:f8:1e:cd:63:99:a9:66:
8f:69:ba:55:67:22:ec:7f:a5:56:b3:cf:6b:e6:f8:
ed:93:b0:7f:95:4d:fb:0d:50:6d:f3:e3:f2:bb:9f:
f9:a4:e5:42:0f:33:9e:0e:c6:46:86:ad:a4:c8:84:
88:1f:8f:80:a2:68:4a:db:92:14:3e:e2:a7:fb:09:
ed:f2:d4:03:bf:50:32:26:d0:03:4a:88:cf:2f:38:
f4:ee:88:b5:ec:75:84:a9:ef:60:99:af:83:ee:40:
c2:69:77:d5:4f:ad:3f:e2:39:c0:08:31:d3:ed:1a:
a0:50:ed:3e:af:bd:76:fd:54:70:4e:51:c0:6e:10:
5b:d5:24:9b:ad:c3:9c:5e:4b:34:a3:89:3c:99:26:
21:b9:ef:ce:ec:2b:bb:e1:0c:c2:88:4c:f1:38:25:
9c:98:dc:06:f7:e7:05:84:50:07:f2:02:78:a7:db:
a3:44:10:a3:e5:56:47:f0:1d:de:48:d7:27:1a:e9:
d3:aa:6e:c4:c7:da:1f:58:fb:32:00:0d:c3:df:cb:
75:6d:56:5f:88:a9:70:74:cc:d7:7a:24:f1:86:0c:
9b:a5:75:23:71:51:fa:06:7e:17:aa:a6:49:cb:c3:
72:c3:a4:80:c4:6e:17:3a:dc:40:da:97:dc:5a:e3:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:01:7E:4A:C3:A0:14:4F:12:42:22:4F:7E:92:B1:53:0C:A4:32:A0
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:08:e6:33:a3:51:a3:08:11:92:4d:87:c8:71:a0:1e:72:d3:
fa:e2:bc:69:1a:b9:82:69:2a:c1:9c:ee:44:c5:98:da:70:f2:
3b:f6:83:84:32:15:c2:67:c4:85:92:bd:6d:d4:2b:cb:63:d2:
fa:55:97:3d:61:56:39:57:91:ef:ea:c2:ce:b9:e1:3c:d3:54:
61:d8:73:f2:de:d8:ca:7d:b0:51:71:27:d6:bf:4c:0e:fe:53:
af:66:2d:34:40:63:2e:70:91:26:04:68:b6:95:9f:d4:bb:60:
74:fd:6a:73:bc:0e:41:3c:d1:0c:89:c1:5f:59:aa:66:31:1c:
65:e3:30:c5:6c:09:bc:8e:4c:2b:af:a1:83:19:0b:52:b9:db:
59:92:b3:b6:a0:dd:95:f6:0d:f2:07:39:0c:0b:f6:6c:23:91:
a7:8a:b8:07:73:49:c6:fc:b2:a6:df:85:b1:6e:21:ae:23:ff:
e4:46:3f:02:02:29:67:4a:bc:20:bf:a8:bd:66:76:20:60:4e:
1d:93:89:ea:b3:1e:92:83:ad:29:7b:86:26:97:7d:d5:3c:79:
ff:17:b1:ff:ca:79:c7:c0:2c:15:c9:30:e5:df:be:4e:a7:34:
e7:de:f3:57:50:2a:fb:4b:e1:c3:c5:9d:19:85:a9:59:60:1f:
d1:4d:e2:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Ra5SdgDwkliBEs7LD/mmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODVjZGJkZGZkN2QxMzE2ODQ1YmViNGY3Mzk4ZjNjZTY0
ZmFjZDAwHhcNMjUxMDE5MDcwMTExWhcNMjUxMDIwMDcwMTExWjAzMTEwLwYDVQQD
EyhlNDAxN2U0YWMzYTAxNDRmMTI0MjIyNGY3ZTkyYjE1MzBjYTQzMmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB10QGAfKvgezWOZqWaPabpVZyLs
f6VWs89r5vjtk7B/lU37DVBt8+Pyu5/5pOVCDzOeDsZGhq2kyISIH4+AomhK25IU
PuKn+wnt8tQDv1AyJtADSojPLzj07oi17HWEqe9gma+D7kDCaXfVT60/4jnACDHT
7RqgUO0+r712/VRwTlHAbhBb1SSbrcOcXks0o4k8mSYhue/O7Cu74QzCiEzxOCWc
mNwG9+cFhFAH8gJ4p9ujRBCj5VZH8B3eSNcnGunTqm7Ex9ofWPsyAA3D38t1bVZf
iKlwdMzXeiTxhgybpXUjcVH6Bn4XqqZJy8Nyw6SAxG4XOtxA2pfcWuO/bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQBfkrDoBRPEkIiT36SsVMMpDKgMB8GA1UdIwQY
MBaAFKiFzb3f19ExaEW+tPc5jzzmT6zQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEt
ZjQ4Mjc4MDBiMGM4LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9iM2E1NzYtNTBjYi00ODY2LWJlODEtZjQ4Mjc4MDBiMGM4
LzEvcUlYTnZkX1gwVEZvUmI2MDl6bVBQT1pQck5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwjmM6NR
owgRkk2HyHGgHnLT+uK8aRq5gmkqwZzuRMWY2nDyO/aDhDIVwmfEhZK9bdQry2PS
+lWXPWFWOVeR7+rCzrnhPNNUYdhz8t7Yyn2wUXEn1r9MDv5Tr2YtNEBjLnCRJgRo
tpWf1LtgdP1qc7wOQTzRDInBX1mqZjEcZeMwxWwJvI5MK6+hgxkLUrnbWZKztqDd
lfYN8gc5DAv2bCORp4q4B3NJxvyypt+FsW4hriP/5EY/AgIpZ0q8IL+ovWZ2IGBO
HZOJ6rMekoOtKXuGJpd91Tx5/xex/8p5x8AsFckw5d++Tqc0597zV1Aq+0vhw8Wd
GYWpWWAf0U3iBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:57 2025 by rpki-client