Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
File: QTsVW4BGJkf4WUaogk0in-6q--Y.mft (raw, json)
Hash identifier: WCkQ9wDGSuCKYC4FQ3qEF7eESHIQXnCSRz6KElLMpAY=
Subject key identifier: EF:0D:B8:C1:6A:A7:65:84:A3:D4:53:81:06:F5:A0:4B:36:4E:85:5A
Authority key identifier: 41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6
Certificate issuer: /CN=413b155b80462647f85946a8824d229feeaafbe6
Certificate serial: 0199FEB4CD89554D5AE7FCD78C37D8F118BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
Manifest number: 0265
Signing time: Sun 19 Oct 2025 23:01:25 +0000
Manifest this update: Sun 19 Oct 2025 23:01:25 +0000
Manifest next update: Mon 20 Oct 2025 23:01:25 +0000
Files and hashes: 1: QTsVW4BGJkf4WUaogk0in-6q--Y.crl (hash: tdFrVNZe4SoRtx/hwrkGBrDg/1+TEZ+KLoweVHyw8bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:cd:89:55:4d:5a:e7:fc:d7:8c:37:d8:f1:18:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413b155b80462647f85946a8824d229feeaafbe6
Validity
Not Before: Oct 19 23:01:25 2025 GMT
Not After : Oct 20 23:01:25 2025 GMT
Subject: CN=ef0db8c16aa76584a3d4538106f5a04b364e855a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:ae:37:03:08:c6:ea:4d:28:87:91:92:f9:
e7:3e:b9:1c:2f:cc:b7:b0:5c:55:2f:b1:db:e5:d5:
9b:66:07:62:88:7e:17:9d:f8:1d:21:79:70:39:80:
99:8f:a8:ab:3e:5d:08:d0:cb:f0:53:23:01:09:e6:
d6:ae:b9:a9:1a:10:87:cf:3c:4a:83:2c:a4:ed:bc:
d9:4e:71:7e:ea:0c:51:d3:d6:ab:f5:65:81:b2:9e:
7d:af:da:fe:05:0e:3b:50:e5:c9:eb:29:99:98:d9:
19:dd:7b:63:f0:aa:d5:d5:32:02:bc:9d:79:17:0c:
a4:99:5a:00:a1:14:7e:f4:dc:f8:13:fa:96:af:86:
96:b8:64:79:8a:87:ec:c4:84:57:4c:da:ad:49:0f:
8d:93:4d:b0:6d:e3:85:d1:c2:8f:13:4e:5b:20:2e:
4c:f5:d2:40:ad:a6:24:2c:5f:31:fc:19:25:17:82:
c5:38:95:51:d1:ca:31:96:55:08:59:8f:a2:a1:a6:
2b:d2:de:c1:b4:5d:22:f6:01:66:d2:d6:38:da:cd:
24:02:7e:60:87:a3:7a:7e:0d:f4:4c:d7:8d:46:a2:
03:b8:ca:24:11:e8:1e:c4:dd:79:c7:3a:31:2d:d0:
bc:49:be:84:21:16:71:20:b6:bf:33:3b:f0:88:7d:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0D:B8:C1:6A:A7:65:84:A3:D4:53:81:06:F5:A0:4B:36:4E:85:5A
X509v3 Authority Key Identifier:
keyid:41:3B:15:5B:80:46:26:47:F8:59:46:A8:82:4D:22:9F:EE:AA:FB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTsVW4BGJkf4WUaogk0in-6q--Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ed63bf-2b0e-4c9b-98b5-4a251cbec791/1/QTsVW4BGJkf4WUaogk0in-6q--Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b6:86:ef:69:fd:cb:9b:2a:1c:69:24:86:95:22:f7:78:b3:
1b:ef:8f:c3:c4:75:f6:69:fc:1b:47:77:ce:d9:87:2d:18:b0:
a8:70:15:de:a9:88:63:4d:db:05:cd:a8:39:e9:79:2a:70:20:
8e:75:58:8b:63:4a:24:97:64:07:94:0c:75:29:40:10:11:67:
36:b5:2b:b1:b9:9a:17:87:12:d0:a2:0e:c4:8e:20:54:13:69:
52:e3:0c:b6:79:83:34:36:e6:1b:46:76:eb:26:0d:81:02:58:
5c:f5:6a:2d:28:6f:26:65:de:88:71:12:c7:a7:f9:fa:1a:49:
c1:0b:77:28:7b:eb:e4:b4:90:4f:13:61:ae:cc:6e:8a:a3:1d:
7a:d2:1f:18:92:be:8a:5c:d1:6a:58:ca:a5:d6:46:a7:ba:12:
01:50:2b:8a:54:4b:6c:11:e7:f3:38:1c:12:48:43:79:b0:1c:
ea:ad:e1:9d:62:d9:6b:44:4a:08:af:f6:61:67:16:1e:85:4b:
58:94:0f:f2:d9:20:1d:fe:e0:bb:82:28:27:3b:fd:e9:34:b2:
27:82:bc:1e:f0:9d:79:b5:1f:2c:d0:33:92:db:10:7d:e1:71:
d3:28:a1:bb:1b:6b:f9:1c:a4:0d:1c:69:54:5b:47:67:c9:9a:
83:b6:f8:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tM2JVU1a5/zXjDfY8Ri6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxM2IxNTViODA0NjI2NDdmODU5NDZhODgyNGQyMjlmZWVh
YWZiZTYwHhcNMjUxMDE5MjMwMTI1WhcNMjUxMDIwMjMwMTI1WjAzMTEwLwYDVQQD
EyhlZjBkYjhjMTZhYTc2NTg0YTNkNDUzODEwNmY1YTA0YjM2NGU4NTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNquNwMIxupNKIeRkvnnPrkcL8y3
sFxVL7Hb5dWbZgdiiH4XnfgdIXlwOYCZj6irPl0I0MvwUyMBCebWrrmpGhCHzzxK
gyyk7bzZTnF+6gxR09ar9WWBsp59r9r+BQ47UOXJ6ymZmNkZ3Xtj8KrV1TICvJ15
FwykmVoAoRR+9Nz4E/qWr4aWuGR5iofsxIRXTNqtSQ+Nk02wbeOF0cKPE05bIC5M
9dJAraYkLF8x/BklF4LFOJVR0coxllUIWY+ioaYr0t7BtF0i9gFm0tY42s0kAn5g
h6N6fg30TNeNRqIDuMokEegexN15xzoxLdC8Sb6EIRZxILa/MzvwiH2ggQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8NuMFqp2WEo9RTgQb1oEs2ToVaMB8GA1UdIwQY
MBaAFEE7FVuARiZH+FlGqIJNIp/uqvvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9lZDYzYmYtMmIwZS00YzliLTk4YjUt
NGEyNTFjYmVjNzkxLzEvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9lZDYzYmYtMmIwZS00YzliLTk4YjUtNGEyNTFjYmVjNzkx
LzEvUVRzVlc0QkdKa2Y0V1Vhb2drMGluLTZxLS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7aG72n9
y5sqHGkkhpUi93izG++Pw8R19mn8G0d3ztmHLRiwqHAV3qmIY03bBc2oOel5KnAg
jnVYi2NKJJdkB5QMdSlAEBFnNrUrsbmaF4cS0KIOxI4gVBNpUuMMtnmDNDbmG0Z2
6yYNgQJYXPVqLShvJmXeiHESx6f5+hpJwQt3KHvr5LSQTxNhrsxuiqMdetIfGJK+
ilzRaljKpdZGp7oSAVArilRLbBHn8zgcEkhDebAc6q3hnWLZa0RKCK/2YWcWHoVL
WJQP8tkgHf7gu4IoJzv96TSyJ4K8HvCdebUfLNAzktsQfeFx0yihuxtr+RykDRxp
VFtHZ8mag7b4Bg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:31 2025 by rpki-client