Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
File: qklDGDthG-Ogd1OCUJSQBIsK1zg.mft (raw, json)
Hash identifier: k0IM4OdmnZ6+oA9deJeXWvi3fWayI5h6jXlk/JIUNyg=
Subject key identifier: D7:D4:F6:35:70:4D:A8:A7:80:F1:5B:13:F1:DF:18:42:A8:D9:C2:0B
Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
Certificate issuer: /CN=aa4943183b611be3a0775382509490048b0ad738
Certificate serial: 0199FCFD4A1843755E55FA817D236D9094A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: _b9uzDBnaBhrr4RiKYd-HrjhIyY.roa (hash: zuVo5YCjE6oxIWEPlMV6dA4fTWapSfHiFlgPsUG/qhk=)
2: qklDGDthG-Ogd1OCUJSQBIsK1zg.crl (hash: V+SITB2NO4OlXmAyDvImEfZXkjU6idZJvEKql7qHFl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4a:18:43:75:5e:55:fa:81:7d:23:6d:90:94:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4943183b611be3a0775382509490048b0ad738
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=d7d4f635704da8a780f15b13f1df1842a8d9c20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:a8:94:06:8e:4b:77:4c:26:fa:80:5e:27:
7c:35:70:c4:07:e0:17:39:9d:fb:cc:06:e4:38:37:
4b:3d:b8:1b:d1:9d:05:f0:df:52:51:d5:c6:d3:c4:
2d:16:2f:00:a4:61:12:bd:52:14:10:2b:53:b6:0e:
79:84:63:8b:fb:3f:c4:7b:a5:63:f8:e4:49:23:f3:
dc:80:a9:c9:3c:3b:01:62:e9:d8:50:33:f6:aa:2f:
dd:5f:aa:d9:fd:1c:81:f5:04:46:26:b1:df:3d:2e:
85:4a:4c:b9:ab:41:d3:3e:38:95:ab:0f:60:a7:a9:
ab:f1:c2:03:9b:0b:8c:73:e3:75:56:94:b7:ef:5d:
0c:6b:10:1e:33:55:ec:84:b9:c3:06:b5:51:d6:99:
ba:f8:33:4c:af:af:3f:27:64:74:3a:36:e1:d9:ab:
2b:de:aa:2f:2e:87:de:13:49:cd:44:9a:87:e8:ec:
14:42:b9:94:29:0b:61:75:d8:98:d6:64:0f:b0:24:
90:5b:2e:46:51:00:56:fe:d3:56:bf:ae:0d:3d:20:
5e:d6:8a:f2:cb:c8:40:28:87:b1:83:13:18:83:f1:
75:27:4d:63:28:01:81:57:7d:8d:e4:b0:1e:17:00:
01:c2:29:0d:be:2f:f5:c5:e3:a4:9e:af:20:31:e3:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D4:F6:35:70:4D:A8:A7:80:F1:5B:13:F1:DF:18:42:A8:D9:C2:0B
X509v3 Authority Key Identifier:
keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:88:95:36:8f:59:8b:ad:68:80:99:88:9d:4d:da:53:fe:48:
21:58:a6:35:2c:bd:5b:3f:35:2d:83:1a:26:58:dc:4e:6c:42:
94:0c:9b:c1:fa:25:ae:58:8c:ad:3b:06:4d:dd:37:23:4f:00:
86:80:99:a8:93:bd:27:d1:61:ef:9e:dc:31:af:81:2c:98:c6:
89:2f:31:dd:eb:9f:8e:73:63:e5:0f:49:ba:1c:51:43:3f:2e:
d6:ce:fd:b3:e1:4b:ad:00:30:35:66:8f:78:e6:41:14:97:a6:
8a:2b:70:38:3d:ad:16:47:90:bc:f6:4a:29:2d:6c:55:aa:00:
ce:2b:ef:45:05:54:80:0d:c0:0e:27:74:0b:21:92:59:5c:fa:
be:5a:cf:2a:fd:4f:96:ad:b9:01:be:84:98:ed:89:4e:d6:da:
1d:c3:e3:61:09:74:b5:09:ed:ce:68:fc:c6:a5:c7:c4:4f:6d:
23:c4:21:e2:b8:99:46:50:dd:b7:eb:27:8e:57:78:1c:3f:79:
ef:3d:88:7c:7b:95:83:65:44:93:13:1c:a7:b7:8b:48:40:f7:
c1:46:55:43:93:74:74:f6:ac:0b:26:89:5c:01:16:26:80:08:
dd:7f:f3:66:80:55:e6:e2:94:3e:3d:cc:4d:60:42:62:40:f1:
8c:50:e6:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/UoYQ3VeVfqBfSNtkJSgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDk0MzE4M2I2MTFiZTNhMDc3NTM4MjUwOTQ5MDA0OGIw
YWQ3MzgwHhcNMjUxMDE5MTUwMTIxWhcNMjUxMDIwMTUwMTIxWjAzMTEwLwYDVQQD
EyhkN2Q0ZjYzNTcwNGRhOGE3ODBmMTViMTNmMWRmMTg0MmE4ZDljMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PSolAaOS3dMJvqAXid8NXDEB+AX
OZ37zAbkODdLPbgb0Z0F8N9SUdXG08QtFi8ApGESvVIUECtTtg55hGOL+z/Ee6Vj
+ORJI/PcgKnJPDsBYunYUDP2qi/dX6rZ/RyB9QRGJrHfPS6FSky5q0HTPjiVqw9g
p6mr8cIDmwuMc+N1VpS3710MaxAeM1XshLnDBrVR1pm6+DNMr68/J2R0Ojbh2asr
3qovLofeE0nNRJqH6OwUQrmUKQthddiY1mQPsCSQWy5GUQBW/tNWv64NPSBe1ory
y8hAKIexgxMYg/F1J01jKAGBV32N5LAeFwABwikNvi/1xeOknq8gMePmdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfU9jVwTaingPFbE/HfGEKo2cILMB8GA1UdIwQY
MBaAFKpJQxg7YRvjoHdTglCUkASLCtc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQt
ZDIyMjc0YmJhNzEzLzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQtZDIyMjc0YmJhNzEz
LzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4iVNo9Z
i61ogJmInU3aU/5IIVimNSy9Wz81LYMaJljcTmxClAybwfolrliMrTsGTd03I08A
hoCZqJO9J9Fh757cMa+BLJjGiS8x3eufjnNj5Q9JuhxRQz8u1s79s+FLrQAwNWaP
eOZBFJemiitwOD2tFkeQvPZKKS1sVaoAzivvRQVUgA3ADid0CyGSWVz6vlrPKv1P
lq25Ab6EmO2JTtbaHcPjYQl0tQntzmj8xqXHxE9tI8Qh4riZRlDdt+snjld4HD95
7z2IfHuVg2VEkxMcp7eLSED3wUZVQ5N0dPasCyaJXAEWJoAI3X/zZoBV5uKUPj3M
TWBCYkDxjFDmkA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:43 2025 by rpki-client