Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: XG8+BNYOnHEn4I2MXdbqdeKlAIKoyLuZCBdZa3RHvRk=
Subject key identifier: ED:D9:5A:2D:BE:19:CB:78:E9:FA:05:31:11:CE:B6:8E:04:62:23:C8
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 0199FD3443E9495977E413E460A724CFEE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 1225
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: JBi6AZkM0ofjLXPGbepqi0PVxgteF/LB6sYQMFm3Oic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:43:e9:49:59:77:e4:13:e4:60:a7:24:cf:ee:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=edd95a2dbe19cb78e9fa053111ceb68e046223c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:8c:50:07:a1:6a:30:69:dd:b5:b7:73:a6:
2c:c6:4e:08:70:62:3f:b2:de:bf:99:08:06:5b:1c:
71:67:29:5d:4a:dd:11:a5:80:7b:f3:34:89:54:34:
b4:d4:d6:61:bc:70:3a:c6:f4:b8:34:a8:97:1f:8c:
fe:a5:c5:0f:fa:ac:4c:cc:62:17:43:87:3a:3f:a5:
7c:6a:33:cc:ba:42:1f:3b:57:e3:8f:af:9b:b9:e7:
4c:e2:1a:a7:74:c2:8e:4f:0b:1e:b2:74:a8:52:09:
7c:52:42:29:44:e0:d2:79:92:77:60:0e:51:3e:79:
0c:4d:ad:f7:4b:ba:95:a9:af:70:63:9d:c9:36:24:
ea:af:a8:8a:62:24:14:fd:9c:28:22:e5:0c:f5:e3:
0b:47:30:20:ae:1b:f0:3a:57:14:ad:20:b4:e5:56:
80:85:3b:63:de:42:93:36:c9:42:6e:46:07:e7:ce:
17:81:76:b6:a4:49:04:9b:db:fb:3a:96:d4:63:05:
be:c3:3b:30:58:76:fa:95:cf:cb:05:af:b8:1e:f3:
c7:99:e8:c5:7c:c6:f7:d5:d8:3c:6d:af:8e:af:ae:
69:86:61:aa:e7:02:6d:fd:6a:f4:c0:d5:76:3b:a6:
3c:cb:56:f3:be:3d:ab:cf:aa:65:da:77:55:96:fa:
49:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D9:5A:2D:BE:19:CB:78:E9:FA:05:31:11:CE:B6:8E:04:62:23:C8
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bd:bf:e6:37:06:fa:09:17:69:c6:f1:5b:9b:ec:20:55:ab:
31:fd:59:11:0a:b7:e9:bb:76:5f:6c:d9:31:36:12:38:c9:a9:
fd:2b:d0:f1:a8:bb:8f:bc:f2:7c:5d:bb:36:5d:65:56:cf:08:
eb:79:48:7e:ae:13:a8:82:a4:2f:b5:a0:85:e5:29:1c:c6:41:
b0:33:37:8a:e2:08:9b:3f:90:38:db:7a:59:bb:23:40:50:e6:
07:26:99:68:23:4b:f4:4f:c4:93:ca:2a:94:c0:65:96:8f:76:
64:a4:5b:2f:3d:f2:a2:8b:fa:58:e0:e5:1e:5b:d0:48:9e:2d:
22:ce:2b:c3:a8:75:ba:82:8b:7b:f1:49:9d:73:ac:de:bf:55:
33:aa:1c:d1:5e:85:b4:75:69:f4:fd:05:7d:cd:c7:b7:41:ad:
ae:ba:5a:a1:7d:15:03:19:66:e8:bb:d7:d5:28:bd:e0:3e:53:
25:64:06:06:13:98:97:9a:c6:2b:8b:24:d5:ad:68:2d:ec:ce:
02:c1:51:67:40:d5:26:15:44:3e:4d:ba:4f:e1:08:c5:e6:6e:
40:8f:c5:e6:30:aa:b6:79:c3:8a:ed:00:c8:b0:c1:b2:ef:e1:
5c:f8:dc:e8:6d:9f:fb:24:b3:af:11:cc:35:48:1d:36:d8:7e:
a4:1e:ab:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NEPpSVl35BPkYKckz+5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYTNjNmNhNDM1ZWJkYmY5NmZmZmE0YzVkOThlNDYwMDgy
OGY3MTIwHhcNMjUxMDE5MTYwMTI0WhcNMjUxMDIwMTYwMTI0WjAzMTEwLwYDVQQD
EyhlZGQ5NWEyZGJlMTljYjc4ZTlmYTA1MzExMWNlYjY4ZTA0NjIyM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jKMUAehajBp3bW3c6Ysxk4IcGI/
st6/mQgGWxxxZyldSt0RpYB78zSJVDS01NZhvHA6xvS4NKiXH4z+pcUP+qxMzGIX
Q4c6P6V8ajPMukIfO1fjj6+buedM4hqndMKOTwsesnSoUgl8UkIpRODSeZJ3YA5R
PnkMTa33S7qVqa9wY53JNiTqr6iKYiQU/ZwoIuUM9eMLRzAgrhvwOlcUrSC05VaA
hTtj3kKTNslCbkYH584XgXa2pEkEm9v7OpbUYwW+wzswWHb6lc/LBa+4HvPHmejF
fMb31dg8ba+Or65phmGq5wJt/Wr0wNV2O6Y8y1bzvj2rz6pl2ndVlvpJ3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3ZWi2+Gct46foFMRHOto4EYiPIMB8GA1UdIwQY
MBaAFHKjxspDXr2/lv/6TF2Y5GAIKPcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWIt
Y2ViMjFiOGU4MzJiLzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9lZDE1OTQtMmIzZi00OTYyLWFjYWItY2ViMjFiOGU4MzJi
LzEvY3FQR3lrTmV2Yi1XX19wTVhaamtZQWdvOXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAb2/5jcG
+gkXacbxW5vsIFWrMf1ZEQq36bt2X2zZMTYSOMmp/SvQ8ai7j7zyfF27Nl1lVs8I
63lIfq4TqIKkL7WgheUpHMZBsDM3iuIImz+QONt6WbsjQFDmByaZaCNL9E/Ek8oq
lMBllo92ZKRbLz3yoov6WODlHlvQSJ4tIs4rw6h1uoKLe/FJnXOs3r9VM6oc0V6F
tHVp9P0Ffc3Ht0GtrrpaoX0VAxlm6LvX1Si94D5TJWQGBhOYl5rGK4sk1a1oLezO
AsFRZ0DVJhVEPk26T+EIxeZuQI/F5jCqtnnDiu0AyLDBsu/hXPjc6G2f+ySzrxHM
NUgdNth+pB6r2A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:15 2025 by rpki-client