Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: rKCXzdS4Hw7XHamLE52xteldKbIBhJJ+L6vWKW6BNvo=
Subject key identifier: 24:F4:24:77:A0:67:2A:29:C7:60:42:B0:94:5B:74:15:9E:82:95:A4
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 0199FDD9DDFA691869E396BC9E39203DC320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 05D7
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: g8E/wfQPfby1sFVRGjRsYJkUMN+MmmjPZgSk1wOZGjk=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:dd:fa:69:18:69:e3:96:bc:9e:39:20:3d:c3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=24f42477a0672a29c76042b0945b74159e8295a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:77:42:1a:2a:b4:a6:af:eb:c5:5d:7a:0e:ae:
41:60:d0:6f:1d:c0:25:7b:a5:9f:5f:31:00:fe:0e:
9c:aa:4c:62:44:ce:b0:3c:65:06:6a:46:c3:c2:07:
d5:20:d8:3e:52:7c:cd:72:86:67:e9:04:3e:4c:5f:
0a:53:28:11:d4:ce:4e:59:82:b8:96:57:e5:b7:ee:
95:4a:1b:aa:7e:2c:2e:0e:0c:4f:57:d9:71:90:66:
65:3a:86:5e:75:29:c7:e6:c1:83:12:b6:03:00:d0:
c0:4a:37:b4:a0:4d:a4:9f:c5:88:8d:bd:33:62:ea:
df:cc:05:d8:7c:1f:93:f6:07:65:2f:06:09:4a:51:
26:73:3a:63:59:5d:5c:79:ef:b7:25:10:68:02:27:
65:dc:56:0a:c4:ae:87:e6:ab:ed:0b:d5:00:d2:6f:
b4:5c:20:ad:4f:e2:41:89:be:6c:69:4a:50:5a:9f:
09:73:07:e2:e2:5b:2a:29:1b:c5:2c:23:25:c6:05:
e2:83:30:bc:3b:bb:7f:a7:ac:65:f1:b3:36:97:0a:
58:a7:e0:44:53:49:c2:7f:9d:04:66:ce:b1:48:8f:
f2:3f:64:12:ce:b9:34:7e:33:e4:75:13:8f:44:4c:
1d:d3:7c:13:91:f0:d6:df:38:fe:5d:09:e7:35:e2:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F4:24:77:A0:67:2A:29:C7:60:42:B0:94:5B:74:15:9E:82:95:A4
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b4:02:ba:ea:00:7c:cf:3f:4d:75:cb:63:c8:ca:ff:8e:0f:
9d:57:4b:7e:bf:61:ae:35:d1:01:60:c8:cc:24:f3:71:e1:72:
69:e5:af:38:89:43:e3:df:b9:bb:b1:4d:06:e4:da:36:e1:8f:
c3:4f:00:06:50:1f:78:33:de:25:6d:6f:c9:eb:92:a8:32:1b:
21:9c:23:6a:aa:11:09:26:59:36:81:aa:ff:7c:a7:5f:49:5f:
ad:62:7c:ad:72:a8:a6:f5:7d:e1:fb:18:15:0d:34:6d:db:61:
50:1f:c2:4a:4a:85:de:7d:21:bc:f3:34:ed:4f:bc:bf:32:4e:
4a:08:7c:a2:4c:15:b8:74:5d:2f:93:2e:08:78:2d:50:a9:56:
a5:2b:d2:85:77:5c:84:7d:e1:fb:cf:10:16:d1:31:d8:bf:a9:
7a:6e:48:96:96:ec:19:10:42:7b:3e:1b:5d:9b:b1:32:2c:53:
06:b7:99:79:41:56:c5:01:f8:c1:93:e2:40:68:bc:78:58:80:
b8:73:e3:78:f7:c9:0c:c7:25:12:b6:4a:aa:53:e0:a0:63:8f:
0f:e7:a1:49:ca:e6:13:3f:b3:13:4b:b9:8f:9a:e8:65:70:dc:
42:88:32:72:ee:af:a4:06:83:d9:fc:89:f5:10:d1:da:c6:fd:
4a:a1:3e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92d36aRhp45a8njkgPcMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOWE4MmJlMWUxNjQyMmY5YTg4NTQ5YWY2ZDU0MjQ4MWQ2
OTFhYzkwHhcNMjUxMDE5MTkwMjE3WhcNMjUxMDIwMTkwMjE3WjAzMTEwLwYDVQQD
EygyNGY0MjQ3N2EwNjcyYTI5Yzc2MDQyYjA5NDViNzQxNTllODI5NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHdCGiq0pq/rxV16Dq5BYNBvHcAl
e6WfXzEA/g6cqkxiRM6wPGUGakbDwgfVINg+UnzNcoZn6QQ+TF8KUygR1M5OWYK4
llflt+6VShuqfiwuDgxPV9lxkGZlOoZedSnH5sGDErYDANDASje0oE2kn8WIjb0z
YurfzAXYfB+T9gdlLwYJSlEmczpjWV1cee+3JRBoAidl3FYKxK6H5qvtC9UA0m+0
XCCtT+JBib5saUpQWp8Jcwfi4lsqKRvFLCMlxgXigzC8O7t/p6xl8bM2lwpYp+BE
U0nCf50EZs6xSI/yP2QSzrk0fjPkdROPREwd03wTkfDW3zj+XQnnNeK/jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCT0JHegZyopx2BCsJRbdBWegpWkMB8GA1UdIwQY
MBaAFEGagr4eFkIvmohUmvbVQkgdaRrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MDAzYmQtNDk0ZC00MjQ2LWJlOTQt
Yzg2NTlmNzZhMmVhLzEvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80MDAzYmQtNDk0ZC00MjQ2LWJlOTQtYzg2NTlmNzZhMmVh
LzEvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLQCuuoA
fM8/TXXLY8jK/44PnVdLfr9hrjXRAWDIzCTzceFyaeWvOIlD49+5u7FNBuTaNuGP
w08ABlAfeDPeJW1vyeuSqDIbIZwjaqoRCSZZNoGq/3ynX0lfrWJ8rXKopvV94fsY
FQ00bdthUB/CSkqF3n0hvPM07U+8vzJOSgh8okwVuHRdL5MuCHgtUKlWpSvShXdc
hH3h+88QFtEx2L+pem5IlpbsGRBCez4bXZuxMixTBreZeUFWxQH4wZPiQGi8eFiA
uHPjePfJDMclErZKqlPgoGOPD+ehScrmEz+zE0u5j5roZXDcQogycu6vpAaD2fyJ
9RDR2sb9SqE+cA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:02 2025 by rpki-client