Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier: EANK4t+MXZ1h+uHqU2TfUxHdtBQiqbwSAaWE5eCgDyM=
Subject key identifier: 17:F0:35:2E:CA:60:C9:E0:C2:1E:85:43:D6:37:CC:7B:58:71:5D:BB
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 0199FD33E33559573EFC3FD4AA239B32C6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number: 1637
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: AgHRpY0AzMe3pqMq7bNxQxvqGzE4JXGlQzZj8Iuv+ww=)
2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e3:35:59:57:3e:fc:3f:d4:aa:23:9b:32:c6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=17f0352eca60c9e0c21e8543d637cc7b58715dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:dc:70:7b:b5:f6:48:32:3a:88:91:62:1d:
84:b4:66:23:3f:8b:98:f2:22:8f:6a:af:a7:65:c3:
95:9a:ee:7e:68:35:87:ca:16:89:34:c3:0d:47:da:
38:d7:fb:67:21:79:db:31:0a:7c:6d:9d:99:70:d5:
52:d4:0b:db:73:43:2f:f7:75:91:25:8c:6f:ea:9f:
b6:fa:4f:f4:60:1b:a4:84:3b:25:f0:88:3b:fa:38:
f1:b1:12:3f:cf:6e:de:3f:47:b0:18:cf:83:41:85:
47:6e:09:9f:82:7b:05:c8:d3:76:bb:bf:f4:64:e1:
0a:e3:e7:16:23:9d:f9:32:87:17:c2:a8:c8:88:ff:
5c:6f:62:c9:8c:84:7a:00:8d:25:d0:e1:9e:c2:60:
b1:b1:1c:67:bb:be:da:d6:2d:dd:56:26:8b:a4:40:
e8:fe:49:dc:56:fb:54:f0:c2:23:1f:0d:51:85:3a:
9c:01:dd:4d:c1:c4:35:c3:38:4c:b8:c3:bd:be:74:
b0:06:2d:14:b3:db:dd:ad:ef:ee:b6:d5:f1:4d:72:
05:c6:28:b3:8c:69:00:40:18:12:ff:9d:4e:a2:ae:
34:2e:a9:42:d8:87:f2:64:f2:af:e7:db:b6:ee:2d:
76:98:e0:ed:c8:26:0b:30:a3:76:c6:42:f8:01:ea:
a5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F0:35:2E:CA:60:C9:E0:C2:1E:85:43:D6:37:CC:7B:58:71:5D:BB
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f6:32:3f:83:03:cd:c2:da:3f:f1:8d:92:e9:26:5b:5d:f3:
8e:0b:36:69:e9:70:fd:77:bf:71:45:4d:c4:c7:6c:70:86:d7:
ed:98:af:b4:e6:af:56:7f:d7:81:82:ed:7f:b1:30:42:5c:88:
91:02:1c:e9:92:a9:60:2d:2e:1c:e6:cf:85:4b:80:69:73:2c:
d6:a6:0f:67:44:d0:d9:bf:a6:e0:0b:d4:3b:d2:83:78:df:29:
50:06:b7:e4:2f:57:15:17:ca:e2:d5:45:42:bf:90:f7:af:30:
b0:bd:fa:58:a5:82:22:21:e3:09:b5:6e:07:08:6e:0f:af:98:
2f:7f:a7:25:3d:25:b6:28:dc:ec:32:0d:93:03:74:0e:b3:eb:
18:f2:94:5f:93:08:aa:da:7b:b1:e2:18:e0:ad:5c:f8:a2:5c:
a3:1f:d2:90:84:d2:5a:ff:11:94:71:f3:cb:3b:07:83:25:6a:
68:01:a7:ab:e0:c0:6c:37:48:d6:6d:a8:33:6c:da:68:3f:a2:
60:fc:c2:79:2b:b7:ec:04:ad:3a:39:58:0d:26:e3:c8:ec:93:
df:78:b2:4c:de:e5:c5:78:3c:51:07:55:bc:56:17:d6:35:f2:
56:48:b4:3f:da:98:75:b8:43:a9:19:25:77:75:f1:ce:dd:cc:
64:b0:96:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M+M1WVc+/D/UqiObMsbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxODI2ZWU5MDI3MGZkZDE0MjNhZjgwOTA3MjYwMDY3MThk
ZmM2Y2YwHhcNMjUxMDE5MTYwMTAwWhcNMjUxMDIwMTYwMTAwWjAzMTEwLwYDVQQD
EygxN2YwMzUyZWNhNjBjOWUwYzIxZTg1NDNkNjM3Y2M3YjU4NzE1ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMXccHu19kgyOoiRYh2EtGYjP4uY
8iKPaq+nZcOVmu5+aDWHyhaJNMMNR9o41/tnIXnbMQp8bZ2ZcNVS1Avbc0Mv93WR
JYxv6p+2+k/0YBukhDsl8Ig7+jjxsRI/z27eP0ewGM+DQYVHbgmfgnsFyNN2u7/0
ZOEK4+cWI535MocXwqjIiP9cb2LJjIR6AI0l0OGewmCxsRxnu77a1i3dViaLpEDo
/kncVvtU8MIjHw1RhTqcAd1NwcQ1wzhMuMO9vnSwBi0Us9vdre/uttXxTXIFxiiz
jGkAQBgS/51Ooq40LqlC2IfyZPKv59u27i12mODtyCYLMKN2xkL4Aeql0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfwNS7KYMngwh6FQ9Y3zHtYcV27MB8GA1UdIwQY
MBaAFEGCbukCcP3RQjr4CQcmAGcY38bPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEt
ZWU1ODZkMzc1YTU4LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi83YjdjMzYtNjk4ZS00ODNhLWI5NDEtZWU1ODZkMzc1YTU4
LzEvUVlKdTZRSndfZEZDT3ZnSkJ5WUFaeGpmeHM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/YyP4MD
zcLaP/GNkukmW13zjgs2aelw/Xe/cUVNxMdscIbX7ZivtOavVn/XgYLtf7EwQlyI
kQIc6ZKpYC0uHObPhUuAaXMs1qYPZ0TQ2b+m4AvUO9KDeN8pUAa35C9XFRfK4tVF
Qr+Q968wsL36WKWCIiHjCbVuBwhuD6+YL3+nJT0ltijc7DINkwN0DrPrGPKUX5MI
qtp7seIY4K1c+KJcox/SkITSWv8RlHHzyzsHgyVqaAGnq+DAbDdI1m2oM2zaaD+i
YPzCeSu37AStOjlYDSbjyOyT33iyTN7lxXg8UQdVvFYX1jXyVki0P9qYdbhDqRkl
d3Xxzt3MZLCWUw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:02 2025 by rpki-client