
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json)
Hash identifier: 8yZN17wp7lF+qk4gTE13Yd9UHVB5j26zfDfZ3KXeh4I=
Subject key identifier: 78:1E:0C:0F:9D:8C:1E:22:ED:B3:BD:C9:98:58:F4:FD:D6:5E:34:6C
Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Certificate serial: 0199FC8FBCA75818F561D688E05FF18F8C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
Manifest number: 02B1
Signing time: Sun 19 Oct 2025 13:01:42 +0000
Manifest this update: Sun 19 Oct 2025 13:01:42 +0000
Manifest next update: Mon 20 Oct 2025 13:01:42 +0000
Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: E9rkERNTH6yjtIZrcwbJKF0yPe1Rf/6tcsQadM/IQw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bc:a7:58:18:f5:61:d6:88:e0:5f:f1:8f:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Validity
Not Before: Oct 19 13:01:42 2025 GMT
Not After : Oct 20 13:01:42 2025 GMT
Subject: CN=781e0c0f9d8c1e22edb3bdc99858f4fdd65e346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:f3:31:97:db:e3:45:fd:a7:b6:24:47:61:
65:b1:0c:c7:dc:e5:e6:2f:32:38:1d:39:98:39:f1:
a4:7a:69:01:2a:15:68:07:bf:f9:8e:0b:9d:09:0d:
4a:4e:25:54:73:f4:3c:0c:de:32:3d:22:86:f5:75:
f0:76:4c:16:53:20:4e:09:16:31:17:91:1b:51:81:
81:ba:ca:7f:06:dd:bc:45:43:a9:d3:98:7a:50:2a:
eb:61:b7:09:94:a7:2d:01:a4:56:8c:08:22:6b:d7:
09:ee:ce:0d:e2:a9:1f:c1:65:4c:41:6f:31:07:cb:
77:f3:cd:9e:61:96:45:9b:e5:61:a7:81:f9:81:d0:
f2:62:f7:23:bd:06:39:6f:cc:e7:0d:34:22:f6:22:
92:07:4f:e1:eb:d5:52:3b:e8:00:f9:78:22:e7:fc:
c0:6e:ee:e8:c7:c8:d5:dd:0e:9b:7f:cb:e1:ad:e4:
4d:df:8c:4c:e7:59:d9:aa:a1:95:26:5a:d3:7b:5e:
f8:0a:97:11:2a:b4:b8:b1:91:d7:68:54:86:84:92:
82:f0:55:82:28:ff:af:a9:7f:fb:d9:af:00:85:5c:
1c:42:b4:86:ce:c6:a7:ba:d2:b9:7d:77:42:96:00:
11:b8:5c:30:5d:a5:da:53:31:77:41:f9:53:7c:c0:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:0C:0F:9D:8C:1E:22:ED:B3:BD:C9:98:58:F4:FD:D6:5E:34:6C
X509v3 Authority Key Identifier:
keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:97:30:09:fe:34:dc:aa:e3:ff:dc:9c:db:f0:0f:2a:f7:c0:
32:fa:cb:45:f1:fa:76:71:ef:a1:64:05:7b:10:cc:f4:63:78:
fc:73:07:cb:b7:11:dd:95:44:73:70:8b:aa:0a:ca:a9:3a:43:
df:4c:36:63:90:69:4a:8d:27:96:e0:46:0c:c0:e8:d5:ca:89:
da:84:cf:06:3e:6b:e0:1d:ee:25:10:28:e4:15:8b:1c:b0:8d:
f7:ea:2e:af:91:24:d5:e8:dc:a5:07:a5:8f:4d:3d:97:ee:60:
27:34:20:1e:15:85:ae:21:ba:29:f5:c9:b9:9e:07:ab:b3:30:
9a:64:96:da:da:d7:0c:40:9a:e2:7f:56:b3:b3:3e:3c:ee:2e:
96:31:6d:7b:8e:49:96:67:6f:dd:5e:63:a2:94:52:6d:34:1f:
1c:b1:3a:0c:91:28:0c:cf:d5:2d:f0:4e:e7:6d:ee:47:17:04:
5a:a6:eb:71:6b:88:84:06:96:0f:d2:3c:0a:1a:fb:73:d4:60:
b4:fb:a3:b0:6b:5a:d4:80:8f:de:1c:3b:e0:b5:19:2a:c5:05:
c5:ab:84:85:ef:dc:6a:92:22:95:d8:a7:01:4f:f5:b7:04:07:
e5:21:d4:10:e3:3f:0e:a3:33:52:d9:dc:26:b4:df:a6:d6:52:
77:9e:22:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j7ynWBj1YdaI4F/xj4xKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjIyZjBlYzAxNGMyYWRhNTc1MzczZmE2YmQyZmVjNTBm
NjUxNDcwHhcNMjUxMDE5MTMwMTQyWhcNMjUxMDIwMTMwMTQyWjAzMTEwLwYDVQQD
Eyg3ODFlMGMwZjlkOGMxZTIyZWRiM2JkYzk5ODU4ZjRmZGQ2NWUzNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY/zMZfb40X9p7YkR2FlsQzH3OXm
LzI4HTmYOfGkemkBKhVoB7/5jgudCQ1KTiVUc/Q8DN4yPSKG9XXwdkwWUyBOCRYx
F5EbUYGBusp/Bt28RUOp05h6UCrrYbcJlKctAaRWjAgia9cJ7s4N4qkfwWVMQW8x
B8t3882eYZZFm+Vhp4H5gdDyYvcjvQY5b8znDTQi9iKSB0/h69VSO+gA+Xgi5/zA
bu7ox8jV3Q6bf8vhreRN34xM51nZqqGVJlrTe174CpcRKrS4sZHXaFSGhJKC8FWC
KP+vqX/72a8AhVwcQrSGzsanutK5fXdClgARuFwwXaXaUzF3QflTfMCPEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgeDA+djB4i7bO9yZhY9P3WXjRsMB8GA1UdIwQY
MBaAFKiyLw7AFMKtpXU3P6a9L+xQ9lFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3Mjgt
ZDAxMDk5MWVlMzIzLzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84NTQ1ZjAtYTYxZi00NDZkLWE3MjgtZDAxMDk5MWVlMzIz
LzEvcUxJdkRzQVV3cTJsZFRjX3ByMHY3RkQyVVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJcwCf40
3Krj/9yc2/APKvfAMvrLRfH6dnHvoWQFexDM9GN4/HMHy7cR3ZVEc3CLqgrKqTpD
30w2Y5BpSo0nluBGDMDo1cqJ2oTPBj5r4B3uJRAo5BWLHLCN9+our5Ek1ejcpQel
j009l+5gJzQgHhWFriG6KfXJuZ4Hq7MwmmSW2trXDECa4n9Ws7M+PO4uljFte45J
lmdv3V5jopRSbTQfHLE6DJEoDM/VLfBO523uRxcEWqbrcWuIhAaWD9I8Chr7c9Rg
tPujsGta1ICP3hw74LUZKsUFxauEhe/capIildinAU/1twQH5SHUEOM/DqMzUtnc
JrTfptZSd54iuQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:26 2025 by rpki-client