Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: OsaMLZfGNSsnPKOimtHpGLaFl348yftp43PGoKMSkOQ=
Subject key identifier: 11:84:5B:06:2A:AF:DD:EA:31:E5:63:88:B4:7D:A4:36:2F:E3:4C:E1
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 0199FC21A9FD1CEB578D0F0342CD7E47A7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 10DB
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: +gGw5pO3/KqjRFkCaJo0SNqXmS5Gv3N0Iz4OuAeccZ8=)
2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a9:fd:1c:eb:57:8d:0f:03:42:cd:7e:47:a7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=11845b062aafddea31e56388b47da4362fe34ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:cd:6c:ee:9b:04:72:6e:6e:83:b8:6b:5d:
ec:df:9c:b6:91:29:85:2d:93:bf:41:52:e0:99:93:
d8:d4:11:0c:35:b2:cf:2b:c3:29:03:a6:8b:3f:5c:
38:f1:9c:d2:b4:63:00:5c:ce:ba:e6:85:29:2b:3d:
e1:38:44:b4:04:7c:d3:11:1e:27:28:19:c4:a7:fd:
13:76:7e:99:e0:9f:bd:ad:c5:43:b5:16:06:16:40:
9c:9b:f0:ec:63:48:8c:6c:70:1b:03:cc:c3:4b:5f:
45:61:c6:0b:5c:64:a9:00:79:04:de:ce:84:96:b8:
e9:aa:eb:fb:7e:a0:38:7a:a9:ca:86:e8:0a:d9:65:
25:c5:25:92:67:f2:37:7a:1a:95:f4:11:41:07:1e:
20:24:9f:fb:5c:d6:77:82:f4:22:23:8a:7c:80:90:
00:74:a0:c8:f7:02:89:bb:41:bc:8c:df:ee:8e:3a:
4a:f0:28:13:58:f8:36:5d:91:95:85:38:99:29:d2:
1f:85:a9:56:d3:28:fe:d0:04:45:e1:dd:e7:72:dc:
d0:4a:b8:72:73:11:a9:a6:48:b1:ed:eb:21:3d:ac:
94:5f:8c:c3:0d:5c:fc:1e:ed:03:93:81:4a:b8:32:
96:48:43:e6:e0:38:45:df:b5:70:5e:e9:29:a2:97:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:5B:06:2A:AF:DD:EA:31:E5:63:88:B4:7D:A4:36:2F:E3:4C:E1
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0c:83:75:d8:d4:36:e7:bc:fb:47:30:5f:c1:9c:08:ee:c7:
d7:1c:42:84:17:56:4e:7b:b5:26:2d:11:02:89:00:25:5d:37:
4f:13:0f:89:4d:c0:9e:ff:68:e0:ee:b0:56:dd:95:4a:5a:2d:
b6:5c:c2:27:c9:3a:7c:58:ce:a6:d2:80:40:cf:b9:21:3e:ac:
2f:3f:6b:aa:07:bd:2b:95:ba:70:5c:db:16:e9:9b:de:90:5a:
a2:e6:bf:b7:74:99:6f:a5:ed:20:cb:bb:7c:78:a5:37:8e:e6:
85:21:c9:fd:95:ff:21:c8:37:f7:90:af:46:02:41:1c:64:20:
de:ba:db:a1:d0:7d:eb:44:61:2d:48:b5:c7:b5:66:ce:3b:1a:
db:f2:be:22:90:4c:bf:d0:08:f9:cf:d3:a9:8e:c8:97:20:d2:
54:55:5a:92:82:a9:ca:41:3d:1c:5d:77:69:94:57:cf:9f:cd:
96:1a:92:ce:be:c3:78:9a:21:c2:37:35:70:8f:64:a5:4f:e6:
67:ab:72:f0:e2:84:ba:8e:c2:f2:8d:1b:40:cb:2b:98:ea:e5:
f7:94:20:58:0f:1f:29:a5:9b:87:21:57:e9:98:31:24:11:00:
fd:28:2a:17:ab:bf:76:97:3f:fd:1b:e9:c3:7f:ad:91:1a:f0:
ac:4e:f0:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ian9HOtXjQ8DQs1+R6frMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYWMwZGEzNTEwMDY2ODA2MGQzMGYxNzNkNjEwMmUxODJk
MWI5ZWEwHhcNMjUxMDE5MTEwMTI4WhcNMjUxMDIwMTEwMTI4WjAzMTEwLwYDVQQD
EygxMTg0NWIwNjJhYWZkZGVhMzFlNTYzODhiNDdkYTQzNjJmZTM0Y2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/NbO6bBHJuboO4a13s35y2kSmF
LZO/QVLgmZPY1BEMNbLPK8MpA6aLP1w48ZzStGMAXM665oUpKz3hOES0BHzTER4n
KBnEp/0Tdn6Z4J+9rcVDtRYGFkCcm/DsY0iMbHAbA8zDS19FYcYLXGSpAHkE3s6E
lrjpquv7fqA4eqnKhugK2WUlxSWSZ/I3ehqV9BFBBx4gJJ/7XNZ3gvQiI4p8gJAA
dKDI9wKJu0G8jN/ujjpK8CgTWPg2XZGVhTiZKdIfhalW0yj+0ARF4d3nctzQSrhy
cxGppkix7eshPayUX4zDDVz8Hu0Dk4FKuDKWSEPm4DhF37VwXukpopcuAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGEWwYqr93qMeVjiLR9pDYv40zhMB8GA1UdIwQY
MBaAFJqsDaNRAGaAYNMPFz1hAuGC0bnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUt
NTFiMTA3ZGM5ZjM5LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUtNTFiMTA3ZGM5ZjM5
LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAyDddjU
Nue8+0cwX8GcCO7H1xxChBdWTnu1Ji0RAokAJV03TxMPiU3Anv9o4O6wVt2VSlot
tlzCJ8k6fFjOptKAQM+5IT6sLz9rqge9K5W6cFzbFumb3pBaoua/t3SZb6XtIMu7
fHilN47mhSHJ/ZX/Icg395CvRgJBHGQg3rrbodB960RhLUi1x7Vmzjsa2/K+IpBM
v9AI+c/TqY7IlyDSVFVakoKpykE9HF13aZRXz5/NlhqSzr7DeJohwjc1cI9kpU/m
Z6ty8OKEuo7C8o0bQMsrmOrl95QgWA8fKaWbhyFX6ZgxJBEA/SgqF6u/dpc//Rvp
w3+tkRrwrE7wnQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:50 2025 by rpki-client