Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: 3VOUJH7mFCySH1kvKhhSeY3vvVWQb0TgdEH4QgJ8kgQ=
Subject key identifier: 04:5E:4C:D8:A4:74:94:27:5D:2E:A9:1B:AF:38:7D:8C:CB:96:45:DE
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 0199FC21558BA4AAF7B79C39D3B0FE91BA7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 112C
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: ZrOpEWeDz+4k6KFQSKw4VE3UGgejGUnNnDv4wK5xd4A=)
2: hOsUXVARCl8NqYdv3cI6OIcfqwU.roa (hash: w1gjvrKQRUt3hmiD9OYkOr05DsegCS6tRj5zStTTlPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:55:8b:a4:aa:f7:b7:9c:39:d3:b0:fe:91:ba:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=045e4cd8a47494275d2ea91baf387d8ccb9645de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:4d:3d:01:24:e9:98:d4:14:35:ec:3c:aa:
96:58:ea:9d:31:df:2e:47:3f:1a:8c:0e:ca:f2:9f:
57:58:ad:e1:8e:d3:4d:41:4f:33:7e:d3:23:f8:84:
13:4d:f4:1a:83:32:84:66:31:0d:2d:68:95:13:37:
d8:a0:59:e3:05:d1:1d:d5:db:2f:18:5c:bc:7a:c0:
8a:0a:99:68:d7:cc:06:ca:da:cc:7f:c8:d1:7e:dd:
63:80:5b:eb:b6:52:16:ef:25:a5:19:de:e1:e9:b5:
6d:b5:58:7e:b9:5a:79:b1:0f:12:bf:8d:d6:e3:82:
14:e9:4e:7a:12:7c:0f:c4:fa:d7:47:04:33:8a:b2:
b1:3c:a8:6a:11:7d:60:e5:55:bb:36:0d:e0:8b:ff:
ce:0c:61:fd:c1:7f:92:23:50:bb:75:37:42:ec:e4:
d7:b7:6b:e3:82:e1:fe:b4:35:ec:c7:58:53:9a:04:
96:48:7f:d6:3f:1e:03:04:75:d8:43:00:07:7c:be:
60:ca:d8:cd:40:75:a3:98:78:9f:32:b9:69:0d:42:
ad:3b:e3:99:dc:2f:f9:ab:f5:1d:cd:87:4b:55:46:
14:7a:a0:08:8c:8f:b7:d7:97:c6:0b:33:23:71:bd:
57:df:41:67:b8:8c:37:cf:3c:04:fa:b7:a1:0d:c7:
92:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5E:4C:D8:A4:74:94:27:5D:2E:A9:1B:AF:38:7D:8C:CB:96:45:DE
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:35:48:c9:d7:8d:82:d0:90:6d:bc:cb:1e:60:e7:8c:7d:77:
c1:04:0f:f4:85:44:05:c1:28:1d:13:7b:17:c1:3e:20:b0:df:
9a:60:0f:4e:9c:81:65:06:d3:75:e3:3c:d5:5f:8a:0a:f6:2d:
31:ec:d5:32:88:76:8a:10:d7:2c:8b:f5:42:a8:3d:d6:9b:9c:
97:1b:36:96:fc:b3:20:5c:51:12:c0:54:88:92:df:95:9d:27:
f8:aa:ca:10:b0:7c:cc:8c:38:64:7d:f5:a1:38:9b:03:de:70:
af:bc:46:1a:6a:d7:c5:c7:d8:52:36:3b:ae:af:59:18:38:9f:
ea:c5:ec:c6:fb:bb:b4:df:9a:28:3f:83:28:55:0b:a2:fc:2a:
ea:09:6f:75:9b:e6:fb:fb:89:b7:23:6e:f6:eb:8e:2a:5b:a3:
b7:06:cc:33:00:a8:28:25:69:8f:e2:42:67:e0:78:ed:ae:71:
c4:79:89:01:05:28:30:2e:aa:3d:04:f4:7e:cd:31:5b:49:3e:
6b:57:17:f3:12:86:6b:a8:06:f9:26:1a:01:b9:6f:91:fd:28:
b6:4b:48:50:91:43:6e:a5:1f:0d:05:19:3a:0b:73:5a:da:67:
2a:1c:29:ab:ba:f5:52:e5:1e:95:bd:16:92:b4:82:d7:64:25:
8e:4c:eb:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IVWLpKr3t5w507D+kbp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDUxOGQ3MzA3Nzg4ZmNhMzg5MTg3ODQ5MGU0ZjMyZDlh
YWY2YWYwHhcNMjUxMDE5MTEwMTA2WhcNMjUxMDIwMTEwMTA2WjAzMTEwLwYDVQQD
EygwNDVlNGNkOGE0NzQ5NDI3NWQyZWE5MWJhZjM4N2Q4Y2NiOTY0NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2xNPQEk6ZjUFDXsPKqWWOqdMd8u
Rz8ajA7K8p9XWK3hjtNNQU8zftMj+IQTTfQagzKEZjENLWiVEzfYoFnjBdEd1dsv
GFy8esCKCplo18wGytrMf8jRft1jgFvrtlIW7yWlGd7h6bVttVh+uVp5sQ8Sv43W
44IU6U56EnwPxPrXRwQzirKxPKhqEX1g5VW7Ng3gi//ODGH9wX+SI1C7dTdC7OTX
t2vjguH+tDXsx1hTmgSWSH/WPx4DBHXYQwAHfL5gytjNQHWjmHifMrlpDUKtO+OZ
3C/5q/UdzYdLVUYUeqAIjI+315fGCzMjcb1X30FnuIw3zzwE+rehDceS1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAReTNikdJQnXS6pG684fYzLlkXeMB8GA1UdIwQY
MBaAFEPVGNcwd4j8o4kYeEkOTzLZqvavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAt
ZWRkZjMyMGQ1MGUyLzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAtZWRkZjMyMGQ1MGUy
LzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDVIydeN
gtCQbbzLHmDnjH13wQQP9IVEBcEoHRN7F8E+ILDfmmAPTpyBZQbTdeM81V+KCvYt
MezVMoh2ihDXLIv1Qqg91puclxs2lvyzIFxREsBUiJLflZ0n+KrKELB8zIw4ZH31
oTibA95wr7xGGmrXxcfYUjY7rq9ZGDif6sXsxvu7tN+aKD+DKFULovwq6glvdZvm
+/uJtyNu9uuOKlujtwbMMwCoKCVpj+JCZ+B47a5xxHmJAQUoMC6qPQT0fs0xW0k+
a1cX8xKGa6gG+SYaAblvkf0otktIUJFDbqUfDQUZOgtzWtpnKhwpq7r1UuUelb0W
krSC12Qljkzrhw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:25 2025 by rpki-client