Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: /laVbUiCrOPyf857aMAoYsP/jJOUs4RCY0v89DahZR8=
Subject key identifier: A8:1A:B1:FD:D8:D9:2A:02:2E:7B:5A:3C:6E:96:36:C6:F8:AA:2E:A3
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 0199FCFDB27C9C57A29F79E70EAEF7F6443C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 15:01:48 +0000
Manifest this update: Sun 19 Oct 2025 15:01:48 +0000
Manifest next update: Mon 20 Oct 2025 15:01:48 +0000
Files and hashes: 1: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: IJGWoejasjTnjL3o7dkXlRz1S5K4oHHbJL+cIPYt694=)
2: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=)
3: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=)
4: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=)
5: oi0U9f8KU3xL5hcxj-l_j_oxaQE.roa (hash: VaBV5SBKPM+Ny0Aym3FdNVG9ABI2dtE3XxpwOFbyKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b2:7c:9c:57:a2:9f:79:e7:0e:ae:f7:f6:44:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Oct 19 15:01:48 2025 GMT
Not After : Oct 20 15:01:48 2025 GMT
Subject: CN=a81ab1fdd8d92a022e7b5a3c6e9636c6f8aa2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:92:9a:8c:63:77:9d:bc:28:31:a3:40:22:
a1:bb:cf:8e:a0:ea:b5:aa:63:40:14:ba:11:90:12:
ae:dd:59:83:25:09:dc:a0:89:24:13:34:26:f7:9a:
f1:6a:90:04:40:92:0f:ac:e0:d1:b3:3b:af:0c:82:
2c:b4:92:65:bb:a9:00:c9:1a:20:af:fe:62:cc:07:
19:33:85:fd:53:e1:38:cc:b6:a0:e5:ed:4a:ca:fa:
1a:e8:35:b5:3a:5f:00:66:f7:d9:f0:d0:fa:b7:d9:
a5:7c:5d:c0:37:78:13:43:d7:52:bc:e0:0d:76:87:
44:eb:fc:47:f3:d1:43:96:c7:aa:91:3d:48:d2:97:
5c:a2:74:c1:c0:08:b7:a1:0e:c2:94:41:16:5e:d2:
a5:fc:fd:1b:9f:7a:8c:21:e3:75:f6:50:cf:f8:ba:
08:a7:b9:85:19:35:58:e1:8b:03:2d:02:6c:c3:39:
69:70:82:39:2e:67:83:c8:63:de:44:90:3b:10:b9:
15:90:a6:9f:07:6a:62:97:5e:92:5b:6e:3e:a8:ad:
52:b3:09:81:3c:54:10:42:3c:96:7c:46:4e:c6:5f:
1d:27:bb:7d:82:bf:73:f2:9d:2f:53:92:16:23:aa:
42:15:61:fe:21:48:09:e1:39:f4:93:bd:d5:55:59:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1A:B1:FD:D8:D9:2A:02:2E:7B:5A:3C:6E:96:36:C6:F8:AA:2E:A3
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:64:f5:73:b0:21:0b:3e:c8:51:ec:07:15:53:09:f9:75:e9:
03:3d:dc:5d:86:6b:c1:9d:42:90:60:b2:ba:7c:17:e3:9d:ec:
cd:46:82:48:23:bc:30:68:ac:da:7f:28:a7:03:98:53:df:26:
ed:02:7e:52:53:1d:aa:54:75:c8:fd:d1:dc:5a:05:3b:0b:77:
fa:fc:b1:d1:af:26:1a:38:bb:12:a8:24:84:bf:07:53:60:e4:
38:90:5d:57:1e:f2:e1:88:aa:7d:a6:5b:4d:45:4e:ab:f0:32:
e8:75:10:bb:9b:18:e5:a2:d9:da:b9:4c:09:12:8b:c1:43:fc:
7c:25:4c:3a:6e:52:1c:4f:dd:b0:81:19:42:5b:a9:a2:1c:43:
df:23:07:26:a2:68:0a:01:18:fe:29:ac:d7:b8:a9:b3:d9:56:
8d:ef:3f:90:df:42:57:5b:b7:7a:27:3d:a0:81:32:ce:49:21:
94:06:18:58:5f:ea:61:bd:86:fe:8c:75:12:f1:f5:92:62:02:
6e:66:bc:5b:b9:11:5f:58:21:8e:28:6f:7e:41:5e:1a:e6:ce:
df:da:b6:1b:6a:ae:5f:c6:0a:d1:0c:c2:2d:58:93:f8:43:ae:
a7:7a:c4:2c:95:5c:75:37:1a:f0:f8:52:c4:5f:a5:82:81:7b:
f7:54:db:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/bJ8nFein3nnDq739kQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODAyNWM3ZGUwNDAwZTBmM2M4OGQ0YTEyMmEzMTdlMzJj
NWUyMWMwHhcNMjUxMDE5MTUwMTQ4WhcNMjUxMDIwMTUwMTQ4WjAzMTEwLwYDVQQD
EyhhODFhYjFmZGQ4ZDkyYTAyMmU3YjVhM2M2ZTk2MzZjNmY4YWEyZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvamSmoxjd528KDGjQCKhu8+OoOq1
qmNAFLoRkBKu3VmDJQncoIkkEzQm95rxapAEQJIPrODRszuvDIIstJJlu6kAyRog
r/5izAcZM4X9U+E4zLag5e1Kyvoa6DW1Ol8AZvfZ8ND6t9mlfF3AN3gTQ9dSvOAN
dodE6/xH89FDlseqkT1I0pdconTBwAi3oQ7ClEEWXtKl/P0bn3qMIeN19lDP+LoI
p7mFGTVY4YsDLQJswzlpcII5LmeDyGPeRJA7ELkVkKafB2pil16SW24+qK1SswmB
PFQQQjyWfEZOxl8dJ7t9gr9z8p0vU5IWI6pCFWH+IUgJ4Tn0k73VVVldzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgasf3Y2SoCLntaPG6WNsb4qi6jMB8GA1UdIwQY
MBaAFECAJcfeBADg88iNShIqMX4yxeIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUt
ZmVlMmU4ZDQwODRmLzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy81OTMwM2QtNzQ4YS00Nzk3LTgxMWUtZmVlMmU4ZDQwODRm
LzEvUUlBbHg5NEVBT0R6eUkxS0Vpb3hmakxGNGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2T1c7Ah
Cz7IUewHFVMJ+XXpAz3cXYZrwZ1CkGCyunwX453szUaCSCO8MGis2n8opwOYU98m
7QJ+UlMdqlR1yP3R3FoFOwt3+vyx0a8mGji7EqgkhL8HU2DkOJBdVx7y4YiqfaZb
TUVOq/Ay6HUQu5sY5aLZ2rlMCRKLwUP8fCVMOm5SHE/dsIEZQlupohxD3yMHJqJo
CgEY/ims17ips9lWje8/kN9CV1u3eic9oIEyzkkhlAYYWF/qYb2G/ox1EvH1kmIC
bma8W7kRX1ghjihvfkFeGubO39q2G2quX8YK0QzCLViT+EOup3rELJVcdTca8PhS
xF+lgoF791TbKw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:05 2025 by rpki-client