Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: 2+6VEt4snczzQSASzRS5wHSR6FPWRqJTo/1/21YVFqY=
Subject key identifier: 70:D5:42:C0:9A:6C:F9:15:7A:31:AD:56:2F:7F:AD:E5:C8:B4:89:12
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 0199FC21B7831558C74F993B24AA6A660C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: E4
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (hash: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=)
2: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (hash: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=)
3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: Rq9hDAICx0brbMraXhUbGyJfoiZzpEaV8KY8R7xlXmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b7:83:15:58:c7:4f:99:3b:24:aa:6a:66:0c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=70d542c09a6cf9157a31ad562f7fade5c8b48912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:36:b4:5c:35:3f:91:e7:e5:4f:55:f8:b9:af:
05:67:61:b7:1f:65:d1:21:35:4b:e1:ba:3f:07:16:
a3:8f:a9:59:ac:67:cd:7a:ef:57:13:00:30:cd:f0:
a1:cd:6a:3e:e2:ff:f2:fb:77:92:6c:f3:2d:4f:58:
e6:1e:d6:68:29:46:93:61:43:fd:ab:c4:36:be:68:
a8:5b:92:93:d6:3a:f1:37:f7:41:ac:03:9c:c7:1c:
0a:5d:5b:8f:33:10:d2:2c:21:25:7a:14:50:81:c6:
c2:00:71:a2:d8:43:8e:9a:b1:46:ca:9d:59:fd:be:
af:48:d5:c2:5d:22:cd:0b:8f:31:71:d2:9f:09:77:
7e:f6:7e:9e:89:0d:6d:96:02:8f:70:66:6a:7d:28:
fa:15:d2:c0:c7:27:43:97:d7:22:31:d2:48:3e:84:
41:a2:89:69:30:22:6a:d4:bb:b7:f4:fd:dd:3d:56:
a2:7a:7c:c6:84:23:86:e8:48:47:a0:50:c1:55:79:
1e:5d:44:0a:b1:e8:f7:34:c3:99:29:d3:cc:ae:35:
ee:c5:a3:bf:85:23:96:41:bf:5b:fd:04:28:bc:0f:
3b:f7:d7:4e:98:8d:d5:88:e5:b0:69:32:02:51:44:
12:3b:e9:96:9e:80:1a:cf:5b:95:df:5d:75:76:2e:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D5:42:C0:9A:6C:F9:15:7A:31:AD:56:2F:7F:AD:E5:C8:B4:89:12
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ab:db:89:a0:c2:99:0b:4a:d7:96:94:44:d0:10:6e:8c:32:
63:e3:d6:1f:9b:15:10:63:53:3a:d3:6f:53:ba:7c:5f:d0:2f:
9a:bb:67:9d:44:52:22:47:72:4c:bf:cd:91:3a:81:27:79:8a:
81:bd:cf:55:d0:9d:c0:cd:7a:b2:6b:df:78:1f:e7:45:95:58:
54:af:28:7f:73:26:1b:41:42:b9:94:2d:9d:63:96:57:35:3f:
79:7c:ab:0d:6b:7e:e0:67:ec:75:e3:1c:37:0f:3d:8e:62:1a:
9b:95:a7:c5:55:24:2d:d3:81:3f:9f:7d:93:1d:51:54:f2:57:
e4:dd:88:44:c2:fe:3a:b5:86:12:be:8d:cb:82:bc:07:09:6a:
4b:20:bc:3a:36:1b:35:6c:aa:3d:a8:a3:a3:8d:e6:47:9f:57:
7a:d0:49:7f:1d:bf:31:2b:76:67:35:9f:d2:08:51:3a:25:0e:
7c:90:6c:86:7d:13:32:41:b1:8d:2e:a7:2e:17:a2:20:fa:33:
43:2f:46:62:4e:d2:2f:ba:f7:59:e7:33:a2:1e:03:40:d6:19:
13:b9:9c:e0:95:1a:ce:fb:f0:61:fe:af:03:87:89:be:37:d2:
7b:62:65:43:ad:0e:13:a7:0a:14:ad:71:4f:38:f5:a9:1f:07:
9b:d2:55:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbeDFVjHT5k7JKpqZgxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc4MmNkN2JiOTIyY2E0YmM2ZTgwZTc4NTdmNDkyMmY1
YzIzYzQwHhcNMjUxMDE5MTEwMTMyWhcNMjUxMDIwMTEwMTMyWjAzMTEwLwYDVQQD
Eyg3MGQ1NDJjMDlhNmNmOTE1N2EzMWFkNTYyZjdmYWRlNWM4YjQ4OTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwja0XDU/keflT1X4ua8FZ2G3H2XR
ITVL4bo/Bxajj6lZrGfNeu9XEwAwzfChzWo+4v/y+3eSbPMtT1jmHtZoKUaTYUP9
q8Q2vmioW5KT1jrxN/dBrAOcxxwKXVuPMxDSLCElehRQgcbCAHGi2EOOmrFGyp1Z
/b6vSNXCXSLNC48xcdKfCXd+9n6eiQ1tlgKPcGZqfSj6FdLAxydDl9ciMdJIPoRB
oolpMCJq1Lu39P3dPVaienzGhCOG6EhHoFDBVXkeXUQKsej3NMOZKdPMrjXuxaO/
hSOWQb9b/QQovA8799dOmI3ViOWwaTICUUQSO+mWnoAaz1uV3111di51WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDVQsCabPkVejGtVi9/reXItIkSMB8GA1UdIwQY
MBaAFKpngs17uSLKS8boDnhX9JIvXCPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYt
YjQzMGU4ZGU3NzQ3LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zOWY0YmYtMzhmYy00MzEyLTg1MTYtYjQzMGU4ZGU3NzQ3
LzEvcW1lQ3pYdTVJc3BMeHVnT2VGZjBraTljSThRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqvbiaDC
mQtK15aURNAQbowyY+PWH5sVEGNTOtNvU7p8X9AvmrtnnURSIkdyTL/NkTqBJ3mK
gb3PVdCdwM16smvfeB/nRZVYVK8of3MmG0FCuZQtnWOWVzU/eXyrDWt+4GfsdeMc
Nw89jmIam5WnxVUkLdOBP599kx1RVPJX5N2IRML+OrWGEr6Ny4K8BwlqSyC8OjYb
NWyqPaijo43mR59XetBJfx2/MSt2ZzWf0ghROiUOfJBshn0TMkGxjS6nLheiIPoz
Qy9GYk7SL7r3Weczoh4DQNYZE7mc4JUazvvwYf6vA4eJvjfSe2JlQ60OE6cKFK1x
Tzj1qR8Hm9JVpg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:24 2025 by rpki-client