Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier: i9mtp1tjoqvR4QWlzJf3WMh8IreEnCkUJQsHyeVAeW4=
Subject key identifier: 1E:31:CD:0A:DE:E4:95:B3:07:D1:C6:4B:D2:C5:5A:B7:DF:92:95:76
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial: 0199FEEBC62A70FC997807EA8C5F3BB974D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number: 0FE7
Signing time: Mon 20 Oct 2025 00:01:28 +0000
Manifest this update: Mon 20 Oct 2025 00:01:28 +0000
Manifest next update: Tue 21 Oct 2025 00:01:28 +0000
Files and hashes: 1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=)
2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: +3XPWaLJiy3r0fn5QVS7xWboHhug77U4q/pYBlpxcrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c6:2a:70:fc:99:78:07:ea:8c:5f:3b:b9:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Validity
Not Before: Oct 20 00:01:28 2025 GMT
Not After : Oct 21 00:01:28 2025 GMT
Subject: CN=1e31cd0adee495b307d1c64bd2c55ab7df929576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:38:a2:40:b6:2c:d8:c2:55:e3:ab:8d:9d:
79:5f:8e:dd:9d:21:56:23:43:c9:bf:45:a2:d9:14:
a8:ab:92:4b:b3:4c:1a:72:26:34:26:19:6c:38:2a:
59:fd:0c:94:24:38:99:c0:e5:2b:1a:ac:65:92:0f:
96:a9:5b:4e:a1:97:be:42:28:27:4d:3f:13:b8:67:
50:67:09:24:93:69:ce:8c:5d:e6:8a:fd:02:05:e2:
ff:f3:f9:56:8e:a9:ed:14:09:23:28:76:2b:7f:3c:
d7:57:d5:2a:ba:73:e9:17:da:cf:8e:97:46:9b:31:
1d:a1:9c:e1:d2:00:ad:cd:fe:10:e2:15:ca:e3:e7:
00:12:e4:6e:22:44:dc:91:46:98:d9:86:b5:59:a0:
fe:9a:28:4c:e8:e4:2c:3f:58:f7:5b:21:4e:cc:3f:
e7:87:f5:75:87:8a:0a:0b:32:09:c6:c8:47:55:f3:
90:b4:b1:3c:2b:cd:b2:c6:1f:d3:81:17:4e:90:a6:
53:62:6c:be:db:27:c2:72:4f:23:e8:db:89:dc:5a:
9b:9f:85:04:a9:1a:01:de:af:e1:26:48:fc:fa:eb:
f2:42:a3:03:c2:be:a8:54:13:ae:25:c4:85:9f:f1:
06:55:c2:db:a9:9f:5f:cd:48:4b:e2:b3:ec:37:e5:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:CD:0A:DE:E4:95:B3:07:D1:C6:4B:D2:C5:5A:B7:DF:92:95:76
X509v3 Authority Key Identifier:
keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:06:29:f6:31:bf:63:30:dc:d2:ea:3a:d7:75:53:b1:6d:c7:
b9:d3:80:ca:ff:85:5c:4d:0a:eb:b2:8b:b2:42:67:46:4e:f8:
8d:e0:3a:03:87:f2:1e:39:95:55:69:b4:7d:8b:f0:bb:85:56:
c0:0e:e0:e0:ec:5d:5f:f5:35:5e:78:18:12:82:72:87:06:17:
26:ef:7a:45:4a:62:5c:41:d5:7b:24:73:77:37:bb:52:69:69:
72:88:2d:ab:70:0d:f1:92:61:0a:53:74:03:a4:b2:4f:44:51:
de:1e:13:ab:29:32:01:af:a3:e8:50:e0:8d:59:6d:68:fe:67:
58:f9:14:b9:9a:93:0a:e9:fb:34:2a:ad:3e:91:b2:09:eb:b2:
a6:58:40:cc:9e:c2:1c:7d:63:14:30:fc:c4:93:2e:5f:e8:83:
e3:77:96:f7:f2:cb:57:f6:9c:dc:3c:3d:5e:42:df:95:1e:1e:
19:19:1c:24:c7:6f:ea:2f:91:1a:47:f2:b8:d1:17:4c:b2:43:
8e:b7:42:47:95:8a:91:ba:b4:46:20:e7:3b:4b:8b:5b:aa:d5:
23:18:31:90:eb:a3:dc:79:4f:76:90:d2:95:da:ad:39:a2:96:
73:ee:63:75:c8:02:ad:fd:44:23:81:3b:b2:79:8a:7b:a6:6e:
9f:d2:29:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+68YqcPyZeAfqjF87uXTTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2NjNTUyYWI1N2RiYWZhNDYyMWZiNWRjNTkzYTQ1NjA3
Y2ZiMGEwHhcNMjUxMDIwMDAwMTI4WhcNMjUxMDIxMDAwMTI4WjAzMTEwLwYDVQQD
EygxZTMxY2QwYWRlZTQ5NWIzMDdkMWM2NGJkMmM1NWFiN2RmOTI5NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62Q4okC2LNjCVeOrjZ15X47dnSFW
I0PJv0Wi2RSoq5JLs0waciY0JhlsOCpZ/QyUJDiZwOUrGqxlkg+WqVtOoZe+Qign
TT8TuGdQZwkkk2nOjF3miv0CBeL/8/lWjqntFAkjKHYrfzzXV9UqunPpF9rPjpdG
mzEdoZzh0gCtzf4Q4hXK4+cAEuRuIkTckUaY2Ya1WaD+mihM6OQsP1j3WyFOzD/n
h/V1h4oKCzIJxshHVfOQtLE8K82yxh/TgRdOkKZTYmy+2yfCck8j6NuJ3Fqbn4UE
qRoB3q/hJkj8+uvyQqMDwr6oVBOuJcSFn/EGVcLbqZ9fzUhL4rPsN+WFWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4xzQre5JWzB9HGS9LFWrffkpV2MB8GA1UdIwQY
MBaAFEJ8xVKrV9uvpGIftdxZOkVgfPsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDct
ODVhNWI0Y2ZjODRmLzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDctODVhNWI0Y2ZjODRm
LzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgYp9jG/
YzDc0uo613VTsW3HudOAyv+FXE0K67KLskJnRk74jeA6A4fyHjmVVWm0fYvwu4VW
wA7g4OxdX/U1XngYEoJyhwYXJu96RUpiXEHVeyRzdze7Umlpcogtq3AN8ZJhClN0
A6SyT0RR3h4TqykyAa+j6FDgjVltaP5nWPkUuZqTCun7NCqtPpGyCeuyplhAzJ7C
HH1jFDD8xJMuX+iD43eW9/LLV/ac3Dw9XkLflR4eGRkcJMdv6i+RGkfyuNEXTLJD
jrdCR5WKkbq0RiDnO0uLW6rVIxgxkOuj3HlPdpDSldqtOaKWc+5jdcgCrf1EI4E7
snmKe6Zun9Ipdw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:42 2025 by rpki-client