Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: ryZ4zLDIBZfb7fNp+qguNZVSAWM3alFNXPFgZ/yBxdw=
Subject key identifier: 1F:7B:20:45:0A:DE:29:34:9E:B4:7E:7C:9B:9A:44:18:3B:70:B3:36
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 0199FCC6797149AEE864D30AEAE92750D310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 0A7B
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: zsW4hjsp8G6Rnlxvcy1ivXWYj7pAhiIOytt6fhe6YhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:79:71:49:ae:e8:64:d3:0a:ea:e9:27:50:d3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=1f7b20450ade29349eb47e7c9b9a44183b70b336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:91:04:6c:83:93:c0:a6:54:d6:7f:7e:bd:
8b:38:41:1a:e3:5f:01:dc:d8:c8:5d:d6:ed:c7:71:
d4:9a:b9:be:61:35:38:a2:03:d9:b1:f7:09:d9:c4:
c5:15:4a:4b:0d:cb:97:da:57:a0:ed:a7:ba:38:58:
a6:c3:37:de:a1:9e:e2:c2:ad:c9:af:8d:9a:18:fb:
71:47:70:2a:98:0f:d5:e9:9f:37:df:fa:7f:c3:61:
33:05:6f:0f:68:32:49:96:c4:bd:35:48:fe:62:76:
b6:c0:15:51:48:c1:a3:bf:a9:f4:07:d3:d3:b4:4d:
f1:a1:27:f6:c8:35:d9:b1:0e:9d:4f:80:e9:38:67:
1f:e5:97:da:83:e6:10:c3:ca:b4:27:34:4d:9d:16:
ec:1b:aa:73:00:a5:18:3e:68:e5:f7:08:46:50:4d:
95:1d:06:d1:4d:ec:1a:e1:d2:16:01:9f:6d:22:20:
d5:65:91:78:df:7f:c6:d1:1b:26:7a:44:35:7b:3d:
7d:72:98:5b:11:ed:95:6b:de:18:06:51:50:8b:c9:
b7:2c:ed:54:e5:e2:3c:38:c4:0b:45:24:07:53:e5:
7a:fe:de:cb:ce:6b:96:e7:69:08:bc:0b:36:73:12:
95:a2:c0:27:a2:89:c6:f0:73:83:d8:c2:ee:ac:c5:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7B:20:45:0A:DE:29:34:9E:B4:7E:7C:9B:9A:44:18:3B:70:B3:36
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f6:54:c6:3b:bb:19:82:28:ec:0c:c3:e0:43:ad:42:0c:21:
45:82:ca:b0:43:e3:83:a8:b2:29:2d:0c:77:c2:b1:06:2e:0b:
40:73:b8:3e:2b:d0:ce:74:16:07:4c:f6:a7:ed:23:7d:7c:36:
70:27:ad:0c:3c:45:17:f0:94:bd:a8:a1:04:2b:1d:be:51:e8:
45:10:3e:4b:32:7b:63:0e:43:dd:58:c4:db:36:d6:c6:f4:46:
66:13:72:a7:0c:76:1e:3c:54:c2:04:f4:0b:0e:d6:ff:f4:82:
7d:5a:2c:62:6d:55:ee:1a:5a:8a:9f:3b:36:4d:e1:7f:61:85:
7a:e5:6e:af:b4:d1:6e:45:1f:38:9d:95:2d:b0:46:22:ad:b7:
48:a3:75:d5:df:4b:e3:a9:fc:a2:a0:5c:f1:83:09:65:4d:86:
99:23:7f:ed:9a:89:a6:da:6c:45:fc:d7:3f:46:a5:91:50:44:
6a:27:2b:a4:2b:84:29:3d:8e:52:8d:24:23:8c:4e:05:7e:63:
77:59:6d:51:6f:15:15:68:ac:b2:95:3b:2e:84:af:7e:61:3f:
9b:7b:63:cb:cf:e2:3e:b0:f7:6e:f5:9d:b6:cb:b6:9c:cb:da:
ce:31:7d:3b:d5:d2:cf:a3:8e:79:db:3f:81:22:2a:c8:02:8c:
91:f2:8e:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnlxSa7oZNMK6uknUNMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3
ZDliMzkwHhcNMjUxMDE5MTQwMTI5WhcNMjUxMDIwMTQwMTI5WjAzMTEwLwYDVQQD
EygxZjdiMjA0NTBhZGUyOTM0OWViNDdlN2M5YjlhNDQxODNiNzBiMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsweRBGyDk8CmVNZ/fr2LOEEa418B
3NjIXdbtx3HUmrm+YTU4ogPZsfcJ2cTFFUpLDcuX2leg7ae6OFimwzfeoZ7iwq3J
r42aGPtxR3AqmA/V6Z833/p/w2EzBW8PaDJJlsS9NUj+Yna2wBVRSMGjv6n0B9PT
tE3xoSf2yDXZsQ6dT4DpOGcf5Zfag+YQw8q0JzRNnRbsG6pzAKUYPmjl9whGUE2V
HQbRTewa4dIWAZ9tIiDVZZF433/G0RsmekQ1ez19cphbEe2Va94YBlFQi8m3LO1U
5eI8OMQLRSQHU+V6/t7LzmuW52kIvAs2cxKVosAnoonG8HOD2MLurMUXnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB97IEUK3ik0nrR+fJuaRBg7cLM2MB8GA1UdIwQY
MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt
N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi
LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfZUxju7
GYIo7AzD4EOtQgwhRYLKsEPjg6iyKS0Md8KxBi4LQHO4PivQznQWB0z2p+0jfXw2
cCetDDxFF/CUvaihBCsdvlHoRRA+SzJ7Yw5D3VjE2zbWxvRGZhNypwx2HjxUwgT0
Cw7W//SCfVosYm1V7hpaip87Nk3hf2GFeuVur7TRbkUfOJ2VLbBGIq23SKN11d9L
46n8oqBc8YMJZU2GmSN/7ZqJptpsRfzXP0alkVBEaicrpCuEKT2OUo0kI4xOBX5j
d1ltUW8VFWisspU7LoSvfmE/m3tjy8/iPrD3bvWdtsu2nMvazjF9O9XSz6OOeds/
gSIqyAKMkfKOpQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:14 2025 by rpki-client