Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier: ZjO8Or1WaCnyYAvVC004Me0BXG+iTSYLsrr0u6C+pXM=
Subject key identifier: 15:FB:63:E3:B0:A6:2E:9D:24:C9:B7:13:D0:B2:AF:46:7F:94:1A:53
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial: 019A006C10CD1AC64FFB5CEFE23369BDFFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number: 1213
Signing time: Mon 20 Oct 2025 07:01:13 +0000
Manifest this update: Mon 20 Oct 2025 07:01:13 +0000
Manifest next update: Tue 21 Oct 2025 07:01:13 +0000
Files and hashes: 1: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: sTdQKfMJt5d7McdpO7l9gZw1c1qdb+wJanQOyZI66O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:10:cd:1a:c6:4f:fb:5c:ef:e2:33:69:bd:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Validity
Not Before: Oct 20 07:01:13 2025 GMT
Not After : Oct 21 07:01:13 2025 GMT
Subject: CN=15fb63e3b0a62e9d24c9b713d0b2af467f941a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:71:11:0e:c0:47:73:fc:46:fb:2b:8b:70:
ab:4a:d3:ef:f4:61:ed:b1:72:d4:a0:bd:30:2b:e3:
c1:a0:cc:49:31:f1:26:05:18:03:d5:f7:6c:69:83:
f1:0f:09:d5:67:52:5a:65:e1:19:68:1c:05:84:97:
30:63:f5:ae:af:57:b9:07:47:c0:71:14:f4:82:bb:
8a:9f:41:91:3e:7d:f3:d3:48:2e:bb:17:f8:89:77:
90:28:bb:65:f5:bb:74:6d:c6:30:d7:07:13:fc:d9:
c7:0c:b6:45:3a:27:d1:36:5e:b6:70:62:61:66:ef:
a2:0e:81:eb:a9:d2:10:bb:06:6b:91:5d:b5:7f:fe:
da:27:dc:a2:f7:12:2c:1b:0e:b8:3b:85:06:86:1f:
a7:5c:39:54:de:50:11:df:07:1a:62:13:c0:d0:58:
d9:fc:99:f2:19:3c:04:84:68:34:b6:03:45:f8:5a:
42:51:71:09:b1:3b:19:2b:44:f0:d5:b0:c2:52:77:
97:39:9a:7f:34:2c:c5:32:c7:bd:35:99:54:8a:df:
87:8b:1f:fe:ab:a0:5a:c7:3c:21:4f:8a:e3:59:27:
e2:f1:18:c1:14:f3:f3:c9:ef:6a:68:46:8f:95:de:
93:97:5a:bb:f9:9c:73:2e:1b:c6:ab:45:78:96:b5:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FB:63:E3:B0:A6:2E:9D:24:C9:B7:13:D0:B2:AF:46:7F:94:1A:53
X509v3 Authority Key Identifier:
keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e7:79:ab:0b:d8:b5:1b:80:21:fa:20:29:d3:4d:96:e2:df:
23:6d:e9:27:80:35:82:6e:dd:a4:70:83:1b:aa:a8:50:d1:95:
22:b5:37:9f:02:30:c5:c2:fe:3b:91:a1:c2:c0:d0:5f:3a:d6:
e0:74:6b:d3:3d:6b:5d:b5:2a:3f:cf:23:e3:c6:51:da:5f:91:
02:36:ae:33:d2:df:b0:c0:a1:cf:21:db:b2:27:2b:29:83:7c:
6b:09:c4:ff:80:56:a0:c2:4e:7c:9f:49:e5:39:c4:a9:6a:64:
7f:60:ed:c4:1d:66:73:72:0a:51:ae:3b:0f:3f:5c:13:6a:f9:
b1:47:cf:4b:29:0e:7e:5c:7e:93:06:b8:b5:54:d2:94:f3:78:
98:f1:8a:0d:fd:0c:7a:5f:8b:72:ad:5f:9c:ed:8c:be:c8:4e:
62:1b:13:cc:2a:c4:98:c2:b6:07:ae:4a:5b:5d:2f:d7:79:57:
1e:0b:48:35:5e:dc:c9:6d:05:b6:c3:0c:77:cc:1b:80:5d:23:
bc:4f:aa:5f:8f:11:e0:f5:69:a8:8a:bd:b1:f4:a5:e6:bd:88:
06:5f:22:17:2c:24:44:7b:be:a5:6e:b5:09:41:2a:ce:d0:35:
6b:02:31:00:3b:4e:ae:38:eb:55:6f:00:de:eb:53:4e:32:2a:
49:69:ec:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbBDNGsZP+1zv4jNpvf/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2E5NWQ2ZjkxYjY3NmI5ZDcxYWI4YWUxMTQxOTQxOGRl
M2MzMGUwHhcNMjUxMDIwMDcwMTEzWhcNMjUxMDIxMDcwMTEzWjAzMTEwLwYDVQQD
EygxNWZiNjNlM2IwYTYyZTlkMjRjOWI3MTNkMGIyYWY0NjdmOTQxYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt9xEQ7AR3P8Rvsri3CrStPv9GHt
sXLUoL0wK+PBoMxJMfEmBRgD1fdsaYPxDwnVZ1JaZeEZaBwFhJcwY/Wur1e5B0fA
cRT0gruKn0GRPn3z00guuxf4iXeQKLtl9bt0bcYw1wcT/NnHDLZFOifRNl62cGJh
Zu+iDoHrqdIQuwZrkV21f/7aJ9yi9xIsGw64O4UGhh+nXDlU3lAR3wcaYhPA0FjZ
/JnyGTwEhGg0tgNF+FpCUXEJsTsZK0Tw1bDCUneXOZp/NCzFMse9NZlUit+Hix/+
q6BaxzwhT4rjWSfi8RjBFPPzye9qaEaPld6Tl1q7+ZxzLhvGq0V4lrUAnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX7Y+Owpi6dJMm3E9Cyr0Z/lBpTMB8GA1UdIwQY
MBaAFEJ6ldb5G2drnXGriuEUGUGN48MOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NGY5OTktZDI2Zi00NjA2LWEzMjYt
Y2U3YTUxYWEzMzE0LzEvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny82NGY5OTktZDI2Zi00NjA2LWEzMjYtY2U3YTUxYWEzMzE0
LzEvUW5xVjF2a2JaMnVkY2F1SzRSUVpRWTNqd3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+d5qwvY
tRuAIfogKdNNluLfI23pJ4A1gm7dpHCDG6qoUNGVIrU3nwIwxcL+O5GhwsDQXzrW
4HRr0z1rXbUqP88j48ZR2l+RAjauM9LfsMChzyHbsicrKYN8awnE/4BWoMJOfJ9J
5TnEqWpkf2DtxB1mc3IKUa47Dz9cE2r5sUfPSykOflx+kwa4tVTSlPN4mPGKDf0M
el+Lcq1fnO2MvshOYhsTzCrEmMK2B65KW10v13lXHgtINV7cyW0FtsMMd8wbgF0j
vE+qX48R4PVpqIq9sfSl5r2IBl8iFywkRHu+pW61CUEqztA1awIxADtOrjjrVW8A
3utTTjIqSWnsGw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:02 2025 by rpki-client