Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: +oBBqEfU35wy0ZqwbqnS0KhxUlWitwx+09XNeTsv6uM=
Subject key identifier: CB:4D:ED:B3:D7:4A:85:DF:0D:B8:61:77:BC:CD:8A:91:19:CC:68:B9
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 0199FDDA1C832EE4DE50EDE49B82CFA6CE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 14ED
Signing time: Sun 19 Oct 2025 19:02:33 +0000
Manifest this update: Sun 19 Oct 2025 19:02:33 +0000
Manifest next update: Mon 20 Oct 2025 19:02:33 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: X5qRt/oOSAttvhcqwPyIQeeVgJzUb6xgs3HXni1oXBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1c:83:2e:e4:de:50:ed:e4:9b:82:cf:a6:ce:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Oct 19 19:02:33 2025 GMT
Not After : Oct 20 19:02:33 2025 GMT
Subject: CN=cb4dedb3d74a85df0db86177bccd8a9119cc68b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:8c:5e:4d:e7:3e:17:59:da:2e:ee:07:52:
e4:e5:a5:9d:df:b4:d7:4d:3f:fe:ae:1c:e1:d2:90:
37:06:fc:61:57:b1:0b:77:a4:d8:03:34:1b:22:b2:
43:95:51:49:fa:f0:56:6a:0e:17:3a:7d:ec:a3:0b:
bc:fc:d1:dc:3b:e8:c9:5f:8e:f3:5d:b0:a3:1d:37:
0f:e6:8b:c3:b0:d7:72:93:3a:1e:7d:69:d3:88:9a:
24:87:29:77:55:16:1b:55:21:e8:19:26:1a:d9:64:
ae:78:b3:26:02:2d:93:55:a1:3d:1f:bc:6f:08:07:
38:99:da:c2:b2:7f:a6:64:89:bc:a2:68:0d:61:15:
d8:43:fc:14:ee:7f:ff:19:de:fb:60:77:71:59:72:
f6:36:bf:12:92:ea:20:86:ee:00:19:95:d1:ea:e7:
52:98:98:85:0e:06:4a:13:42:94:0f:39:0e:ae:29:
c1:b1:62:c8:bc:fb:9a:89:29:93:bf:cf:1b:68:1a:
eb:7e:04:53:e0:a4:7c:f1:af:f3:59:8f:b9:6c:09:
62:1f:b3:ef:be:f3:8d:1b:6f:25:8f:39:76:ff:99:
ee:c3:06:14:b7:2d:8b:54:46:7d:ae:3a:d8:5d:7d:
a1:f7:0c:d9:1d:b2:90:60:85:d9:27:86:a5:e8:97:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4D:ED:B3:D7:4A:85:DF:0D:B8:61:77:BC:CD:8A:91:19:CC:68:B9
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8a:7d:eb:9a:49:99:48:2d:3a:85:e9:6c:de:7b:aa:8e:e1:
34:a4:85:5f:c0:b0:80:dc:82:99:74:dc:ff:e1:c0:58:8a:e3:
9b:a4:44:62:67:3f:f2:41:f6:45:c9:3a:98:f3:a1:38:5d:8f:
bc:6c:d2:03:1a:89:b5:a1:d3:b5:8b:e6:7a:14:b5:d6:23:ee:
d2:92:69:26:4f:b9:77:7b:bd:5f:56:9e:ec:39:38:8f:6b:c8:
03:94:e1:ee:c1:8a:65:9e:84:95:6c:5e:fe:1f:fd:86:59:a8:
f8:90:3a:4e:b8:c0:38:0b:f0:6c:62:92:4d:f4:87:a3:0b:ba:
c2:5c:0a:c9:85:07:8d:59:32:c7:66:9c:c1:cd:86:01:be:a6:
3c:df:26:d5:57:52:3d:98:c7:c1:72:e1:93:f3:0c:a8:67:42:
16:d8:3e:ae:4c:dd:e9:29:3c:42:97:cf:fa:2c:db:cf:c1:51:
10:22:55:2e:38:57:a8:ef:b7:ff:ba:17:d4:e5:e5:34:9a:e8:
ea:7d:2d:5e:65:07:33:b0:8f:a4:91:16:38:2d:84:6a:f2:4e:
fa:00:46:b4:ce:2a:4d:57:04:26:15:0a:5b:ae:4e:d2:3a:a5:
bf:c5:b9:d2:c4:82:94:3e:49:a7:7b:3b:a9:1c:fe:68:07:3a:
92:36:49:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92hyDLuTeUO3km4LPps6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDk4OGQxZGYwYTZjY2FiMmU5MzYxNDk1MTA1OTk2MGJh
ZDQzNDIwHhcNMjUxMDE5MTkwMjMzWhcNMjUxMDIwMTkwMjMzWjAzMTEwLwYDVQQD
EyhjYjRkZWRiM2Q3NGE4NWRmMGRiODYxNzdiY2NkOGE5MTE5Y2M2OGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoeMXk3nPhdZ2i7uB1Lk5aWd37TX
TT/+rhzh0pA3BvxhV7ELd6TYAzQbIrJDlVFJ+vBWag4XOn3sowu8/NHcO+jJX47z
XbCjHTcP5ovDsNdykzoefWnTiJokhyl3VRYbVSHoGSYa2WSueLMmAi2TVaE9H7xv
CAc4mdrCsn+mZIm8omgNYRXYQ/wU7n//Gd77YHdxWXL2Nr8Skuoghu4AGZXR6udS
mJiFDgZKE0KUDzkOrinBsWLIvPuaiSmTv88baBrrfgRT4KR88a/zWY+5bAliH7Pv
vvONG28ljzl2/5nuwwYUty2LVEZ9rjrYXX2h9wzZHbKQYIXZJ4al6JdCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtN7bPXSoXfDbhhd7zNipEZzGi5MB8GA1UdIwQY
MBaAFKnZiNHfCmzKsuk2FJUQWZYLrUNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvcWRtSTBkOEtiTXF5NlRZVWxSQlpsZ3V0UTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYp965pJ
mUgtOoXpbN57qo7hNKSFX8CwgNyCmXTc/+HAWIrjm6REYmc/8kH2Rck6mPOhOF2P
vGzSAxqJtaHTtYvmehS11iPu0pJpJk+5d3u9X1ae7Dk4j2vIA5Th7sGKZZ6ElWxe
/h/9hlmo+JA6TrjAOAvwbGKSTfSHowu6wlwKyYUHjVkyx2acwc2GAb6mPN8m1VdS
PZjHwXLhk/MMqGdCFtg+rkzd6Sk8QpfP+izbz8FRECJVLjhXqO+3/7oX1OXlNJro
6n0tXmUHM7CPpJEWOC2EavJO+gBGtM4qTVcEJhUKW65O0jqlv8W50sSClD5Jp3s7
qRz+aAc6kjZJRA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:31:31 2025 by rpki-client