Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: EbvEm44jjwXvyei2xulmP9WgaJq5ML5zCfZRpKRH1D4=
Subject key identifier: D5:CE:D7:66:89:A0:4C:72:92:C5:20:E5:10:F7:71:7C:50:A1:A5:44
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 0199FBEBFC8AEC01F09493055E26A675DE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0894
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
2: ga4DK68qwsMkTd-ni1B6iXRQTdQ.roa (hash: H3sXkj62Xj83aypXZVaDV2Gzb10/TmB5L1/CDA3jxj0=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: P8+A6Yn6AJ0ZwegiTkZliYQBryHgcHXv3eNV0E4R9KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fc:8a:ec:01:f0:94:93:05:5e:26:a6:75:de:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=d5ced76689a04c7292c520e510f7717c50a1a544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:62:4e:ed:d6:f9:1e:96:ee:66:c3:2d:d4:
26:fd:d8:5a:53:3a:c3:95:2e:b4:d2:93:4a:c3:d5:
bb:00:75:d6:f0:5b:38:0d:98:62:bb:4e:3e:59:99:
3a:37:5f:2e:d1:36:10:c9:54:db:f2:6b:dc:a4:24:
1e:86:ee:04:35:5a:6c:85:44:35:c0:31:72:cd:df:
76:7e:0a:5a:73:a2:54:66:9b:9f:34:85:e5:cc:05:
b8:67:38:4f:5d:dc:d3:1e:0f:b9:17:20:d2:d1:da:
69:ad:e3:0f:1d:ff:65:f5:37:19:55:e1:c4:68:17:
1e:71:bb:f6:b1:b5:6f:aa:1f:31:0c:d0:06:a2:ac:
05:d6:19:b4:e3:26:87:40:d2:1d:bd:ab:49:47:ae:
dc:9d:9a:92:b7:d8:db:50:f0:b0:57:53:fc:97:3b:
07:99:c0:6c:31:b9:b3:e0:04:21:e1:31:3f:cd:81:
da:8b:ff:5d:81:ce:37:ca:c6:96:9d:6e:03:a9:e2:
25:4a:f3:2f:06:e0:6e:f2:e7:6f:00:60:ea:85:9d:
41:85:fe:c9:b6:6b:96:14:70:36:f8:5d:8b:8a:e3:
a0:ed:c6:54:8f:e3:cc:85:9e:60:a2:44:ed:eb:f3:
2a:10:5c:5f:5e:e5:85:e2:23:60:8e:5f:4a:dd:fc:
6f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CE:D7:66:89:A0:4C:72:92:C5:20:E5:10:F7:71:7C:50:A1:A5:44
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7d:8c:7f:f1:a9:1e:f4:ba:68:16:ed:fc:b2:0e:28:72:f1:
ae:1c:bd:36:0b:40:b4:ef:a0:4b:4b:fa:14:0d:0d:07:b3:13:
ea:2e:cc:48:d0:a5:11:d2:a0:5f:f4:e0:41:36:c6:61:09:dd:
dd:58:75:68:da:6d:b3:16:c1:60:66:d9:ad:77:b7:48:f6:bf:
22:c4:14:ba:61:43:11:4b:0a:be:f9:50:c2:f7:dd:17:30:41:
82:78:85:2a:5e:07:15:9d:a6:56:14:dc:1b:74:63:45:31:c9:
aa:1d:0e:48:e5:80:08:c1:c6:84:26:2e:46:d9:d3:91:e5:f6:
fa:e0:f9:d6:4e:77:2e:ae:a3:c8:9a:27:85:d0:4a:48:6f:fb:
f7:f6:62:6e:48:ee:39:d9:7f:97:12:a1:40:46:5e:0f:77:9f:
59:79:6e:75:5f:e4:0b:27:40:7d:4c:61:bf:ff:48:db:d6:3b:
18:36:15:01:a1:19:54:21:06:18:67:78:6d:d9:51:1f:b9:da:
60:98:69:80:18:d0:0c:fa:fc:7a:2a:a6:07:1a:14:67:ef:b0:
12:49:b0:8d:ce:8a:33:ac:10:d3:c9:dc:44:87:71:40:22:f1:
7f:01:fe:0f:8c:fa:76:f6:b5:52:98:cf:db:e8:76:83:60:a5:
2d:55:2f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/yK7AHwlJMFXiamdd5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzM0ZWY1YWUyMWMwZTg5N2ZhMTg2NDQ3MTg0ZWM5YWQ0
YWUyOWQwHhcNMjUxMDE5MTAwMjUwWhcNMjUxMDIwMTAwMjUwWjAzMTEwLwYDVQQD
EyhkNWNlZDc2Njg5YTA0YzcyOTJjNTIwZTUxMGY3NzE3YzUwYTFhNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleZiTu3W+R6W7mbDLdQm/dhaUzrD
lS600pNKw9W7AHXW8Fs4DZhiu04+WZk6N18u0TYQyVTb8mvcpCQehu4ENVpshUQ1
wDFyzd92fgpac6JUZpufNIXlzAW4ZzhPXdzTHg+5FyDS0dppreMPHf9l9TcZVeHE
aBcecbv2sbVvqh8xDNAGoqwF1hm04yaHQNIdvatJR67cnZqSt9jbUPCwV1P8lzsH
mcBsMbmz4AQh4TE/zYHai/9dgc43ysaWnW4DqeIlSvMvBuBu8udvAGDqhZ1Bhf7J
tmuWFHA2+F2LiuOg7cZUj+PMhZ5gokTt6/MqEFxfXuWF4iNgjl9K3fxviQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXO12aJoExyksUg5RD3cXxQoaVEMB8GA1UdIwQY
MBaAFKpzTvWuIcDol/oYZEcYTsmtSuKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWIt
ZGE3ODBjZmI5OWE0LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS83NDgxMTEtMGUxMC00NzkyLTliMWItZGE3ODBjZmI5OWE0
LzEvcW5OTzlhNGh3T2lYLWhoa1J4aE95YTFLNHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe32Mf/Gp
HvS6aBbt/LIOKHLxrhy9NgtAtO+gS0v6FA0NB7MT6i7MSNClEdKgX/TgQTbGYQnd
3Vh1aNptsxbBYGbZrXe3SPa/IsQUumFDEUsKvvlQwvfdFzBBgniFKl4HFZ2mVhTc
G3RjRTHJqh0OSOWACMHGhCYuRtnTkeX2+uD51k53Lq6jyJonhdBKSG/79/Zibkju
Odl/lxKhQEZeD3efWXludV/kCydAfUxhv/9I29Y7GDYVAaEZVCEGGGd4bdlRH7na
YJhpgBjQDPr8eiqmBxoUZ++wEkmwjc6KM6wQ08ncRIdxQCLxfwH+D4z6dva1UpjP
2+h2g2ClLVUv2w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:27 2025 by rpki-client