Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier: 9VnF7kDwAa7Yy/+8K2c1h+TmkCcinfjZE+f1h5vi1aI=
Subject key identifier: 8B:92:D2:07:E5:36:04:F5:37:4C:AB:6F:E8:F8:3F:C0:C0:E6:D0:DB
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 0199FF2263FE64455162C7153DEF4F8A8814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number: 0890
Signing time: Mon 20 Oct 2025 01:01:07 +0000
Manifest this update: Mon 20 Oct 2025 01:01:07 +0000
Manifest next update: Tue 21 Oct 2025 01:01:07 +0000
Files and hashes: 1: 4F9izwsHHxNkuKU97mIzesCX1fA.roa (hash: 9EEtKc3sBCyfxrwHugYM/2yhW3k3q6DEwjqGSNZdJ9g=)
2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: C8l/lCf1x+XxYWidU94KkfReg7RjUzzESewt4BA0rN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:63:fe:64:45:51:62:c7:15:3d:ef:4f:8a:88:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Oct 20 01:01:07 2025 GMT
Not After : Oct 21 01:01:07 2025 GMT
Subject: CN=8b92d207e53604f5374cab6fe8f83fc0c0e6d0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:1b:36:ec:85:a0:ea:07:fa:c3:32:58:b8:
bf:2b:53:9c:94:22:8d:ad:3a:a2:82:05:68:d9:5a:
e4:f9:1b:ad:7f:83:dd:de:00:6c:2b:ab:04:9d:ec:
7d:4d:48:74:6b:48:9b:dd:71:73:a5:58:88:d1:33:
77:f2:f1:82:c1:05:5d:cc:f5:37:5c:55:0c:1c:fc:
bf:9a:6b:cb:83:85:b4:5b:c4:54:3d:85:4a:28:91:
40:d5:1b:d6:3b:4b:47:4b:5b:4c:0c:05:5f:e0:05:
f6:e4:85:17:f9:af:62:a9:9a:10:f9:67:36:cf:5a:
bd:1f:2a:81:66:b7:47:e0:94:d9:7a:12:4c:f4:ae:
da:bb:b9:fc:54:f9:06:b2:c3:05:14:25:97:f4:b0:
8a:a1:9b:93:28:04:d6:14:57:bc:e7:a8:62:2b:3c:
0b:d9:40:75:8b:e7:18:28:20:99:d5:b0:63:21:83:
70:40:86:38:1a:73:8e:d2:ba:60:a0:5d:7d:31:30:
81:f2:2f:a1:2e:16:cb:84:88:e7:4a:cf:9e:31:3e:
57:4b:1d:41:7a:11:3e:56:0d:79:4c:a3:e5:ca:55:
91:f2:30:e7:0e:6b:b5:ae:71:45:84:70:ad:cb:fe:
49:e2:b7:85:e3:72:f1:0e:80:e6:62:42:9c:4e:43:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:92:D2:07:E5:36:04:F5:37:4C:AB:6F:E8:F8:3F:C0:C0:E6:D0:DB
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:77:3b:81:d3:dd:90:43:25:1b:2a:41:60:1e:80:21:73:ba:
3c:73:d5:3a:47:6d:49:ed:c7:8f:1e:df:88:4a:67:54:ef:00:
84:d0:d7:dc:ab:eb:53:e9:26:f8:48:1a:08:be:d5:9b:ae:8c:
29:53:e3:02:db:c6:53:85:2e:f1:82:e4:3d:61:8f:04:b8:80:
11:ce:39:04:8c:7a:71:64:48:c6:c0:3c:9d:bc:cc:45:b6:d1:
b2:3c:40:d3:5d:12:28:29:b9:14:25:65:42:10:47:3a:11:c3:
bf:34:e5:0e:ef:6c:09:b8:6c:2b:84:38:8e:03:d0:0b:3b:54:
db:93:f5:e0:53:5d:bf:c9:9c:8e:b6:27:6b:15:23:ed:50:3b:
94:03:af:b4:bd:68:e2:23:06:44:80:bb:b1:f5:19:b8:6c:21:
ba:83:a2:fe:97:b5:d3:fb:c0:e1:0b:cb:c0:13:7a:93:4d:bd:
88:d4:08:76:87:46:79:96:33:cb:ad:1e:f0:d2:66:9e:55:3e:
af:d8:67:f4:aa:6d:bd:98:cb:4a:83:de:43:59:db:30:91:94:
0a:87:6d:cc:9f:78:b0:a2:45:ac:db:97:0a:8a:2d:b7:50:69:
ea:53:f4:27:85:98:93:b8:d6:e4:75:f9:ee:15:bf:e7:f9:f1:
0f:c1:e8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/ImP+ZEVRYscVPe9PiogUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNGFhYzE5NDhjZWUyM2RkZjRkNzE1ZjgwMzUyMmY5M2Iw
Y2RkYjQwHhcNMjUxMDIwMDEwMTA3WhcNMjUxMDIxMDEwMTA3WjAzMTEwLwYDVQQD
Eyg4YjkyZDIwN2U1MzYwNGY1Mzc0Y2FiNmZlOGY4M2ZjMGMwZTZkMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtIbNuyFoOoH+sMyWLi/K1OclCKN
rTqiggVo2Vrk+Rutf4Pd3gBsK6sEnex9TUh0a0ib3XFzpViI0TN38vGCwQVdzPU3
XFUMHPy/mmvLg4W0W8RUPYVKKJFA1RvWO0tHS1tMDAVf4AX25IUX+a9iqZoQ+Wc2
z1q9HyqBZrdH4JTZehJM9K7au7n8VPkGssMFFCWX9LCKoZuTKATWFFe856hiKzwL
2UB1i+cYKCCZ1bBjIYNwQIY4GnOO0rpgoF19MTCB8i+hLhbLhIjnSs+eMT5XSx1B
ehE+Vg15TKPlylWR8jDnDmu1rnFFhHCty/5J4reF43LxDoDmYkKcTkOn3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuS0gflNgT1N0yrb+j4P8DA5tDbMB8GA1UdIwQY
MBaAFKpKrBlIzuI9301xX4A1Ivk7DN20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUt
ZjliZDY0Y2E2ZTRjLzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUtZjliZDY0Y2E2ZTRj
LzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXc7gdPd
kEMlGypBYB6AIXO6PHPVOkdtSe3Hjx7fiEpnVO8AhNDX3KvrU+km+EgaCL7Vm66M
KVPjAtvGU4Uu8YLkPWGPBLiAEc45BIx6cWRIxsA8nbzMRbbRsjxA010SKCm5FCVl
QhBHOhHDvzTlDu9sCbhsK4Q4jgPQCztU25P14FNdv8mcjrYnaxUj7VA7lAOvtL1o
4iMGRIC7sfUZuGwhuoOi/pe10/vA4QvLwBN6k029iNQIdodGeZYzy60e8NJmnlU+
r9hn9KptvZjLSoPeQ1nbMJGUCodtzJ94sKJFrNuXCoott1Bp6lP0J4WYk7jW5HX5
7hW/5/nxD8Ho3g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:20:29 2025 by rpki-client