Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: ahfx7fsPrC3Ahpt82o8IRnFOnkkbqROOhcjmR+hScJ8=
Subject key identifier: 63:32:6F:93:F8:87:1E:4E:D0:59:71:AD:99:C5:69:E3:81:88:AF:27
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 0199FAD7C5B0BE21592B43CBDF011C78C324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 1210
Signing time: Sun 19 Oct 2025 05:01:08 +0000
Manifest this update: Sun 19 Oct 2025 05:01:08 +0000
Manifest next update: Mon 20 Oct 2025 05:01:08 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: BxoafY/E5cie9S0Rz/WgyrreSBTgo1ClVmMaShMYj24=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c5:b0:be:21:59:2b:43:cb:df:01:1c:78:c3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Oct 19 05:01:08 2025 GMT
Not After : Oct 20 05:01:08 2025 GMT
Subject: CN=63326f93f8871e4ed05971ad99c569e38188af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:aa:4c:17:5d:1b:de:de:00:1b:9f:1e:de:
85:18:aa:3f:f0:06:e2:d7:c3:c2:bd:fd:83:30:ed:
1a:c5:66:d2:3b:ee:87:84:fd:eb:8f:90:90:ff:78:
eb:ba:1e:e4:fd:b5:d6:d7:37:e3:66:be:fa:12:e0:
b8:37:22:81:53:8e:10:6c:64:1f:d1:eb:b8:94:59:
45:52:9c:0d:16:22:46:5e:09:d6:8a:80:aa:9a:e2:
86:88:e3:bc:c1:2b:af:53:8f:a7:c5:dc:05:87:95:
dd:47:a7:9c:6f:78:f6:4d:08:34:47:db:88:c8:0f:
20:74:0c:aa:15:bd:f1:d2:83:3e:c7:78:92:4b:76:
b0:3b:3d:2a:9b:0f:8a:73:df:86:d7:2b:c0:9a:a2:
27:81:88:ea:84:c4:29:4a:76:b8:e0:c0:f9:1a:e2:
13:19:f8:6e:c2:16:42:d5:b7:4e:db:e5:55:1b:fe:
15:37:b8:69:b2:c5:db:f4:df:c4:f8:88:65:7a:4c:
67:3d:4f:d9:73:00:63:25:e2:fd:07:8e:dd:b7:9c:
65:d2:59:53:11:18:46:82:c9:d3:42:47:fe:4b:b4:
0b:e8:65:73:b7:6a:e4:f4:0e:1b:b6:6f:4a:bb:09:
2b:07:8d:7d:43:94:6e:b2:05:6d:00:56:eb:86:05:
bc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:32:6F:93:F8:87:1E:4E:D0:59:71:AD:99:C5:69:E3:81:88:AF:27
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cb:18:02:a3:aa:96:36:44:a6:85:70:f9:a3:10:3a:fd:f1:
1f:b5:12:02:34:65:6a:c2:0d:a6:d1:83:fd:81:11:b5:28:c2:
4c:3e:89:5f:ae:9f:8c:13:71:dd:cd:a9:1f:5b:98:84:32:ba:
78:9e:a5:f5:e0:b8:f6:d5:9e:d5:36:4a:d4:5b:61:0d:7d:f3:
d3:5e:10:13:fb:de:77:31:e5:ae:d7:46:06:14:d9:4c:7f:da:
57:11:37:46:27:88:e4:d3:e9:c0:51:16:18:9b:e2:02:f2:bf:
26:2e:fd:4f:c8:24:21:94:cc:ee:f4:67:48:8f:63:98:c2:02:
66:32:1c:fb:37:da:21:7a:0a:2d:79:10:dc:d9:a0:91:f8:08:
43:5c:b5:0f:62:05:a0:38:6c:6b:fe:ba:d3:2c:81:c3:9b:be:
06:88:3a:5d:e5:cf:76:77:9d:1c:e1:f2:93:3e:21:4e:24:14:
ae:64:b6:62:11:48:97:70:63:7a:45:35:03:64:12:3a:cb:ae:
af:6f:fc:cc:9e:ab:7f:04:8a:57:5a:19:be:1a:9c:0f:b5:36:
8b:57:74:65:50:ca:d5:0a:fd:f6:4a:01:f4:12:14:e8:c4:56:
fc:fb:8a:85:85:09:16:f0:17:96:4f:83:a3:b1:76:f3:48:49:
6b:0d:36:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618WwviFZK0PL3wEceMMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk
OWNmYmUwHhcNMjUxMDE5MDUwMTA4WhcNMjUxMDIwMDUwMTA4WjAzMTEwLwYDVQQD
Eyg2MzMyNmY5M2Y4ODcxZTRlZDA1OTcxYWQ5OWM1NjllMzgxODhhZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq6qTBddG97eABufHt6FGKo/8Abi
18PCvf2DMO0axWbSO+6HhP3rj5CQ/3jruh7k/bXW1zfjZr76EuC4NyKBU44QbGQf
0eu4lFlFUpwNFiJGXgnWioCqmuKGiOO8wSuvU4+nxdwFh5XdR6ecb3j2TQg0R9uI
yA8gdAyqFb3x0oM+x3iSS3awOz0qmw+Kc9+G1yvAmqIngYjqhMQpSna44MD5GuIT
GfhuwhZC1bdO2+VVG/4VN7hpssXb9N/E+IhlekxnPU/ZcwBjJeL9B47dt5xl0llT
ERhGgsnTQkf+S7QL6GVzt2rk9A4btm9KuwkrB419Q5RusgVtAFbrhgW8LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMyb5P4hx5O0FlxrZnFaeOBiK8nMB8GA1UdIwQY
MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt
Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz
LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcsYAqOq
ljZEpoVw+aMQOv3xH7USAjRlasINptGD/YERtSjCTD6JX66fjBNx3c2pH1uYhDK6
eJ6l9eC49tWe1TZK1FthDX3z014QE/vedzHlrtdGBhTZTH/aVxE3RieI5NPpwFEW
GJviAvK/Ji79T8gkIZTM7vRnSI9jmMICZjIc+zfaIXoKLXkQ3NmgkfgIQ1y1D2IF
oDhsa/660yyBw5u+Bog6XeXPdnedHOHykz4hTiQUrmS2YhFIl3BjekU1A2QSOsuu
r2/8zJ6rfwSKV1oZvhqcD7U2i1d0ZVDK1Qr99koB9BIU6MRW/PuKhYUJFvAXlk+D
o7F280hJaw02og==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:03 2025 by rpki-client