Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: Wqig459s18w1ejalVSGHXNWt33ywWRuE7zQ4Lz6sBrY=
Subject key identifier: 82:3F:F3:30:BD:1F:35:CE:07:B0:2C:CB:A1:54:47:C5:E0:A7:5E:2C
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 0199FFC755221A6330D98E0C2ED8F2E814D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:01:17 +0000
Manifest this update: Mon 20 Oct 2025 04:01:17 +0000
Manifest next update: Tue 21 Oct 2025 04:01:17 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: otQJC5x+B/LhCtWtvdCT8z7QlgD5n1TjJbxl/fxX+Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:55:22:1a:63:30:d9:8e:0c:2e:d8:f2:e8:14:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Oct 20 04:01:17 2025 GMT
Not After : Oct 21 04:01:17 2025 GMT
Subject: CN=823ff330bd1f35ce07b02ccba15447c5e0a75e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:50:e0:61:17:fc:85:c2:37:5c:f3:c3:63:
20:be:08:c9:62:46:6c:f2:83:f7:96:3c:a4:16:2b:
f5:13:ba:75:87:0d:6e:92:00:77:0c:df:81:eb:0d:
9f:24:70:50:a5:3c:9d:81:23:b1:eb:f3:be:8d:63:
db:04:bf:cf:99:59:6a:e2:99:e4:d2:18:69:f2:62:
fc:9d:64:da:19:31:b0:19:b0:1c:1f:36:e2:6b:c4:
2a:9c:83:0b:7b:42:08:71:3f:86:96:b3:e4:25:c4:
26:56:4d:d3:4d:c2:82:b2:65:c8:be:ed:ae:16:01:
81:28:8d:d7:14:77:49:3b:4a:14:02:42:d1:f6:c2:
54:aa:1b:b9:67:bc:e7:52:e2:1e:60:18:f8:96:83:
c7:5a:d4:ba:a8:da:c6:be:8c:b5:4a:ec:d6:1d:e3:
05:0e:f4:a7:3b:9f:13:9c:d8:10:c3:83:72:c5:90:
42:a1:0e:9f:db:94:1b:ca:7f:46:21:6b:f6:b1:15:
ff:f3:7d:8d:7a:d7:e1:32:ab:8d:cc:25:9d:bd:7c:
14:5f:f4:60:91:04:01:ae:47:44:92:00:00:a6:0e:
11:a7:95:8c:f9:b5:c8:71:d3:18:ac:2f:5c:51:fc:
de:15:46:2d:b7:76:e2:bd:1d:48:25:31:00:f4:f9:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3F:F3:30:BD:1F:35:CE:07:B0:2C:CB:A1:54:47:C5:E0:A7:5E:2C
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8b:12:93:f9:61:c1:f7:29:30:f7:db:21:1d:a4:7b:8a:68:
ca:1c:b5:32:3c:c3:6f:10:04:77:47:97:9b:8d:0d:79:1f:53:
ce:49:b2:42:b8:14:6d:75:8c:f2:11:23:0f:c9:df:a7:37:29:
90:22:84:81:66:e8:aa:a7:fd:af:46:92:fe:5d:0e:8f:9b:bc:
0d:15:a3:8f:40:0f:b2:fb:dc:c6:9b:a1:b9:32:d9:6b:8f:db:
30:dc:08:52:d2:2c:f9:57:8d:cd:c5:1f:2e:1b:d0:f9:63:1c:
54:d1:9c:3d:57:51:ce:db:74:c3:b8:e2:bf:e7:a2:c1:43:b1:
4c:f6:be:94:c7:9a:b1:72:76:2f:7a:01:01:cb:d2:55:fa:a1:
6c:91:f6:7f:c9:17:1d:bd:f4:2f:d1:04:5d:fa:f3:9b:84:bd:
36:d1:8c:51:38:74:25:e9:a0:1e:0b:11:4f:b4:f1:f2:90:3a:
1d:86:cb:f8:f8:c4:6b:d3:5b:d6:50:b4:70:5f:41:d9:a3:9b:
23:ca:1d:5c:35:03:9e:0f:eb:f3:4b:bf:e0:c7:5a:33:f1:56:
98:bd:b2:12:47:08:5e:b6:85:07:64:38:fc:2c:b9:8a:2f:c7:
ce:a2:c4:2c:fe:89:f2:76:a5:e5:11:75:47:5b:d7:00:81:94:
4c:32:65:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x1UiGmMw2Y4MLtjy6BTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYTgzNWQwNjAxNzZlZTgxNjBjNzkzMGY4N2U2OTM1NTkw
OTBkNzgwHhcNMjUxMDIwMDQwMTE3WhcNMjUxMDIxMDQwMTE3WjAzMTEwLwYDVQQD
Eyg4MjNmZjMzMGJkMWYzNWNlMDdiMDJjY2JhMTU0NDdjNWUwYTc1ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv29Q4GEX/IXCN1zzw2MgvgjJYkZs
8oP3ljykFiv1E7p1hw1ukgB3DN+B6w2fJHBQpTydgSOx6/O+jWPbBL/PmVlq4pnk
0hhp8mL8nWTaGTGwGbAcHzbia8QqnIMLe0IIcT+GlrPkJcQmVk3TTcKCsmXIvu2u
FgGBKI3XFHdJO0oUAkLR9sJUqhu5Z7znUuIeYBj4loPHWtS6qNrGvoy1SuzWHeMF
DvSnO58TnNgQw4NyxZBCoQ6f25Qbyn9GIWv2sRX/832NetfhMquNzCWdvXwUX/Rg
kQQBrkdEkgAApg4Rp5WM+bXIcdMYrC9cUfzeFUYtt3bivR1IJTEA9PnMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII/8zC9HzXOB7Asy6FUR8Xgp14sMB8GA1UdIwQY
MBaAFKuoNdBgF27oFgx5MPh+aTVZCQ14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NmQxZDItYTZjMC00N2JlLTg3NzEt
YzNhYjZiMzQ2NmMwLzEvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NmQxZDItYTZjMC00N2JlLTg3NzEtYzNhYjZiMzQ2NmMw
LzEvcTZnMTBHQVhidWdXREhrdy1INXBOVmtKRFhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXosSk/lh
wfcpMPfbIR2ke4poyhy1MjzDbxAEd0eXm40NeR9TzkmyQrgUbXWM8hEjD8nfpzcp
kCKEgWboqqf9r0aS/l0Oj5u8DRWjj0APsvvcxpuhuTLZa4/bMNwIUtIs+VeNzcUf
LhvQ+WMcVNGcPVdRztt0w7jiv+eiwUOxTPa+lMeasXJ2L3oBAcvSVfqhbJH2f8kX
Hb30L9EEXfrzm4S9NtGMUTh0JemgHgsRT7Tx8pA6HYbL+PjEa9Nb1lC0cF9B2aOb
I8odXDUDng/r80u/4MdaM/FWmL2yEkcIXraFB2Q4/Cy5ii/HzqLELP6J8nal5RF1
R1vXAIGUTDJloA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:58 2025 by rpki-client