Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
File: qwJca7PczxsWUUnChzwEsabH2no.mft (raw, json)
Hash identifier: sYQFTORNKeDAoWZuJWL2ygBPmNA+mKZ+T15V3FcVGtg=
Subject key identifier: 3B:EF:07:51:CC:2F:7F:03:8F:85:04:E8:B5:D8:B3:58:47:82:BA:77
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Certificate issuer: /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial: 0199FBEC0E227F256C38AEFE13BFE7F64418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
Manifest number: 0B9E
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: qwJca7PczxsWUUnChzwEsabH2no.crl (hash: UeeUx/U1a399S/zqhG6cQgoVrO9VGmuBnF6fk7y7DWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0e:22:7f:25:6c:38:ae:fe:13:bf:e7:f6:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=3bef0751cc2f7f038f8504e8b5d8b3584782ba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:53:8a:ab:b5:42:f2:29:01:1c:0b:98:38:
72:cc:4c:bc:5f:b4:4e:28:4c:6d:6c:ec:87:fe:05:
b2:d4:5e:d1:67:47:5b:d6:68:73:be:57:ff:13:f6:
31:c6:3d:e7:5d:ee:4d:13:56:42:77:20:bd:09:a3:
97:75:52:17:29:7a:c3:6f:6e:3e:87:79:65:e8:53:
e9:5f:56:1c:4d:70:21:e0:2f:34:22:da:c0:fa:fc:
fc:c1:c3:d3:37:73:2f:ae:9a:18:52:87:49:00:54:
a9:c1:d1:1d:12:06:9a:6b:e1:4d:5d:e6:ff:d8:69:
77:cf:dd:77:2a:30:a1:42:c8:ed:0f:07:eb:b6:52:
38:72:ea:3b:14:dc:13:5a:bd:0e:48:c5:63:09:7a:
97:fd:a8:8b:3d:87:52:25:0e:19:89:48:4c:09:13:
55:7d:cd:92:05:55:51:7f:93:cb:de:fb:2e:2f:6b:
2b:a4:c8:e8:9c:00:f8:e6:18:e1:f4:ac:f1:27:71:
4a:7a:37:64:13:ea:f0:ff:f5:a2:f1:80:12:ed:6c:
ed:8e:99:08:b1:91:1f:c5:c3:91:7b:82:12:61:52:
3c:49:75:bd:4b:99:53:13:9d:a4:c2:a7:0e:8e:76:
58:a2:54:27:28:b5:b1:8c:d0:a4:47:2d:f0:51:c8:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EF:07:51:CC:2F:7F:03:8F:85:04:E8:B5:D8:B3:58:47:82:BA:77
X509v3 Authority Key Identifier:
keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:9a:b4:29:0b:44:71:a5:78:8a:56:f3:f7:74:ad:4b:e3:
7d:fb:ab:54:fd:96:07:0b:4a:99:b6:b1:ad:49:f0:61:1b:ea:
77:39:81:cd:fa:c1:79:e3:ed:dd:57:a8:5c:54:60:7c:7b:3f:
9e:8a:6c:46:9c:ae:e9:b1:51:7d:52:05:06:0f:1e:ce:46:77:
e0:19:ff:7b:7c:8e:84:d0:80:92:79:30:1a:6c:ca:00:16:55:
7d:33:51:3b:47:ac:e0:d5:78:91:46:e1:7c:b6:e8:6e:8b:37:
30:b2:0f:06:1e:75:ff:7c:ac:0c:15:10:37:cc:75:3c:fd:cd:
18:56:cb:b3:aa:c8:8c:e0:c5:de:dc:da:4d:97:4f:97:ab:68:
56:f1:4c:09:18:d5:b0:c1:ce:57:36:04:3d:af:d8:1f:62:d6:
79:96:43:65:df:1b:ee:fa:88:17:8b:82:70:69:d3:e3:9a:73:
0a:8d:0f:e9:8b:c3:76:1f:11:c2:88:02:e8:65:5f:8b:79:be:
c9:d0:b7:b2:8d:8d:e5:ff:06:e5:3a:e7:b1:a2:26:2d:60:f7:
41:27:f5:bf:e4:67:65:50:c7:3b:01:60:ce:c4:37:78:c1:e3:
3a:7b:76:5c:e3:ef:f4:b7:3c:0b:4c:c0:09:40:91:93:3d:c6:
17:e4:92:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77A4ifyVsOK7+E7/n9kQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDI1YzZiYjNkY2NmMWIxNjUxNDljMjg3M2MwNGIxYTZj
N2RhN2EwHhcNMjUxMDE5MTAwMjU1WhcNMjUxMDIwMTAwMjU1WjAzMTEwLwYDVQQD
EygzYmVmMDc1MWNjMmY3ZjAzOGY4NTA0ZThiNWQ4YjM1ODQ3ODJiYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgZTiqu1QvIpARwLmDhyzEy8X7RO
KExtbOyH/gWy1F7RZ0db1mhzvlf/E/Yxxj3nXe5NE1ZCdyC9CaOXdVIXKXrDb24+
h3ll6FPpX1YcTXAh4C80ItrA+vz8wcPTN3MvrpoYUodJAFSpwdEdEgaaa+FNXeb/
2Gl3z913KjChQsjtDwfrtlI4cuo7FNwTWr0OSMVjCXqX/aiLPYdSJQ4ZiUhMCRNV
fc2SBVVRf5PL3vsuL2srpMjonAD45hjh9KzxJ3FKejdkE+rw//Wi8YAS7WztjpkI
sZEfxcORe4ISYVI8SXW9S5lTE52kwqcOjnZYolQnKLWxjNCkRy3wUciy5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvvB1HML38Dj4UE6LXYs1hHgrp3MB8GA1UdIwQY
MBaAFKsCXGuz3M8bFlFJwoc8BLGmx9p6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdKY2E3UGN6eHNXVVVuQ2h6d0VzYWJIMm5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNWIxZTMtMjRjMC00NjY4LTlmNDAt
ZmU3NzQ3M2UzZGNmLzEvcXdKY2E3UGN6eHNXVVVuQ2h6d0VzYWJIMm5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wNWIxZTMtMjRjMC00NjY4LTlmNDAtZmU3NzQ3M2UzZGNm
LzEvcXdKY2E3UGN6eHNXVVVuQ2h6d0VzYWJIMm5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMb+atCkL
RHGleIpW8/d0rUvjffurVP2WBwtKmbaxrUnwYRvqdzmBzfrBeePt3VeoXFRgfHs/
nopsRpyu6bFRfVIFBg8ezkZ34Bn/e3yOhNCAknkwGmzKABZVfTNRO0es4NV4kUbh
fLbobos3MLIPBh51/3ysDBUQN8x1PP3NGFbLs6rIjODF3tzaTZdPl6toVvFMCRjV
sMHOVzYEPa/YH2LWeZZDZd8b7vqIF4uCcGnT45pzCo0P6YvDdh8RwogC6GVfi3m+
ydC3so2N5f8G5TrnsaImLWD3QSf1v+RnZVDHOwFgzsQ3eMHjOnt2XOPv9Lc8C0zA
CUCRkz3GF+SS2w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:08 2025 by rpki-client