Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: jEDxrpCRv0++m78mGcOZkeH11Ks/2ymDNQHVCu3X68A=
Subject key identifier: C8:A4:2C:88:BD:8C:C5:63:54:2B:CD:50:FB:51:A8:E2:C2:60:EE:DB
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0199FC21CF0578434CC46D603D71C18E39E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 171C
Signing time: Sun 19 Oct 2025 11:01:38 +0000
Manifest this update: Sun 19 Oct 2025 11:01:38 +0000
Manifest next update: Mon 20 Oct 2025 11:01:38 +0000
Files and hashes: 1: 1rlq_fWBh0L2EOdc4wOrveymX9M.roa (hash: uLo8jSiIQHULdrJ1vEY1CI4ik+HqFZYLJVcuGGK3Myc=)
2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: r9dMzjCiiJ4bP4+6yYOmnlpdiHT7jrBgtDsM4oymMsg=)
3: nRc5J3U1ArDCY2LLpC71e5VOxQk.roa (hash: E8+EeEfD+RUrXtULDDufU5LOzCF+5+NypvieE+3At/0=)
4: qEe7jiQCVVLLBx5u5OwafrbOCu4.roa (hash: yHtgVmpxD5E04prGOwBb+veA9pDQxezWdCahN8/WpMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cf:05:78:43:4c:c4:6d:60:3d:71:c1:8e:39:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Oct 19 11:01:38 2025 GMT
Not After : Oct 20 11:01:38 2025 GMT
Subject: CN=c8a42c88bd8cc563542bcd50fb51a8e2c260eedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:8e:47:c2:37:eb:e9:1c:bf:78:f8:c5:67:
aa:5d:de:c4:cd:77:28:92:38:9c:fe:cb:59:f1:01:
bf:5c:06:e2:87:bd:ac:4a:63:af:74:26:38:77:e2:
9c:fc:a5:e7:02:b3:d5:ba:79:ef:36:4e:51:45:98:
d1:8b:a6:82:90:65:d7:02:c8:0c:aa:ae:e6:13:d4:
86:b8:de:53:0a:67:8c:e4:86:3a:e8:d5:05:f9:e8:
bf:fd:55:68:42:71:4c:d9:29:4f:31:8e:bb:99:3a:
cd:ee:39:8f:53:b2:27:80:91:25:b6:a1:a4:96:2b:
c3:c0:10:77:85:89:70:b6:39:da:c8:4f:d4:95:fc:
a3:0f:b4:62:e5:89:0d:97:77:f4:c9:b1:08:58:78:
c9:41:2d:18:59:86:6d:7b:50:04:98:3c:fe:d9:ed:
ed:1e:2e:1b:50:64:49:bd:4b:ec:e1:b5:3d:15:20:
f3:bc:7b:79:b9:88:c6:a9:7e:32:d3:d9:17:78:39:
23:65:ff:f8:27:0b:e3:67:ea:0e:81:17:93:bc:0d:
c2:54:d3:a1:bd:80:66:ab:33:23:15:1b:5c:e8:a5:
ae:94:cd:fd:60:ef:06:f6:9c:00:ed:1a:d9:5d:6a:
d6:5c:cd:86:62:92:3f:27:54:3d:d5:f1:02:1b:a6:
35:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A4:2C:88:BD:8C:C5:63:54:2B:CD:50:FB:51:A8:E2:C2:60:EE:DB
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:56:3d:f8:05:55:b1:38:45:0b:64:55:5e:7f:7b:08:01:5c:
92:c3:ba:c5:fc:71:1e:87:c1:6e:17:7d:f0:d2:fb:5b:c2:65:
78:fe:53:af:20:09:ba:a0:ff:1f:8a:74:11:9a:b0:45:01:6b:
05:0e:3e:8d:53:42:1f:71:51:a7:a6:86:56:6e:8c:da:e9:c2:
b4:eb:20:ff:23:52:68:55:45:3c:0c:65:4f:1b:5a:38:74:eb:
d6:8e:c1:43:f0:ae:2e:88:50:71:29:1d:2f:e4:a4:cf:5d:ef:
b0:28:4b:1f:8c:69:5e:1c:43:0a:65:3e:18:84:aa:e6:19:7e:
02:3c:91:27:bb:5a:53:68:be:5e:48:ed:0c:6b:fa:91:a9:ae:
42:3a:08:ee:58:5f:49:21:e2:31:83:0b:0e:df:c3:58:0b:54:
a2:94:b0:37:07:9b:bc:cf:02:00:e1:60:27:e5:0d:10:a0:f6:
e7:0f:29:b1:42:52:66:1a:0e:bb:4d:be:0a:4d:6c:13:6a:ad:
ce:32:30:1e:82:f4:2b:a5:3c:e7:be:3b:d6:ee:40:71:4d:ea:
ff:b6:10:8d:14:4c:5a:e3:e3:f1:6a:1b:be:28:8d:d4:96:d0:
6b:0c:26:c4:18:51:5d:95:18:71:fc:c2:1f:52:8e:df:cb:26:
2e:65:23:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ic8FeENMxG1gPXHBjjnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjUxMDE5MTEwMTM4WhcNMjUxMDIwMTEwMTM4WjAzMTEwLwYDVQQD
EyhjOGE0MmM4OGJkOGNjNTYzNTQyYmNkNTBmYjUxYThlMmMyNjBlZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tqOR8I36+kcv3j4xWeqXd7EzXco
kjic/stZ8QG/XAbih72sSmOvdCY4d+Kc/KXnArPVunnvNk5RRZjRi6aCkGXXAsgM
qq7mE9SGuN5TCmeM5IY66NUF+ei//VVoQnFM2SlPMY67mTrN7jmPU7IngJEltqGk
livDwBB3hYlwtjnayE/UlfyjD7Ri5YkNl3f0ybEIWHjJQS0YWYZte1AEmDz+2e3t
Hi4bUGRJvUvs4bU9FSDzvHt5uYjGqX4y09kXeDkjZf/4JwvjZ+oOgReTvA3CVNOh
vYBmqzMjFRtc6KWulM39YO8G9pwA7RrZXWrWXM2GYpI/J1Q91fECG6Y1NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMikLIi9jMVjVCvNUPtRqOLCYO7bMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk
LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFY9+AVV
sThFC2RVXn97CAFcksO6xfxxHofBbhd98NL7W8JleP5TryAJuqD/H4p0EZqwRQFr
BQ4+jVNCH3FRp6aGVm6M2unCtOsg/yNSaFVFPAxlTxtaOHTr1o7BQ/CuLohQcSkd
L+Skz13vsChLH4xpXhxDCmU+GISq5hl+AjyRJ7taU2i+XkjtDGv6kamuQjoI7lhf
SSHiMYMLDt/DWAtUopSwNwebvM8CAOFgJ+UNEKD25w8psUJSZhoOu02+Ck1sE2qt
zjIwHoL0K6U857471u5AcU3q/7YQjRRMWuPj8WobviiN1JbQawwmxBhRXZUYcfzC
H1KO38smLmUjxQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:47 2025 by rpki-client