Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: tweacNFaxyLXcYLIiyN5UbLScdTrDVs0/UE01VjjKCg=
Subject key identifier: 4F:E2:7C:0D:B1:AA:3E:A8:E5:6A:69:E9:F8:28:E1:D1:CA:4D:C4:07
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 019A01B62AEDC4FC7F1CF8A143A0FFEE9F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 03FD
Signing time: Mon 20 Oct 2025 13:01:46 +0000
Manifest this update: Mon 20 Oct 2025 13:01:46 +0000
Manifest next update: Tue 21 Oct 2025 13:01:46 +0000
Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: xyDuWkcJjX0pTwc1XIfz/bHCu/D4TyLidlgqGD1gGyg=)
2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:2a:ed:c4:fc:7f:1c:f8:a1:43:a0:ff:ee:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Oct 20 13:01:46 2025 GMT
Not After : Oct 21 13:01:46 2025 GMT
Subject: CN=4fe27c0db1aa3ea8e56a69e9f828e1d1ca4dc407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:65:76:63:ba:b4:e3:c6:e6:ea:39:7c:e4:
9e:f9:41:48:32:0e:03:74:d5:d6:5c:16:c5:73:3b:
37:e6:64:51:6e:66:eb:4f:ff:28:cd:4e:5a:a7:e0:
4b:97:26:19:8e:17:ab:95:dd:81:9b:fd:52:a0:8e:
95:b7:93:54:4f:d8:5e:5a:69:cb:ec:78:5e:35:05:
bd:74:f7:9b:5a:2c:36:1b:d2:de:f3:47:71:de:8a:
88:8f:fa:0f:ca:a4:6a:5b:bf:06:be:d9:71:ae:47:
55:a8:c6:83:5c:94:71:a0:34:e8:31:65:73:a5:c9:
9c:87:62:ff:67:12:28:bf:15:31:d4:cc:9a:e4:0e:
a8:91:b9:8a:58:c7:73:ed:27:70:a8:64:b1:0f:17:
10:f1:6e:e0:c5:e0:76:f1:d0:79:b7:56:10:2d:7b:
17:4f:b9:cb:e0:87:4a:9a:f7:fc:9a:1b:90:b4:ad:
54:3b:07:b0:f6:71:84:c0:4e:8b:31:6a:4b:1c:52:
c0:64:27:1c:ac:83:18:3c:eb:cf:00:8a:2d:7b:17:
df:00:9b:42:48:84:9b:e2:d3:64:af:c4:6c:76:34:
a9:df:94:f8:22:46:82:77:d3:8c:c8:fa:e4:93:d9:
2e:4d:ef:06:09:76:b9:f9:92:7f:48:b0:87:8d:25:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E2:7C:0D:B1:AA:3E:A8:E5:6A:69:E9:F8:28:E1:D1:CA:4D:C4:07
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:29:4a:c3:74:61:55:01:f8:98:d1:0d:ec:4c:54:9a:3d:21:
53:32:b1:19:99:56:c2:ec:38:6c:f9:71:65:c0:13:ce:80:e1:
27:1a:3a:08:a2:4e:03:dc:2d:23:a2:98:fd:87:63:97:e9:0b:
41:ad:67:a9:b3:19:bd:1a:a0:7e:9c:00:4d:b8:e2:29:1a:4e:
94:b2:ce:ff:64:a8:09:f8:fb:39:73:d1:a1:5a:4a:6f:9e:63:
23:52:c8:01:5c:e3:c8:63:03:0e:bf:c3:3a:6e:95:c8:c3:56:
54:35:f7:be:12:39:31:44:75:d9:02:c7:ae:5f:ed:98:23:46:
f6:ff:e0:b4:a3:cc:4a:d5:d1:39:46:53:5f:16:e7:f4:9f:6c:
74:ae:d9:f8:bd:63:e5:86:22:e0:5b:e9:d4:33:da:a8:7f:c7:
61:bb:11:5b:ad:82:fc:5f:16:80:8f:e6:b4:07:3d:4d:df:85:
bd:ae:2c:c1:de:db:fd:a4:8b:75:ac:b7:70:a1:71:39:bb:97:
5c:b6:b9:68:13:de:8e:30:46:63:4d:f4:f9:0c:d3:1b:6d:95:
41:8a:6c:1e:06:a3:a6:fd:64:0b:36:fb:0b:47:fa:f4:c3:07:
7d:b1:6f:f2:07:29:97:cb:a9:92:3a:d2:e1:df:4a:0f:f7:78:
90:10:14:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtirtxPx/HPihQ6D/7p9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWU0MzIxY2YyMThiOTI2NWQ1NjNiNWJlYTUxZGJmMTc2
NmNlYzgwHhcNMjUxMDIwMTMwMTQ2WhcNMjUxMDIxMTMwMTQ2WjAzMTEwLwYDVQQD
Eyg0ZmUyN2MwZGIxYWEzZWE4ZTU2YTY5ZTlmODI4ZTFkMWNhNGRjNDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPZldmO6tOPG5uo5fOSe+UFIMg4D
dNXWXBbFczs35mRRbmbrT/8ozU5ap+BLlyYZjherld2Bm/1SoI6Vt5NUT9heWmnL
7HheNQW9dPebWiw2G9Le80dx3oqIj/oPyqRqW78GvtlxrkdVqMaDXJRxoDToMWVz
pcmch2L/ZxIovxUx1Mya5A6okbmKWMdz7SdwqGSxDxcQ8W7gxeB28dB5t1YQLXsX
T7nL4IdKmvf8mhuQtK1UOwew9nGEwE6LMWpLHFLAZCccrIMYPOvPAIotexffAJtC
SISb4tNkr8RsdjSp35T4IkaCd9OMyPrkk9kuTe8GCXa5+ZJ/SLCHjSXMvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/ifA2xqj6o5Wpp6fgo4dHKTcQHMB8GA1UdIwQY
MBaAFEOeQyHPIYuSZdVjtb6lHb8XZs7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUt
MTU1MTVhZDliNjA1LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZGQ3NTYtMzg5OS00YTQ5LWI2ZmUtMTU1MTVhZDliNjA1
LzEvUTU1REljOGhpNUpsMVdPMXZxVWR2eGRtenNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSlKw3Rh
VQH4mNEN7ExUmj0hUzKxGZlWwuw4bPlxZcATzoDhJxo6CKJOA9wtI6KY/Ydjl+kL
Qa1nqbMZvRqgfpwATbjiKRpOlLLO/2SoCfj7OXPRoVpKb55jI1LIAVzjyGMDDr/D
Om6VyMNWVDX3vhI5MUR12QLHrl/tmCNG9v/gtKPMStXROUZTXxbn9J9sdK7Z+L1j
5YYi4Fvp1DPaqH/HYbsRW62C/F8WgI/mtAc9Td+Fva4swd7b/aSLday3cKFxObuX
XLa5aBPejjBGY030+QzTG22VQYpsHgajpv1kCzb7C0f69MMHfbFv8gcpl8upkjrS
4d9KD/d4kBAU0w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:34 2025 by rpki-client