Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: 1hhztK2dEfo4VGnN2yT/Xbrcr3brZvSX4z5N914s0V4=
Subject key identifier: 13:C3:1D:89:B8:E0:34:01:CB:FB:13:DB:DE:C8:98:E9:68:0C:00:22
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 0199FFC741661903F32125C449200E061BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:01:12 +0000
Manifest this update: Mon 20 Oct 2025 04:01:12 +0000
Manifest next update: Tue 21 Oct 2025 04:01:12 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: 61PjXmqmE/twG/xcguUOMXOZblLes7vjSEC4Ki1EHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:41:66:19:03:f3:21:25:c4:49:20:0e:06:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Oct 20 04:01:12 2025 GMT
Not After : Oct 21 04:01:12 2025 GMT
Subject: CN=13c31d89b8e03401cbfb13dbdec898e9680c0022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:a4:0f:52:59:a7:83:03:fe:5a:5b:e4:07:
3c:c1:ec:e7:62:3d:03:11:73:e6:ae:9e:88:c4:5d:
63:65:8a:7c:a0:25:d3:31:d5:d3:6d:3c:c6:1c:1c:
9b:31:9f:57:ff:53:e7:e4:bc:d4:7c:04:b4:3d:71:
8c:51:43:4d:89:36:e9:f8:f3:50:c6:d5:2c:72:ad:
00:ba:20:e6:e1:ed:96:24:ce:be:a3:f9:65:de:63:
3c:b3:2f:1d:36:9b:d9:df:c8:86:13:3f:e4:3f:8d:
79:2a:68:10:2d:76:63:79:8a:8c:3d:a1:fd:93:86:
74:3d:42:5e:48:c7:0e:f6:a3:55:89:13:f2:e2:ca:
95:af:ab:44:db:b4:c3:8a:f4:d1:19:34:c3:26:dc:
69:36:ea:ff:7c:5b:b9:08:3b:65:89:c2:16:95:61:
28:96:8c:a7:e2:eb:1e:1c:92:79:94:1e:2a:c6:38:
29:d2:26:16:81:81:06:70:2a:ea:e3:ca:dd:6a:f3:
88:da:ba:c8:53:39:c7:36:af:a5:ac:11:c0:90:db:
09:13:8e:d8:90:59:d3:8e:46:04:c6:e0:3d:ba:c8:
b1:2d:65:d1:3a:63:77:1c:7b:71:e5:60:c5:9f:ce:
a3:31:61:c4:e5:fe:85:9a:d0:db:c4:8d:c0:84:55:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:1D:89:B8:E0:34:01:CB:FB:13:DB:DE:C8:98:E9:68:0C:00:22
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b6:5a:81:2d:50:38:51:59:dd:89:73:2e:a3:1e:eb:a3:3a:
42:eb:0c:c3:fa:20:7f:bf:1f:da:4a:08:6b:44:a4:38:0a:11:
ac:c6:a0:fa:4e:b8:a7:4e:34:f8:ee:cf:c5:5f:b7:69:7d:f2:
b6:86:ef:f3:62:86:eb:32:44:0c:98:1f:be:03:63:7b:b3:67:
1d:c3:c6:64:8f:e0:33:6d:d6:e0:48:6e:7a:03:38:56:f1:fd:
ba:a6:1e:82:91:9f:1f:89:d0:85:da:60:61:3b:12:25:bb:3c:
02:19:23:3f:6b:86:48:29:ba:77:a6:e7:75:32:4e:a8:39:87:
43:82:7a:0e:42:33:bc:13:a2:9f:e4:2f:7e:8d:b4:75:fa:3c:
ba:af:41:59:19:89:21:2d:63:9c:9c:bb:4a:4c:e8:b9:1a:84:
2e:8d:03:8c:64:7a:71:f8:ef:0a:ea:08:60:2d:0e:62:13:06:
4c:7c:a6:16:f2:bf:db:38:7b:5d:a8:0b:2a:07:7c:b3:4c:36:
bf:47:d1:f2:c7:20:dc:64:62:b9:e4:bf:e9:82:fd:8a:59:36:
7b:7d:31:5a:e4:c9:15:a3:af:0a:8f:74:c1:4d:c2:d6:93:98:
32:f0:f7:8f:f7:85:1e:cb:f8:55:63:25:fb:3c:79:dd:02:68:
ed:69:2e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x0FmGQPzISXESSAOBhvwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDQ5MTNkMDQzZGJiMTE3Y2Y2YjkzMjNjOGFiMjQ3Y2I1
MmUyNTEwHhcNMjUxMDIwMDQwMTEyWhcNMjUxMDIxMDQwMTEyWjAzMTEwLwYDVQQD
EygxM2MzMWQ4OWI4ZTAzNDAxY2JmYjEzZGJkZWM4OThlOTY4MGMwMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmakD1JZp4MD/lpb5Ac8weznYj0D
EXPmrp6IxF1jZYp8oCXTMdXTbTzGHBybMZ9X/1Pn5LzUfAS0PXGMUUNNiTbp+PNQ
xtUscq0AuiDm4e2WJM6+o/ll3mM8sy8dNpvZ38iGEz/kP415KmgQLXZjeYqMPaH9
k4Z0PUJeSMcO9qNViRPy4sqVr6tE27TDivTRGTTDJtxpNur/fFu5CDtlicIWlWEo
loyn4useHJJ5lB4qxjgp0iYWgYEGcCrq48rdavOI2rrIUznHNq+lrBHAkNsJE47Y
kFnTjkYExuA9usixLWXROmN3HHtx5WDFn86jMWHE5f6FmtDbxI3AhFWhDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPDHYm44DQBy/sT297ImOloDAAiMB8GA1UdIwQY
MBaAFA0EkT0EPbsRfPa5MjyKskfLUuJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEt
OTZjODFmYjY1MWEwLzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEtOTZjODFmYjY1MWEw
LzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLZagS1Q
OFFZ3YlzLqMe66M6QusMw/ogf78f2koIa0SkOAoRrMag+k64p040+O7PxV+3aX3y
tobv82KG6zJEDJgfvgNje7NnHcPGZI/gM23W4EhuegM4VvH9uqYegpGfH4nQhdpg
YTsSJbs8AhkjP2uGSCm6d6bndTJOqDmHQ4J6DkIzvBOin+Qvfo20dfo8uq9BWRmJ
IS1jnJy7SkzouRqELo0DjGR6cfjvCuoIYC0OYhMGTHymFvK/2zh7XagLKgd8s0w2
v0fR8scg3GRiueS/6YL9ilk2e30xWuTJFaOvCo90wU3C1pOYMvD3j/eFHsv4VWMl
+zx53QJo7WkuoA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:56 2025 by rpki-client