Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: lm7AEgcBRiwI92WWzH551Gzaaa+DScuEnAFJZ2eZOhU=
Subject key identifier: 33:27:A3:8D:5B:CF:81:B5:AF:DD:C8:8F:FB:02:54:F4:8E:1D:E2:BB
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 0199FB0F54C475FACEEF182D2A48F44F7060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 08F4
Signing time: Sun 19 Oct 2025 06:01:49 +0000
Manifest this update: Sun 19 Oct 2025 06:01:49 +0000
Manifest next update: Mon 20 Oct 2025 06:01:49 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: kICBIEOfrsCAyP0XYyxpSamkJBnvLHNEYaiQPKfpET4=)
2: pOmwZuP6Q-BxWvua_azIxnDrtaY.roa (hash: 1Gh5sWhYQZnz90m+gcSVdtSatfk353c30A4J7Tl7xJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:54:c4:75:fa:ce:ef:18:2d:2a:48:f4:4f:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Oct 19 06:01:49 2025 GMT
Not After : Oct 20 06:01:49 2025 GMT
Subject: CN=3327a38d5bcf81b5afddc88ffb0254f48e1de2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:ed:96:23:08:0a:60:99:0d:f7:fa:1e:72:
38:7a:64:17:10:69:d2:5a:1e:6b:f4:87:f5:13:63:
f1:4c:0a:2b:72:15:0d:05:ce:b2:b6:63:ad:28:dd:
07:f7:0a:2e:39:50:59:0b:25:b4:38:8d:d0:b2:bd:
74:d6:b8:fe:25:cb:4e:ec:ef:90:49:0c:bd:fd:63:
ee:ef:79:58:43:be:61:00:7d:0c:86:8e:88:50:7c:
dc:38:2d:47:5e:e1:95:1a:b4:00:65:cb:a4:36:20:
d2:93:af:67:d6:1b:4a:75:91:de:22:71:b8:d8:05:
27:4c:70:d7:07:f2:79:7f:d3:89:51:a0:fb:24:79:
2a:c9:18:ff:d7:39:02:7a:1c:94:0a:12:58:62:9e:
99:2b:0b:a4:0f:be:34:98:18:ed:58:62:a2:e7:e9:
c3:d7:f4:f2:f8:ed:4a:08:ae:1a:db:c6:8f:d3:05:
68:3a:2f:8a:28:09:5c:e5:de:d7:4e:57:92:87:35:
ad:f9:52:53:02:63:09:00:84:94:98:a9:56:8d:6b:
f1:e6:90:0d:29:fe:25:64:54:69:37:11:0f:6a:b1:
da:51:fc:91:a0:67:7b:d1:b7:e3:e0:9c:71:d9:75:
6c:f9:25:31:81:06:a4:f9:57:3a:f3:16:f2:c4:d0:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:A3:8D:5B:CF:81:B5:AF:DD:C8:8F:FB:02:54:F4:8E:1D:E2:BB
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:da:17:82:21:e6:ef:98:46:68:aa:80:b8:04:72:8d:3f:3d:
71:d1:28:15:c1:70:6d:b3:c2:e7:1f:5e:db:1e:7b:d0:4e:97:
5b:18:13:7e:d0:b9:ec:f0:2b:0d:db:e7:ef:45:0b:d7:75:90:
11:3f:64:b3:0e:ab:2f:7e:7c:7f:de:4c:b6:cf:0a:99:19:28:
a6:ec:92:f6:e6:bd:92:5a:81:9f:c4:e8:72:27:06:22:29:7d:
00:11:04:6a:a8:08:76:cb:fd:e5:80:99:1a:f7:08:ec:9c:da:
52:d2:28:02:0c:b2:ad:98:a3:c2:92:85:65:4f:94:00:e1:b6:
14:ce:fa:19:2d:bf:39:a7:a7:0e:c0:53:ae:c7:34:29:39:53:
a4:a3:e1:86:5a:49:2d:8a:ab:01:31:fe:e2:e8:ed:16:d8:a3:
d9:ee:dd:5c:f2:86:35:02:6e:59:a3:21:55:f4:e7:8b:32:5f:
53:2e:4a:98:c8:8a:e4:f6:ab:96:21:9d:f3:09:39:54:5e:c3:
7a:cb:2a:0a:cb:06:5a:ad:54:4a:a7:df:b8:7f:e6:38:ce:7f:
90:d2:29:1d:f7:a5:a0:6b:b2:ae:a7:08:6d:21:4b:11:b2:92:
67:88:c6:1f:58:97:89:5f:ff:61:c0:7f:f1:8a:60:f5:3f:52:
96:47:c5:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7D1TEdfrO7xgtKkj0T3BgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWU0OWUxYzc1NWZkZTAzOGJkMTg3NWM3ZjM5N2E1Njg2
NDYwMTQwHhcNMjUxMDE5MDYwMTQ5WhcNMjUxMDIwMDYwMTQ5WjAzMTEwLwYDVQQD
EygzMzI3YTM4ZDViY2Y4MWI1YWZkZGM4OGZmYjAyNTRmNDhlMWRlMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArevtliMICmCZDff6HnI4emQXEGnS
Wh5r9If1E2PxTAorchUNBc6ytmOtKN0H9wouOVBZCyW0OI3Qsr101rj+JctO7O+Q
SQy9/WPu73lYQ75hAH0Mho6IUHzcOC1HXuGVGrQAZcukNiDSk69n1htKdZHeInG4
2AUnTHDXB/J5f9OJUaD7JHkqyRj/1zkCehyUChJYYp6ZKwukD740mBjtWGKi5+nD
1/Ty+O1KCK4a28aP0wVoOi+KKAlc5d7XTleShzWt+VJTAmMJAISUmKlWjWvx5pAN
Kf4lZFRpNxEParHaUfyRoGd70bfj4Jxx2XVs+SUxgQak+Vc68xbyxND80wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMno41bz4G1r93Ij/sCVPSOHeK7MB8GA1UdIwQY
MBaAFEIeSeHHVf3gOL0Ydcfzl6VoZGAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82Y2JiMGUtZjQ1NS00NTczLWE5Zjkt
MzhkNjcxNmIyMDA1LzEvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82Y2JiMGUtZjQ1NS00NTczLWE5ZjktMzhkNjcxNmIyMDA1
LzEvUWg1SjRjZFZfZUE0dlJoMXhfT1hwV2hrWUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9oXgiHm
75hGaKqAuARyjT89cdEoFcFwbbPC5x9e2x570E6XWxgTftC57PArDdvn70UL13WQ
ET9ksw6rL358f95Mts8KmRkopuyS9ua9klqBn8TocicGIil9ABEEaqgIdsv95YCZ
GvcI7JzaUtIoAgyyrZijwpKFZU+UAOG2FM76GS2/OaenDsBTrsc0KTlTpKPhhlpJ
LYqrATH+4ujtFtij2e7dXPKGNQJuWaMhVfTnizJfUy5KmMiK5ParliGd8wk5VF7D
essqCssGWq1USqffuH/mOM5/kNIpHfeloGuyrqcIbSFLEbKSZ4jGH1iXiV//YcB/
8Ypg9T9SlkfFhA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:23 2025 by rpki-client