
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: cl/KMw4pyHFO3re0QafxbpJgzrtFMRJjX/0ecyStOzM=
Subject key identifier: 2E:97:A2:F8:02:EB:4C:0B:04:2D:66:08:28:DE:DA:66:CA:17:4D:79
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 0199FC8F5882D984B5A2E33E0D6DDBA36A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 05E6
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: _hwoOnSYlfjUaTComm-3hBe2zs0.roa (hash: PBuw/FbCVTJ5hqhxHvWYLj5Cm4bbcUK+XRb8x/VJhJI=)
3: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: ysKXvFR0U/BofypE62oGgpEpyXgWEVc2+EdQ4KVnpnQ=)
4: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:58:82:d9:84:b5:a2:e3:3e:0d:6d:db:a3:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=2e97a2f802eb4c0b042d660828deda66ca174d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:56:92:ce:5b:24:ae:e2:4d:69:ec:b7:69:
f5:93:ca:3d:1e:27:f5:03:fa:d7:c2:4b:8a:14:37:
70:82:c8:30:1e:3d:e8:3e:10:55:17:48:c8:98:09:
d5:6f:d9:03:03:ac:d0:4b:1b:8a:6d:e7:29:78:e5:
a2:40:52:d1:02:32:70:41:e5:75:49:a9:6e:0f:0f:
d5:dc:f3:f1:c4:20:d8:ff:5e:49:c4:a6:da:a3:60:
05:0b:ef:93:7a:40:99:7b:c0:0a:5f:5a:4e:59:67:
e7:4f:26:66:7b:54:7b:0d:e3:e9:95:dd:46:20:51:
a3:a7:66:e9:17:b6:89:ae:2b:ad:a9:0d:b0:d7:14:
84:5e:74:3f:fb:92:34:38:7a:b7:00:d8:b9:94:25:
7d:7f:78:21:dc:fc:52:6a:ae:98:d2:3b:6d:6e:b8:
57:ba:92:32:e2:71:d4:a5:46:d7:19:fd:77:d0:ad:
1d:76:86:88:6e:b8:b3:55:a8:23:82:9f:2a:de:5e:
4b:78:53:73:a2:64:65:93:eb:d8:e2:d2:de:6a:56:
3b:cb:7d:09:95:ca:cd:fc:2a:c5:60:72:65:25:5f:
78:ab:83:87:b5:a7:09:1b:4a:83:8c:6c:c6:3b:be:
f1:1e:f8:20:d0:35:23:f5:fe:fe:81:ee:d4:63:e4:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:97:A2:F8:02:EB:4C:0B:04:2D:66:08:28:DE:DA:66:CA:17:4D:79
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:73:df:1e:3b:30:90:21:70:8e:09:71:28:36:07:c6:51:ef:
d0:63:ed:30:ed:69:b2:87:e2:42:a1:ee:9e:e8:87:52:84:be:
ba:c0:23:9a:9c:b2:c4:a3:76:3c:bb:26:d6:25:68:4c:a0:8a:
fc:26:df:11:79:1a:c1:08:fc:3f:2b:31:f6:18:4b:b4:11:dc:
a2:8f:f8:42:08:24:c0:12:5d:fa:d0:f7:0a:6c:19:08:ec:4d:
7c:fd:5d:6a:ca:a1:b5:d1:31:f0:b2:61:9b:ae:b9:73:e0:31:
d8:ee:a5:7b:ac:34:8d:d1:04:bd:d4:4b:11:63:c6:e6:3e:65:
4a:52:d1:35:8a:0d:90:68:16:29:1a:e1:d1:2d:1f:f1:24:f1:
b8:e8:d2:6e:ec:13:0d:a9:d0:1e:33:f0:7c:52:b2:d8:d0:99:
ea:e6:6a:18:e8:ff:e2:7e:c9:e5:e4:c7:b8:e9:62:cd:32:82:
a2:fc:47:f8:1b:02:e2:7e:24:a2:4e:f5:01:e6:3c:7c:c2:33:
66:be:0f:50:e2:5c:42:fd:b6:1d:81:30:61:28:72:4c:ce:1e:
3c:7b:73:d8:03:e6:52:82:28:61:48:84:68:3d:c0:1f:0b:53:
86:8a:06:8e:b1:1c:32:ec:ea:fc:9d:b7:80:e8:49:f1:fd:43:
45:dc:99:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1iC2YS1ouM+DW3bo2p/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTI5N2IxZDM2YTQyZGUzOGU4NDgwYmI5MjliNDViYzkw
MzBjOWQwHhcNMjUxMDE5MTMwMTE2WhcNMjUxMDIwMTMwMTE2WjAzMTEwLwYDVQQD
EygyZTk3YTJmODAyZWI0YzBiMDQyZDY2MDgyOGRlZGE2NmNhMTc0ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13FWks5bJK7iTWnst2n1k8o9Hif1
A/rXwkuKFDdwgsgwHj3oPhBVF0jImAnVb9kDA6zQSxuKbecpeOWiQFLRAjJwQeV1
SaluDw/V3PPxxCDY/15JxKbao2AFC++TekCZe8AKX1pOWWfnTyZme1R7DePpld1G
IFGjp2bpF7aJriutqQ2w1xSEXnQ/+5I0OHq3ANi5lCV9f3gh3PxSaq6Y0jttbrhX
upIy4nHUpUbXGf130K0ddoaIbrizVagjgp8q3l5LeFNzomRlk+vY4tLealY7y30J
lcrN/CrFYHJlJV94q4OHtacJG0qDjGzGO77xHvgg0DUj9f7+ge7UY+TnqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6XovgC60wLBC1mCCje2mbKF015MB8GA1UdIwQY
MBaAFKgSl7HTakLeOOhIC7kptFvJAwydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUt
MjJkZDBmMzkyOGQ1LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83MjBlNWYtN2YzMy00ZDlkLThjZGUtMjJkZDBmMzkyOGQ1
LzEvcUJLWHNkTnFRdDQ0NkVnTHVTbTBXOGtEREowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHPfHjsw
kCFwjglxKDYHxlHv0GPtMO1psofiQqHunuiHUoS+usAjmpyyxKN2PLsm1iVoTKCK
/CbfEXkawQj8Pysx9hhLtBHcoo/4QggkwBJd+tD3CmwZCOxNfP1dasqhtdEx8LJh
m665c+Ax2O6le6w0jdEEvdRLEWPG5j5lSlLRNYoNkGgWKRrh0S0f8STxuOjSbuwT
DanQHjPwfFKy2NCZ6uZqGOj/4n7J5eTHuOlizTKCovxH+BsC4n4kok71AeY8fMIz
Zr4PUOJcQv22HYEwYShyTM4ePHtz2APmUoIoYUiEaD3AHwtThooGjrEcMuzq/J23
gOhJ8f1DRdyZHQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:45 2025 by rpki-client