Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
File: qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft (raw, json)
Hash identifier: e/2F8vO4ttLTiZiGn07Y07xGJEeXCjCmVLFZFAaEcvM=
Subject key identifier: 8E:11:7D:7D:70:A9:53:D6:11:0D:D7:CD:F7:5C:7B:02:E0:BE:AA:E5
Authority key identifier: A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
Certificate issuer: /CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Certificate serial: 019A0147C059712DE7BC727E918DFCEBB4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
Manifest number: 35
Signing time: Mon 20 Oct 2025 11:01:10 +0000
Manifest this update: Mon 20 Oct 2025 11:01:10 +0000
Manifest next update: Tue 21 Oct 2025 11:01:10 +0000
Files and hashes: 1: 9Z8ukRTnHwxerDAtA0qnDlPQEbU.roa (hash: 4obqNmEm+V3REFFE1EbEGvUeSn00rn6jf5Iod6y+GCY=)
2: qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl (hash: KGkM5pIyVpMgSBbCtGvWzYXzha4dvnoKiHrMOeCN3k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:c0:59:71:2d:e7:bc:72:7e:91:8d:fc:eb:b4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d457c66d1f5942dc3e7829d4fcda4ad3ddecb
Validity
Not Before: Oct 20 11:01:10 2025 GMT
Not After : Oct 21 11:01:10 2025 GMT
Subject: CN=8e117d7d70a953d6110dd7cdf75c7b02e0beaae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:bf:62:0c:6c:70:eb:eb:63:35:d5:ae:26:
cf:c8:bf:83:20:fc:b3:24:e0:19:73:bd:03:37:75:
58:97:e7:af:e5:3d:55:f9:e1:4a:4a:79:64:14:93:
c1:cb:29:f2:7e:73:f4:35:32:c5:03:7b:3e:0d:ea:
ac:7c:ef:ab:19:62:87:b0:3c:67:dc:1c:0b:12:3f:
0f:cf:70:b6:80:8e:8d:2a:ee:bd:54:f9:f6:e3:d4:
78:1f:76:5b:0d:1e:89:1c:85:0f:aa:64:d4:17:9f:
1a:fb:57:7c:fa:56:f6:54:e3:14:71:95:10:d2:bd:
2e:83:df:c7:56:e8:af:d6:f9:c7:0c:c4:d8:3a:0f:
40:ed:e7:ca:bc:14:ce:10:8f:96:f5:2d:f7:ba:32:
d0:35:df:f1:f6:c1:2d:1e:18:43:1e:ec:09:d7:5c:
3c:33:eb:bd:b6:61:48:97:f7:74:96:c1:9d:2f:0f:
ce:ac:02:31:a2:a7:0a:4d:3e:bd:60:65:36:51:bb:
9d:e5:54:dc:a2:69:e1:dd:53:a4:b4:82:c4:43:bd:
8c:5e:78:ea:13:f9:db:cb:1e:b1:d6:21:03:5c:80:
b0:4c:8b:c5:61:bc:f5:17:89:86:95:8d:3b:43:b6:
69:e1:6d:96:f4:33:8d:c1:11:38:0f:4a:72:11:9b:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:7D:7D:70:A9:53:D6:11:0D:D7:CD:F7:5C:7B:02:E0:BE:AA:E5
X509v3 Authority Key Identifier:
keyid:A9:0D:45:7C:66:D1:F5:94:2D:C3:E7:82:9D:4F:CD:A4:AD:3D:DE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ1FfGbR9ZQtw-eCnU_NpK093ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7bf679-e44c-49c3-88b8-2b6dceb6b39c/1/qQ1FfGbR9ZQtw-eCnU_NpK093ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c5:15:8f:a4:d7:3d:52:00:69:b6:0d:48:a5:84:ef:1d:9b:
b2:df:f1:85:03:58:82:82:2e:f5:55:14:bb:ac:c8:5d:24:62:
b1:cb:62:1e:ce:7e:b9:87:64:1e:8c:70:51:71:b2:f5:0b:61:
d8:7d:4e:b2:09:1b:8a:36:0f:f8:e8:36:02:c1:ab:3e:a4:26:
d8:63:98:d5:8f:50:d5:db:37:d3:94:30:5f:9a:53:2b:0b:d8:
08:b1:23:ad:be:79:65:b1:7e:31:8c:ff:9b:fc:bb:18:ff:01:
5c:fd:e6:59:e2:35:1e:0a:5e:b4:41:ba:80:f4:42:da:a8:4a:
cd:51:6d:68:c7:03:fc:77:ef:79:4c:97:af:54:fd:83:91:69:
2d:68:bd:37:0d:c1:7d:72:2f:64:c3:a6:cc:61:1f:52:d1:72:
e7:82:38:cb:b9:89:12:30:74:ed:93:99:9a:5f:ec:83:4c:4b:
f9:83:23:ec:5e:35:7f:00:65:0c:61:9e:a3:c5:7d:a3:24:2c:
d2:cb:08:1c:3b:db:b1:bc:a6:65:89:69:89:21:2e:5d:bb:85:
81:0c:e9:10:1c:2d:37:b6:48:2f:1d:da:a4:fa:21:ac:de:8b:
73:34:9e:96:55:99:f4:7a:3c:cb:01:e2:40:6a:b5:17:8b:f4:
50:4c:9d:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBR8BZcS3nvHJ+kY3867TyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MGQ0NTdjNjZkMWY1OTQyZGMzZTc4MjlkNGZjZGE0YWQz
ZGRlY2IwHhcNMjUxMDIwMTEwMTEwWhcNMjUxMDIxMTEwMTEwWjAzMTEwLwYDVQQD
Eyg4ZTExN2Q3ZDcwYTk1M2Q2MTEwZGQ3Y2RmNzVjN2IwMmUwYmVhYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUG/YgxscOvrYzXVribPyL+DIPyz
JOAZc70DN3VYl+ev5T1V+eFKSnlkFJPByynyfnP0NTLFA3s+DeqsfO+rGWKHsDxn
3BwLEj8Pz3C2gI6NKu69VPn249R4H3ZbDR6JHIUPqmTUF58a+1d8+lb2VOMUcZUQ
0r0ug9/HVuiv1vnHDMTYOg9A7efKvBTOEI+W9S33ujLQNd/x9sEtHhhDHuwJ11w8
M+u9tmFIl/d0lsGdLw/OrAIxoqcKTT69YGU2Ubud5VTcomnh3VOktILEQ72MXnjq
E/nbyx6x1iEDXICwTIvFYbz1F4mGlY07Q7Zp4W2W9DONwRE4D0pyEZu70wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4RfX1wqVPWEQ3XzfdcewLgvqrlMB8GA1UdIwQY
MBaAFKkNRXxm0fWULcPngp1PzaStPd7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVExRmZHYlI5WlF0dy1lQ25VX05wSzA5M3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83YmY2NzktZTQ0Yy00OWMzLTg4Yjgt
MmI2ZGNlYjZiMzljLzEvcVExRmZHYlI5WlF0dy1lQ25VX05wSzA5M3NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83YmY2NzktZTQ0Yy00OWMzLTg4YjgtMmI2ZGNlYjZiMzlj
LzEvcVExRmZHYlI5WlF0dy1lQ25VX05wSzA5M3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMUVj6TX
PVIAabYNSKWE7x2bst/xhQNYgoIu9VUUu6zIXSRisctiHs5+uYdkHoxwUXGy9Qth
2H1OsgkbijYP+Og2AsGrPqQm2GOY1Y9Q1ds305QwX5pTKwvYCLEjrb55ZbF+MYz/
m/y7GP8BXP3mWeI1HgpetEG6gPRC2qhKzVFtaMcD/HfveUyXr1T9g5FpLWi9Nw3B
fXIvZMOmzGEfUtFy54I4y7mJEjB07ZOZml/sg0xL+YMj7F41fwBlDGGeo8V9oyQs
0ssIHDvbsbymZYlpiSEuXbuFgQzpEBwtN7ZILx3apPohrN6LczSellWZ9Ho8ywHi
QGq1F4v0UEyddw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:12:54 2025 by rpki-client