Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: 7fRJ00atAD9llbz3616PrjwkaOKbSRtbG5emC+MpB+g=
Subject key identifier: 99:FC:46:B5:04:B3:2C:A3:78:53:34:9D:92:95:C0:54:D0:07:48:8D
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 0199FCC673937ABC3AE7AC9BCF09D83C3648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 07A0
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: 6PUuNM6kD7H9KDBzDlL_59AGPNY.roa (hash: njnCyxOOncTtTG+MixsjROLgTFP3LTieMN/tci4brok=)
2: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: 4h31xQm866iynY+GFSwVTeYCv/Nbk2FV9w2GhKzjvlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:73:93:7a:bc:3a:e7:ac:9b:cf:09:d8:3c:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=99fc46b504b32ca37853349d9295c054d007488d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:6f:c4:e4:56:9c:8b:8c:14:ea:ca:f4:26:
31:90:82:53:ea:73:ca:ed:f1:a1:b1:03:33:4e:be:
c8:44:bb:4d:96:f0:44:84:74:be:4b:f9:31:89:2b:
c3:94:99:f4:6d:54:b9:7d:8b:b9:8f:26:90:1a:5e:
ea:83:a3:c9:3f:01:02:96:8b:cf:31:39:d5:b8:c7:
2a:6b:98:f1:5d:e1:51:2d:1b:92:5e:6a:ee:d7:64:
5e:bf:74:73:39:35:89:c2:9a:41:37:25:b1:51:f0:
92:ae:31:a2:0f:9b:07:56:e0:8b:0a:4c:bb:d6:ed:
9f:2e:c4:aa:7f:0c:c3:7a:a6:5a:2f:bf:53:13:7b:
4b:b6:ce:6d:39:66:99:cf:fb:43:e4:73:ff:94:84:
ad:42:70:4d:45:8c:de:f1:f9:2d:4e:9b:a4:9b:6d:
84:99:37:66:44:a5:4f:89:2d:30:ec:ee:9d:6d:c2:
32:e5:e4:c0:68:67:cf:17:88:bc:cd:ae:e8:90:b4:
fc:8e:f7:66:3a:e6:27:e4:f6:9f:3f:18:53:3f:4e:
2c:4d:75:22:a4:bd:af:1c:82:78:91:f2:df:86:7d:
2e:66:89:2b:92:d6:1c:a8:b8:2b:78:f8:3d:17:8c:
d9:cb:11:c1:ca:60:76:66:ea:25:a1:91:f4:c4:ed:
7e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FC:46:B5:04:B3:2C:A3:78:53:34:9D:92:95:C0:54:D0:07:48:8D
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9d:e8:3c:c1:1b:e0:c4:b7:86:0a:f3:8c:e9:30:51:8b:34:
e0:45:f8:dd:59:51:ac:c4:61:1e:6d:7a:8a:62:31:84:5f:95:
99:94:2a:5e:80:e6:95:82:ae:33:78:c2:85:ed:b0:4b:76:86:
e0:34:62:59:1b:0f:50:d3:f4:01:2a:0f:20:06:de:39:bd:af:
6d:29:2b:e7:78:19:a1:cd:55:e7:8d:c5:96:64:5a:5b:b0:2e:
42:52:19:c3:0d:93:7b:aa:83:82:38:9f:23:d3:89:45:e9:6f:
55:34:0e:97:77:54:02:26:9c:ce:55:b5:cd:1b:4c:d7:39:31:
9b:d4:60:7d:f5:c9:0c:7f:c4:2a:13:cf:e4:80:51:ab:b9:13:
e2:20:5c:f3:9e:1f:ff:b8:8d:33:59:47:b5:99:ec:05:7f:c1:
86:a7:6e:fd:eb:66:ad:4f:a7:08:66:cd:89:73:90:65:d3:c9:
be:bd:e0:c3:c0:a9:52:4c:e3:e7:3c:4b:99:2f:7a:26:e6:92:
99:b8:c7:83:b0:28:4d:16:02:ba:7d:dd:4b:bd:95:6e:e5:9a:
df:a8:b3:99:13:1f:0a:14:5a:1c:36:ac:b6:63:cf:b6:bf:62:
6a:c4:fb:bb:2b:43:8a:0c:c6:a9:4d:ef:9b:61:fd:34:fb:72:
19:91:09:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnOTerw656ybzwnYPDZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj
MTE2M2IwHhcNMjUxMDE5MTQwMTI4WhcNMjUxMDIwMTQwMTI4WjAzMTEwLwYDVQQD
Eyg5OWZjNDZiNTA0YjMyY2EzNzg1MzM0OWQ5Mjk1YzA1NGQwMDc0ODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g1vxORWnIuMFOrK9CYxkIJT6nPK
7fGhsQMzTr7IRLtNlvBEhHS+S/kxiSvDlJn0bVS5fYu5jyaQGl7qg6PJPwEClovP
MTnVuMcqa5jxXeFRLRuSXmru12Rev3RzOTWJwppBNyWxUfCSrjGiD5sHVuCLCky7
1u2fLsSqfwzDeqZaL79TE3tLts5tOWaZz/tD5HP/lIStQnBNRYze8fktTpukm22E
mTdmRKVPiS0w7O6dbcIy5eTAaGfPF4i8za7okLT8jvdmOuYn5PafPxhTP04sTXUi
pL2vHIJ4kfLfhn0uZokrktYcqLgrePg9F4zZyxHBymB2ZuoloZH0xO1+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn8RrUEsyyjeFM0nZKVwFTQB0iNMB8GA1UdIwQY
MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt
N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw
LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp3oPMEb
4MS3hgrzjOkwUYs04EX43VlRrMRhHm16imIxhF+VmZQqXoDmlYKuM3jChe2wS3aG
4DRiWRsPUNP0ASoPIAbeOb2vbSkr53gZoc1V543FlmRaW7AuQlIZww2Te6qDgjif
I9OJRelvVTQOl3dUAiaczlW1zRtM1zkxm9RgffXJDH/EKhPP5IBRq7kT4iBc854f
/7iNM1lHtZnsBX/Bhqdu/etmrU+nCGbNiXOQZdPJvr3gw8CpUkzj5zxLmS96JuaS
mbjHg7AoTRYCun3dS72VbuWa36izmRMfChRaHDastmPPtr9iasT7uytDigzGqU3v
m2H9NPtyGZEJcQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:13 2025 by rpki-client