Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
File: Q1lOVdyWy5uYClKqY35IqNhzicA.mft (raw, json)
Hash identifier: JeSZqUgHXyqObZGWDPYyGLvZdg+Aw2obiZH9gb/IYHY=
Subject key identifier: EE:1D:EB:BD:36:F2:85:68:C1:04:6F:4B:D1:CE:65:18:EC:24:33:37
Authority key identifier: 43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
Certificate issuer: /CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Certificate serial: 0199FD6ACFF301544A0FB52B8F178D7035F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:00:59 +0000
Manifest this update: Sun 19 Oct 2025 17:00:59 +0000
Manifest next update: Mon 20 Oct 2025 17:00:59 +0000
Files and hashes: 1: Q1lOVdyWy5uYClKqY35IqNhzicA.crl (hash: nZFaPLjkdFD5uu/F2MPWgE5hAm/Hqako4vmNnR4p9ak=)
2: slluv3R124ZjYHkgVx7dTemjQTU.roa (hash: hgGXxpbRT21iCsVlLONQjFDvuEVwyF4hosL0Wo4PjYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:cf:f3:01:54:4a:0f:b5:2b:8f:17:8d:70:35:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43594e55dc96cb9b980a52aa637e48a8d87389c0
Validity
Not Before: Oct 19 17:00:59 2025 GMT
Not After : Oct 20 17:00:59 2025 GMT
Subject: CN=ee1debbd36f28568c1046f4bd1ce6518ec243337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:77:fa:ac:59:c1:1b:23:5e:9d:7e:2c:84:
b0:72:0b:91:85:7f:79:38:6b:70:71:78:40:59:2a:
4b:67:4f:2d:bf:a0:69:61:fa:7f:0e:9a:de:40:91:
bb:e7:21:da:65:56:b6:15:cc:19:07:71:e5:ad:34:
7d:55:9b:d3:51:8e:40:f3:83:0a:90:57:e0:84:a5:
11:09:58:7a:7b:70:55:05:f0:04:4b:00:99:ec:bb:
d6:fd:fe:92:31:c9:fb:29:cb:e1:66:a2:74:79:e9:
1f:9a:ab:1e:fc:44:9b:04:d4:5a:e9:87:d8:da:47:
d4:4b:4e:ee:80:7f:f1:b2:4c:06:d4:be:a7:e6:f6:
dc:1c:e8:6f:28:7d:cf:ea:e5:0d:e2:86:a9:48:1b:
e5:07:84:b7:aa:35:3f:be:e1:ca:e0:18:1f:98:95:
01:b1:04:b9:f7:de:e5:88:db:99:98:ae:b0:22:ab:
9e:a5:21:87:4e:dc:28:32:0a:62:69:05:b9:0c:8b:
d6:27:11:20:69:94:f0:f3:9d:5c:ab:1e:e0:b4:ac:
cb:2e:32:22:04:ee:80:e7:40:8c:78:19:22:64:42:
2e:c4:2a:5b:d2:ac:76:61:a9:3b:c3:66:7f:4f:b5:
1e:ce:d8:f4:a2:33:be:67:bc:55:f0:2c:c1:0d:d0:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:EB:BD:36:F2:85:68:C1:04:6F:4B:D1:CE:65:18:EC:24:33:37
X509v3 Authority Key Identifier:
keyid:43:59:4E:55:DC:96:CB:9B:98:0A:52:AA:63:7E:48:A8:D8:73:89:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1lOVdyWy5uYClKqY35IqNhzicA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85e125-85d6-43f0-98bf-d8fa0eda3abe/1/Q1lOVdyWy5uYClKqY35IqNhzicA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:66:2c:17:56:09:25:dd:c2:d0:7e:cb:fe:5a:24:be:62:e1:
09:da:5f:56:66:e8:99:98:b7:58:ae:5d:31:72:97:41:ad:11:
ab:f7:71:51:2a:69:2d:3a:68:2a:4c:a5:04:62:7b:e8:66:ce:
d3:0f:c4:ea:b1:3e:cf:cd:9f:bc:d9:c9:03:f6:06:ad:f0:e1:
8c:43:fe:55:52:ea:d3:36:b4:84:6d:20:ee:59:98:fd:45:fa:
9b:27:e3:97:27:59:7c:59:c7:2d:a2:35:ed:3e:3a:03:59:79:
73:0a:2c:a0:05:75:44:5c:f5:5b:e1:83:b1:b3:0c:ea:d5:57:
96:fb:f5:34:80:77:4e:a0:40:12:eb:01:26:fc:77:e6:eb:91:
73:09:d3:9b:72:67:87:6c:5a:11:45:c0:75:f6:bf:06:fa:b2:
09:d7:9e:9d:6c:53:cb:8f:ca:92:bd:d3:51:68:88:f0:9c:a5:
dc:c3:6c:f0:af:d7:e7:36:5b:23:1d:b7:c7:18:1f:af:e8:96:
81:28:af:0f:32:af:ed:d3:72:1f:66:30:21:64:9f:ea:07:6c:
49:1b:37:5a:7a:a7:de:cc:f6:6d:a9:cf:5d:a3:7b:7c:24:21:
56:eb:d9:3d:c0:3e:78:ed:8f:5e:d8:7c:83:a5:d9:2e:b4:01:
17:e1:24:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9as/zAVRKD7UrjxeNcDX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTk0ZTU1ZGM5NmNiOWI5ODBhNTJhYTYzN2U0OGE4ZDg3
Mzg5YzAwHhcNMjUxMDE5MTcwMDU5WhcNMjUxMDIwMTcwMDU5WjAzMTEwLwYDVQQD
EyhlZTFkZWJiZDM2ZjI4NTY4YzEwNDZmNGJkMWNlNjUxOGVjMjQzMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Dl3+qxZwRsjXp1+LISwcguRhX95
OGtwcXhAWSpLZ08tv6BpYfp/DpreQJG75yHaZVa2FcwZB3HlrTR9VZvTUY5A84MK
kFfghKURCVh6e3BVBfAESwCZ7LvW/f6SMcn7KcvhZqJ0eekfmqse/ESbBNRa6YfY
2kfUS07ugH/xskwG1L6n5vbcHOhvKH3P6uUN4oapSBvlB4S3qjU/vuHK4BgfmJUB
sQS5997liNuZmK6wIquepSGHTtwoMgpiaQW5DIvWJxEgaZTw851cqx7gtKzLLjIi
BO6A50CMeBkiZEIuxCpb0qx2Yak7w2Z/T7Ueztj0ojO+Z7xV8CzBDdDaVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4d67028oVowQRvS9HOZRjsJDM3MB8GA1UdIwQY
MBaAFENZTlXclsubmApSqmN+SKjYc4nAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYt
ZDhmYTBlZGEzYWJlLzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NWUxMjUtODVkNi00M2YwLTk4YmYtZDhmYTBlZGEzYWJl
LzEvUTFsT1ZkeVd5NXVZQ2xLcVkzNUlxTmh6aWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGYsF1YJ
Jd3C0H7L/lokvmLhCdpfVmbomZi3WK5dMXKXQa0Rq/dxUSppLTpoKkylBGJ76GbO
0w/E6rE+z82fvNnJA/YGrfDhjEP+VVLq0za0hG0g7lmY/UX6myfjlydZfFnHLaI1
7T46A1l5cwosoAV1RFz1W+GDsbMM6tVXlvv1NIB3TqBAEusBJvx35uuRcwnTm3Jn
h2xaEUXAdfa/BvqyCdeenWxTy4/Kkr3TUWiI8Jyl3MNs8K/X5zZbIx23xxgfr+iW
gSivDzKv7dNyH2YwIWSf6gdsSRs3Wnqn3sz2banPXaN7fCQhVuvZPcA+eO2PXth8
g6XZLrQBF+Ek+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:17 2025 by rpki-client