Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: HkuQ9Z7s9/8SqBLSSjjREu+XZeQASB3jG4ZD9LZxmBk=
Subject key identifier: 62:5C:5E:EF:0D:18:17:78:37:D9:BB:A8:DC:02:09:89:C2:FB:6A:5C
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 0199FDD9ED2CC7B93C5B2E1E1075A61627EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: n7VAS0LbLAEPejcLx9z6yurKoeOop9l6EmADhX2RdIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ed:2c:c7:b9:3c:5b:2e:1e:10:75:a6:16:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=625c5eef0d18177837d9bba8dc020989c2fb6a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ea:1e:eb:7b:91:f6:b2:6a:be:7c:ef:8f:29:
53:45:9c:de:62:72:36:d8:3b:f6:d0:c3:83:69:19:
f0:f6:2d:c7:be:b9:ad:9c:5e:5d:00:4c:2b:89:76:
33:4f:71:73:cf:4b:4c:bb:f7:f3:14:28:3b:be:28:
b2:85:15:a0:d6:f3:09:24:72:df:52:5f:b8:5c:58:
ea:d0:99:ab:61:bb:1c:1e:d5:6f:af:fd:94:bb:a0:
98:41:1b:66:f5:d0:23:97:83:f4:cd:e2:27:be:fb:
40:ba:0a:cc:d1:b5:ff:3b:f3:1f:4f:68:d2:09:fc:
fc:e3:49:bb:a7:b4:4a:d1:7e:8c:36:91:0d:09:de:
ad:f1:58:f5:a6:8c:f6:ff:4c:e1:85:5e:c2:40:b7:
82:6d:44:84:c4:d8:23:de:da:0d:88:c0:63:79:c5:
48:89:a5:b2:8f:2f:67:fd:a1:f8:ab:2d:42:f6:4c:
58:a2:c4:56:e6:9c:2f:28:50:e0:66:48:f0:38:65:
d9:1d:9d:03:42:17:5f:20:1e:00:1a:2d:9a:66:06:
74:28:2d:2c:a4:82:b7:56:07:9f:d6:13:91:3e:f0:
a7:7e:2d:6d:de:a6:53:59:a2:cd:df:d0:e3:61:37:
83:7a:7b:fb:f2:6b:30:39:aa:b3:2f:4f:b0:a6:ca:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5C:5E:EF:0D:18:17:78:37:D9:BB:A8:DC:02:09:89:C2:FB:6A:5C
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f9:5b:92:fa:77:16:16:c6:14:8d:00:9e:bb:fb:c4:f9:13:
18:01:5b:13:ed:68:f1:c0:12:61:a8:87:4b:3c:49:a5:b9:a4:
b0:18:c0:ab:e1:43:85:41:58:a5:81:bb:74:86:fd:1a:99:9f:
a1:8f:04:a5:58:54:87:9e:af:03:71:95:4e:1a:04:ec:82:b2:
e8:fb:61:bc:00:b9:1a:bc:f7:cc:e3:71:b6:28:b3:d2:de:9e:
16:9e:33:61:ca:4c:c8:99:18:34:08:99:93:17:5e:a4:49:ff:
57:f4:e2:c4:31:a9:aa:21:ed:25:dd:7c:90:f2:f1:67:1c:4c:
16:4d:5a:df:2b:3a:67:94:66:27:83:fe:ea:c0:9a:5b:f5:01:
15:d4:eb:87:a6:da:20:3e:47:bc:ba:3c:51:a8:32:41:05:c7:
f4:2b:45:98:49:f0:ea:0b:ce:69:12:71:36:ef:c2:0e:55:67:
96:d4:b5:f4:f6:56:8a:60:2d:78:71:c4:29:16:d0:be:90:9d:
bd:20:75:b1:70:b7:90:9a:84:2e:e1:e2:44:a5:3f:0b:38:a2:
4c:24:f8:f6:9c:07:89:b7:0e:ce:5b:09:e0:a0:63:03:33:02:
ed:7e:20:0e:37:cf:46:4d:30:5f:f8:bc:49:f4:e5:0a:70:e6:
3c:da:d6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92e0sx7k8Wy4eEHWmFifsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWNmZDE1NzQ0MWY2OTQyOGRkMWY2MzYxY2E0ZjRhZTQy
Y2IzOGEwHhcNMjUxMDE5MTkwMjIxWhcNMjUxMDIwMTkwMjIxWjAzMTEwLwYDVQQD
Eyg2MjVjNWVlZjBkMTgxNzc4MzdkOWJiYThkYzAyMDk4OWMyZmI2YTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeoe63uR9rJqvnzvjylTRZzeYnI2
2Dv20MODaRnw9i3HvrmtnF5dAEwriXYzT3Fzz0tMu/fzFCg7viiyhRWg1vMJJHLf
Ul+4XFjq0JmrYbscHtVvr/2Uu6CYQRtm9dAjl4P0zeInvvtAugrM0bX/O/MfT2jS
Cfz840m7p7RK0X6MNpENCd6t8Vj1poz2/0zhhV7CQLeCbUSExNgj3toNiMBjecVI
iaWyjy9n/aH4qy1C9kxYosRW5pwvKFDgZkjwOGXZHZ0DQhdfIB4AGi2aZgZ0KC0s
pIK3Vgef1hORPvCnfi1t3qZTWaLN39DjYTeDenv78mswOaqzL0+wpsqXPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJcXu8NGBd4N9m7qNwCCYnC+2pcMB8GA1UdIwQY
MBaAFKuc/RV0QfaUKN0fY2HKT0rkLLOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUt
OTU0ZjI2OTEzZjQzLzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83ZDMxNGUtNDJjZC00MmNlLTk4NWUtOTU0ZjI2OTEzZjQz
LzEvcTV6OUZYUkI5cFFvM1I5alljcFBTdVFzczRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPlbkvp3
FhbGFI0Anrv7xPkTGAFbE+1o8cASYaiHSzxJpbmksBjAq+FDhUFYpYG7dIb9Gpmf
oY8EpVhUh56vA3GVThoE7IKy6PthvAC5Grz3zONxtiiz0t6eFp4zYcpMyJkYNAiZ
kxdepEn/V/TixDGpqiHtJd18kPLxZxxMFk1a3ys6Z5RmJ4P+6sCaW/UBFdTrh6ba
ID5HvLo8UagyQQXH9CtFmEnw6gvOaRJxNu/CDlVnltS19PZWimAteHHEKRbQvpCd
vSB1sXC3kJqELuHiRKU/CziiTCT49pwHibcOzlsJ4KBjAzMC7X4gDjfPRk0wX/i8
SfTlCnDmPNrWrA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:56 2025 by rpki-client