Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
File: mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json)
Hash identifier: et8HnXm1k6kwCz/dWzjmy5mPoyUQgS6P8kBNqS+Nrtc=
Subject key identifier: 98:64:AE:5E:FA:8B:A8:FE:A9:D4:D7:B3:BC:A5:AA:35:67:7B:BB:F7
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Certificate issuer: /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial: 019A03A3B050F96289D5A3A3E79593AD61B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
Manifest number: 0718
Signing time: Mon 20 Oct 2025 22:00:50 +0000
Manifest this update: Mon 20 Oct 2025 22:00:50 +0000
Manifest next update: Tue 21 Oct 2025 22:00:50 +0000
Files and hashes: 1: YE7z5Yo-VebSsmgIFpnY-X43QgA.roa (hash: lLUNSeL3GzkU1y5/O/u6QldsICYnJuoTtdixE8gdS+A=)
2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: jWGOr2mZeF3HOZVyOGHFdh4sIplfFXojutnuXQeIRDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:b0:50:f9:62:89:d5:a3:a3:e7:95:93:ad:61:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
Validity
Not Before: Oct 20 22:00:50 2025 GMT
Not After : Oct 21 22:00:50 2025 GMT
Subject: CN=9864ae5efa8ba8fea9d4d7b3bca5aa35677bbbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:8a:60:c3:25:c6:5b:5a:d4:f4:82:3e:85:
cf:0a:7c:f3:ae:a3:20:43:4d:85:5d:b5:19:e3:82:
91:5f:3c:16:5b:5e:cc:52:13:3c:70:5e:e2:4d:19:
73:c1:72:7d:a2:f1:52:c2:90:ec:61:9e:44:84:57:
48:72:7a:44:1b:05:2a:b8:b1:03:4f:b2:7e:cc:73:
ac:08:b0:ad:be:30:a6:51:4a:8a:30:bb:17:21:2d:
01:6f:8f:be:23:3e:8e:e9:85:7f:b7:33:e8:e6:7a:
53:7f:38:d0:72:23:10:b9:28:3a:4a:5b:be:b3:05:
06:77:91:9b:ba:5a:87:f4:3b:85:0a:91:be:c6:cf:
49:7e:ab:06:30:8a:94:11:a7:cd:c8:82:5a:04:d6:
88:a6:13:a9:fb:7d:0a:56:59:92:68:ed:16:7f:e4:
8a:d8:b8:1f:08:c7:3b:92:fb:3b:14:e0:62:4b:0e:
f1:f7:67:fb:73:d8:90:52:61:3d:3e:75:30:38:7b:
fe:5f:9e:d6:df:80:e9:69:8e:7b:f5:69:74:d1:07:
bc:06:a5:dc:43:8b:96:60:f3:64:b2:fb:ef:e4:cf:
7c:d9:25:3c:1b:c8:9f:b1:43:db:b4:4e:ac:45:0d:
0f:41:e3:63:0b:51:69:98:be:69:49:5f:8d:cd:a5:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:64:AE:5E:FA:8B:A8:FE:A9:D4:D7:B3:BC:A5:AA:35:67:7B:BB:F7
X509v3 Authority Key Identifier:
keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e9:7d:f2:78:48:bb:27:b8:a9:da:ce:d1:5c:4e:bb:d2:e2:
a9:40:68:af:20:d1:f5:af:86:11:30:25:c9:a4:23:71:d4:a2:
0f:60:ac:45:c8:6b:36:ef:0b:ac:74:cf:8e:00:40:46:a9:4d:
32:bd:1b:64:2c:a3:55:91:87:e1:ec:63:18:10:43:03:81:ea:
4e:28:46:ea:fd:9f:5d:3f:b8:d9:44:8b:83:27:3b:39:ab:9e:
54:39:90:cf:86:67:0a:62:43:7d:0c:57:d8:5b:b2:a9:a7:db:
f2:0d:7e:b7:53:13:54:aa:02:24:a9:fb:4d:42:59:ff:6c:89:
fe:05:91:b0:7a:ae:58:32:36:30:62:42:69:5b:a0:99:c6:6e:
71:8e:79:cf:e7:59:d3:5b:a4:d4:64:4a:00:52:69:29:72:63:
6a:e3:ed:89:9d:25:53:7c:d6:84:bb:d4:a5:05:2b:59:cf:2c:
66:3f:9e:f7:f4:1c:63:84:52:64:c9:a0:72:63:72:11:a5:58:
e0:04:af:89:94:7b:14:12:a8:02:65:f5:80:03:3a:50:a6:ed:
8c:bb:94:b7:00:6f:02:2a:ed:d1:c2:26:f1:77:10:9e:cb:29:
35:a7:7e:1e:ae:4e:0a:70:eb:0e:46:cb:54:64:e7:6a:0e:2b:
49:53:e4:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoDo7BQ+WKJ1aOj55WTrWGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDYwZTJkZWFmZmVhN2Q2MjJkZDkxNTgwZmY5MDE1ZjI1
NTc1OGIwHhcNMjUxMDIwMjIwMDUwWhcNMjUxMDIxMjIwMDUwWjAzMTEwLwYDVQQD
Eyg5ODY0YWU1ZWZhOGJhOGZlYTlkNGQ3YjNiY2E1YWEzNTY3N2JiYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4yKYMMlxlta1PSCPoXPCnzzrqMg
Q02FXbUZ44KRXzwWW17MUhM8cF7iTRlzwXJ9ovFSwpDsYZ5EhFdIcnpEGwUquLED
T7J+zHOsCLCtvjCmUUqKMLsXIS0Bb4++Iz6O6YV/tzPo5npTfzjQciMQuSg6Slu+
swUGd5GbulqH9DuFCpG+xs9JfqsGMIqUEafNyIJaBNaIphOp+30KVlmSaO0Wf+SK
2LgfCMc7kvs7FOBiSw7x92f7c9iQUmE9PnUwOHv+X57W34DpaY579Wl00Qe8BqXc
Q4uWYPNksvvv5M982SU8G8ifsUPbtE6sRQ0PQeNjC1FpmL5pSV+NzaXdlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhkrl76i6j+qdTXs7ylqjVne7v3MB8GA1UdIwQY
MBaAFJkGDi3q/+p9Yi3ZFYD/kBXyVXWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFZT0xlcl82bjFpTGRrVmdQLVFGZkpWZFlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OGU2NTAtMzM3Yi00ODNkLTlmNGMt
YTgzMzgzMDU5YzE4LzEvbVFZT0xlcl82bjFpTGRrVmdQLVFGZkpWZFlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85OGU2NTAtMzM3Yi00ODNkLTlmNGMtYTgzMzgzMDU5YzE4
LzEvbVFZT0xlcl82bjFpTGRrVmdQLVFGZkpWZFlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXel98nhI
uye4qdrO0VxOu9LiqUBoryDR9a+GETAlyaQjcdSiD2CsRchrNu8LrHTPjgBARqlN
Mr0bZCyjVZGH4exjGBBDA4HqTihG6v2fXT+42USLgyc7OaueVDmQz4ZnCmJDfQxX
2Fuyqafb8g1+t1MTVKoCJKn7TUJZ/2yJ/gWRsHquWDI2MGJCaVugmcZucY55z+dZ
01uk1GRKAFJpKXJjauPtiZ0lU3zWhLvUpQUrWc8sZj+e9/QcY4RSZMmgcmNyEaVY
4ASviZR7FBKoAmX1gAM6UKbtjLuUtwBvAirt0cIm8XcQnsspNad+Hq5OCnDrDkbL
VGTnag4rSVPkLw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:54:37 2025 by rpki-client