Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: A5puPzOxVdN+bd6ua2XmKudaUpbN8TheS4CDXKF7VdQ=
Subject key identifier: 25:B5:9A:80:A6:E2:13:11:C7:04:71:6A:11:DC:F1:95:29:43:29:EF
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 0199FDDA3E2F9F0008D3E5DD53AA2B8EA4AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:42 +0000
Manifest this update: Sun 19 Oct 2025 19:02:42 +0000
Manifest next update: Mon 20 Oct 2025 19:02:42 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: x0MLZI9kSy0J3d0gKGsK527g46qACWHBqihL/3t96P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:3e:2f:9f:00:08:d3:e5:dd:53:aa:2b:8e:a4:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Oct 19 19:02:42 2025 GMT
Not After : Oct 20 19:02:42 2025 GMT
Subject: CN=25b59a80a6e21311c704716a11dcf195294329ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:6a:e8:f0:a9:02:10:3d:aa:fa:de:7e:7e:
5e:d5:59:bb:0f:bd:ca:04:f5:24:77:b3:2d:07:f1:
1c:ca:17:8b:70:a2:78:64:3d:3d:3d:db:5b:46:73:
2f:0e:48:df:b3:a1:9d:e4:ec:90:23:1b:71:b9:b3:
ce:a5:72:7a:3c:3e:3d:c9:cb:14:76:a8:1f:1f:88:
cd:37:1d:0c:1f:d6:0d:a1:c6:8c:76:d5:03:23:70:
a7:c8:b2:6c:4e:e3:9b:87:1e:89:ca:40:c3:ce:19:
b1:2b:06:8a:3a:3f:e3:ac:59:9e:fd:fc:7f:f9:62:
08:75:64:41:d7:e7:83:89:dc:8e:87:1e:72:7c:c9:
bb:b7:4f:0b:80:8e:af:fa:28:00:b0:81:81:15:2b:
1b:24:a6:8d:b6:48:ee:a9:2e:77:ba:56:3b:a5:c2:
73:e4:47:28:0d:c0:21:64:7b:17:56:df:2c:f1:e9:
7d:87:1a:6c:ad:ac:60:7a:99:f4:6a:2b:f9:b2:fe:
8a:2c:01:97:b5:b4:f4:33:75:b0:8f:bb:be:f3:b4:
5d:74:46:d8:aa:47:dc:83:b3:61:8e:bf:84:b8:c7:
c9:e7:1a:88:12:f4:0e:ec:b8:53:1c:c3:81:70:43:
1d:27:ad:61:e0:fd:cd:9f:47:9a:3f:22:dc:5b:4e:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B5:9A:80:A6:E2:13:11:C7:04:71:6A:11:DC:F1:95:29:43:29:EF
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bc:e3:62:9a:04:d5:d2:51:be:6f:62:05:e6:08:17:c4:c8:
50:35:1c:9d:01:a8:7c:f0:ad:af:c9:2f:65:9c:bd:8e:2a:ea:
18:5b:ed:d9:83:06:0f:13:a3:ab:4c:2f:06:58:f3:33:90:ce:
e9:cc:57:70:f1:39:9d:6c:ed:78:19:2e:59:bd:d5:58:f4:5d:
f2:af:b9:72:85:72:d1:ac:21:f3:02:cc:7d:1b:1e:b4:1a:3a:
8a:57:e2:d7:d0:3e:fb:f8:44:4c:71:a4:75:75:36:84:76:58:
cd:2e:27:94:a5:33:f5:a8:99:81:8c:cb:4f:45:3e:44:95:5f:
09:0f:35:a7:cc:b3:d7:3a:75:c8:e0:0c:28:3f:97:cd:bd:9f:
56:c2:1d:ce:10:12:6e:6e:f5:d3:c2:75:92:0b:3f:a8:bd:4d:
d9:d1:5f:db:07:7b:9f:a2:9a:65:cb:c3:e7:4e:88:31:50:4e:
03:23:cb:3e:5f:e4:81:68:21:57:27:64:fe:82:ff:dc:c2:c9:
8b:dd:1e:9b:14:d1:11:0e:04:79:6a:80:3f:8f:70:e5:b8:56:
3f:17:e0:7a:68:52:aa:a7:ff:fb:a9:ba:4c:27:a7:3a:82:88:
8f:12:43:0b:ae:2a:ba:92:dc:c2:4f:03:28:08:0b:b6:6d:62:
85:a8:b4:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92j4vnwAI0+XdU6orjqSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjZhYzRhZmFmZDI2OTg4MWMxMGFkMmVjYTJmNGRlZjhl
ZGJkMjEwHhcNMjUxMDE5MTkwMjQyWhcNMjUxMDIwMTkwMjQyWjAzMTEwLwYDVQQD
EygyNWI1OWE4MGE2ZTIxMzExYzcwNDcxNmExMWRjZjE5NTI5NDMyOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bxq6PCpAhA9qvrefn5e1Vm7D73K
BPUkd7MtB/EcyheLcKJ4ZD09PdtbRnMvDkjfs6Gd5OyQIxtxubPOpXJ6PD49ycsU
dqgfH4jNNx0MH9YNocaMdtUDI3CnyLJsTuObhx6JykDDzhmxKwaKOj/jrFme/fx/
+WIIdWRB1+eDidyOhx5yfMm7t08LgI6v+igAsIGBFSsbJKaNtkjuqS53ulY7pcJz
5EcoDcAhZHsXVt8s8el9hxpsraxgepn0aiv5sv6KLAGXtbT0M3Wwj7u+87RddEbY
qkfcg7Nhjr+EuMfJ5xqIEvQO7LhTHMOBcEMdJ61h4P3Nn0eaPyLcW07I6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW1moCm4hMRxwRxahHc8ZUpQynvMB8GA1UdIwQY
MBaAFEEmrEr6/SaYgcEK0uyi9N747b0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEt
YzM5OWJlMDMxYjRhLzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi85NGRkMmEtNTA0Ni00ODgzLTkxZGEtYzM5OWJlMDMxYjRh
LzEvUVNhc1N2cjlKcGlCd1FyUzdLTDAzdmp0dlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbzjYpoE
1dJRvm9iBeYIF8TIUDUcnQGofPCtr8kvZZy9jirqGFvt2YMGDxOjq0wvBljzM5DO
6cxXcPE5nWzteBkuWb3VWPRd8q+5coVy0awh8wLMfRsetBo6ilfi19A++/hETHGk
dXU2hHZYzS4nlKUz9aiZgYzLT0U+RJVfCQ81p8yz1zp1yOAMKD+Xzb2fVsIdzhAS
bm7108J1kgs/qL1N2dFf2wd7n6KaZcvD506IMVBOAyPLPl/kgWghVydk/oL/3MLJ
i90emxTREQ4EeWqAP49w5bhWPxfgemhSqqf/+6m6TCenOoKIjxJDC64qupLcwk8D
KAgLtm1ihai0qw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:14 2025 by rpki-client