Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
File: tqFlTa6WxTJXjOHfHruCIdu2gUU.mft (raw, json)
Hash identifier: 58hkhx4pYqpNSc4v1+rB1NRrCZAJ6PhmXVf36XFSk5M=
Subject key identifier: B4:F7:88:EC:6C:58:34:A7:7B:BD:B5:B8:3F:34:A2:0E:99:40:10:EE
Authority key identifier: B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
Certificate issuer: /CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Certificate serial: 0199FB461D72D3B8FB1FF7662C17CD2D5538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: BDcEAKntpIejrVcoW-jQtFYDt4A.roa (hash: 9rJ6V8MVwpwUlBMeKLrrT4d005j4mZf3dlxw+gQ0CuE=)
2: n9wbgcYA2gFozQl-awLgvubO0Jw.roa (hash: I7/eXt/2fdY6ma/4TQO3Dibom5bD15oMz/+pqihDXpI=)
3: tqFlTa6WxTJXjOHfHruCIdu2gUU.crl (hash: Q4ftn/YbwMXpqsZF+cV8w77rr2yFwT9PqnIAoGDjaWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1d:72:d3:b8:fb:1f:f7:66:2c:17:cd:2d:55:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a1654dae96c532578ce1df1ebb8221dbb68145
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=b4f788ec6c5834a77bbdb5b83f34a20e994010ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:b4:1b:29:2c:c1:d4:17:7b:e4:62:53:22:
19:6c:ad:d8:a5:36:81:c4:a9:43:86:d0:b2:6c:07:
fb:a8:be:31:df:4e:f6:ef:03:b4:30:20:b7:42:5c:
d0:af:34:76:21:71:af:ef:7b:e0:94:fb:1c:ad:ff:
11:69:0b:07:84:4a:2e:43:0a:ad:09:45:27:97:47:
6f:0c:18:21:b7:1c:b9:be:86:dc:24:fd:b5:31:c2:
57:2c:30:6f:e1:c5:c9:b3:aa:e3:40:77:b3:3d:4c:
c0:24:87:e8:0c:c6:33:38:ee:f5:9f:fd:40:56:a6:
b1:a5:62:5b:94:81:97:19:7f:16:78:0c:13:1a:3b:
0a:3a:4b:7d:09:8c:3b:9e:43:c1:6e:a6:13:5c:05:
85:25:20:39:21:ec:06:5f:3c:4f:bb:40:ae:54:85:
f0:fe:81:67:3a:1d:ee:0b:8a:4a:d9:fa:04:d9:a8:
b5:8b:9a:a1:52:3c:77:f2:36:9c:ce:75:ca:30:36:
46:be:f3:f0:e1:ac:79:01:99:a3:17:47:ca:91:c9:
54:d3:42:92:50:74:6d:d6:41:2a:88:a1:65:c3:de:
69:aa:d1:e7:f2:01:36:7a:37:22:30:f7:55:26:03:
55:c7:8c:6a:53:54:d4:5d:c2:c3:55:36:bd:8b:a9:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F7:88:EC:6C:58:34:A7:7B:BD:B5:B8:3F:34:A2:0E:99:40:10:EE
X509v3 Authority Key Identifier:
keyid:B6:A1:65:4D:AE:96:C5:32:57:8C:E1:DF:1E:BB:82:21:DB:B6:81:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqFlTa6WxTJXjOHfHruCIdu2gUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b011d3-bdba-45cd-a8ac-e0be89c4f169/1/tqFlTa6WxTJXjOHfHruCIdu2gUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0c:81:a7:52:89:f5:12:8e:c1:d6:ec:84:a6:b5:0a:db:3e:
51:a5:5a:ba:17:ee:c3:36:b9:b7:9f:6c:80:42:9f:31:41:6b:
44:35:9d:87:81:bf:db:df:27:b8:da:76:13:a9:fa:cd:74:84:
df:df:8b:8a:f0:d4:9e:7c:44:a2:ad:6d:c9:b2:23:ec:25:58:
2d:9d:aa:60:e9:cf:2f:16:f6:db:1c:40:e8:a2:82:d3:95:aa:
0b:08:a5:44:4c:60:14:2f:4f:e3:4f:02:3d:8c:06:6a:9a:3a:
b8:f1:a0:3f:bd:3b:ad:bc:0a:a5:2d:8d:ef:07:f2:5b:b9:07:
d4:d6:8b:3f:bf:84:37:84:72:6e:05:29:e2:1e:a7:4a:e2:9b:
02:1d:83:cf:62:06:89:61:ab:4a:f2:47:ca:1d:a7:6a:7c:d8:
57:d5:83:5f:ee:dc:7f:e3:82:e0:41:46:0a:42:19:8b:df:c1:
fb:78:04:31:30:cf:f0:aa:fe:57:f3:05:77:8c:6c:b4:ad:63:
54:af:b0:a4:40:c8:f7:bc:06:ee:c9:ee:dc:b0:19:dd:15:30:
b5:bd:4f:c2:97:b7:01:9b:f1:3d:90:96:ee:c5:8f:a7:3a:97:
48:23:0a:59:04:9e:8c:08:8d:fe:1e:40:2d:8e:99:85:92:2e:
22:d3:1a:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rh1y07j7H/dmLBfNLVU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YTE2NTRkYWU5NmM1MzI1NzhjZTFkZjFlYmI4MjIxZGJi
NjgxNDUwHhcNMjUxMDE5MDcwMTQwWhcNMjUxMDIwMDcwMTQwWjAzMTEwLwYDVQQD
EyhiNGY3ODhlYzZjNTgzNGE3N2JiZGI1YjgzZjM0YTIwZTk5NDAxMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwC0GykswdQXe+RiUyIZbK3YpTaB
xKlDhtCybAf7qL4x30727wO0MCC3QlzQrzR2IXGv73vglPscrf8RaQsHhEouQwqt
CUUnl0dvDBghtxy5vobcJP21McJXLDBv4cXJs6rjQHezPUzAJIfoDMYzOO71n/1A
VqaxpWJblIGXGX8WeAwTGjsKOkt9CYw7nkPBbqYTXAWFJSA5IewGXzxPu0CuVIXw
/oFnOh3uC4pK2foE2ai1i5qhUjx38jacznXKMDZGvvPw4ax5AZmjF0fKkclU00KS
UHRt1kEqiKFlw95pqtHn8gE2ejciMPdVJgNVx4xqU1TUXcLDVTa9i6lPjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLT3iOxsWDSne721uD80og6ZQBDuMB8GA1UdIwQY
MBaAFLahZU2ulsUyV4zh3x67giHbtoFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMt
ZTBiZTg5YzRmMTY5LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9iMDExZDMtYmRiYS00NWNkLWE4YWMtZTBiZTg5YzRmMTY5
LzEvdHFGbFRhNld4VEpYak9IZkhydUNJZHUyZ1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQyBp1KJ
9RKOwdbshKa1Cts+UaVauhfuwza5t59sgEKfMUFrRDWdh4G/298nuNp2E6n6zXSE
39+LivDUnnxEoq1tybIj7CVYLZ2qYOnPLxb22xxA6KKC05WqCwilRExgFC9P408C
PYwGapo6uPGgP707rbwKpS2N7wfyW7kH1NaLP7+EN4RybgUp4h6nSuKbAh2Dz2IG
iWGrSvJHyh2nanzYV9WDX+7cf+OC4EFGCkIZi9/B+3gEMTDP8Kr+V/MFd4xstK1j
VK+wpEDI97wG7snu3LAZ3RUwtb1Pwpe3AZvxPZCW7sWPpzqXSCMKWQSejAiN/h5A
LY6ZhZIuItMaQw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:44 2025 by rpki-client