Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: Ch6XFRCzX4l78rIYx+aZTTW01JFTb5taV/qhx4um7AE=
Subject key identifier: B5:EC:7A:F3:24:62:15:81:82:A1:B4:59:D0:B0:10:FB:9D:6B:0A:83
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 0199FE469271199CBB7F9C7E61AD83BE1A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 11D7
Signing time: Sun 19 Oct 2025 21:01:01 +0000
Manifest this update: Sun 19 Oct 2025 21:01:01 +0000
Manifest next update: Mon 20 Oct 2025 21:01:01 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: pTJbVrgT4RmDtSqurpbF2ZmRsW/t0ssHjzwAipA5NYs=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:92:71:19:9c:bb:7f:9c:7e:61:ad:83:be:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Oct 19 21:01:01 2025 GMT
Not After : Oct 20 21:01:01 2025 GMT
Subject: CN=b5ec7af32462158182a1b459d0b010fb9d6b0a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:15:51:25:7d:a3:6f:f4:ad:37:64:6e:ff:
41:03:d5:93:49:8e:95:1f:4f:e5:3f:9b:2d:cf:02:
35:aa:a1:2f:dc:17:4b:ce:fa:99:6c:00:62:0d:fd:
98:63:61:48:e0:18:42:ca:5c:bb:44:fa:18:9a:fd:
f6:ee:a9:ec:cb:fb:15:9f:be:67:6e:99:6e:8d:8f:
41:30:31:b3:36:cc:1a:5e:26:8d:d0:8b:4f:24:7f:
64:fe:6b:4b:9f:b7:c7:13:a9:14:91:56:fe:cb:0f:
8f:39:dd:7a:54:71:57:88:dd:51:b4:a8:b2:67:38:
12:7e:c1:d7:14:5d:0a:b6:b5:36:2f:11:a6:ba:6e:
9f:64:01:a3:5f:de:0d:36:20:67:09:d9:46:4c:56:
8d:ec:15:4b:78:95:d4:2d:7e:45:44:92:67:eb:74:
5d:1f:ec:4e:91:03:35:8c:00:6e:41:e0:1b:f9:65:
75:18:17:e8:10:68:a6:c9:a2:94:cb:fd:d7:50:0d:
bf:f2:99:73:66:93:19:26:de:80:41:f0:44:6d:71:
bc:d7:b3:66:9b:4a:3e:96:60:d4:42:46:24:4b:1e:
58:9c:82:ea:33:cb:5c:bb:c3:97:6f:32:42:26:bb:
f4:8e:b4:0e:4a:6c:78:0f:f0:2d:79:cd:05:80:97:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EC:7A:F3:24:62:15:81:82:A1:B4:59:D0:B0:10:FB:9D:6B:0A:83
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8f:49:1e:44:6b:84:e0:5a:5e:df:40:4d:87:b4:60:86:8d:
71:fc:6c:8c:77:54:dc:d3:92:49:a0:9f:30:19:f5:d5:00:2d:
51:0a:8f:8e:43:0c:e3:6f:10:15:bc:51:8f:64:93:fc:23:14:
51:8b:9b:d0:6b:a7:b6:96:3b:8a:cd:8d:6f:36:b0:71:7b:93:
79:1a:52:94:f2:1d:35:31:d7:7b:ec:b5:90:13:d6:89:5b:ca:
f0:bf:c2:9a:27:91:5b:17:d8:d9:0e:b1:56:c3:d8:bc:6a:ff:
32:97:b8:55:c6:65:64:26:3d:a0:d0:e3:5e:c2:4a:79:57:ee:
61:6f:6f:6c:36:da:a5:91:12:f9:14:0e:05:f2:a8:99:dd:55:
bc:71:73:79:32:96:c6:5c:d9:7f:2c:03:dd:6f:21:1e:50:1e:
63:d1:2b:29:76:d6:7b:b5:66:11:83:2f:f3:42:b9:6b:a4:1f:
d9:13:fe:ad:ed:3d:e2:32:04:4e:b2:15:08:91:e5:e3:66:e1:
8f:db:5c:2e:59:96:63:e3:4c:29:94:98:8f:c6:1b:63:3a:1f:
65:ce:df:8b:fd:a9:23:33:f4:7b:de:5f:c3:c3:2a:23:c6:54:
ca:d3:ae:c1:1a:23:e0:41:50:1f:ec:c6:4a:61:42:5b:3c:93:
3b:95:60:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RpJxGZy7f5x+Ya2DvhoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YWE4OWY3YjcyMjI3OWMwMzI5NDJkY2YyNDg2NWY2ZDcy
ZDY1MDEwHhcNMjUxMDE5MjEwMTAxWhcNMjUxMDIwMjEwMTAxWjAzMTEwLwYDVQQD
EyhiNWVjN2FmMzI0NjIxNTgxODJhMWI0NTlkMGIwMTBmYjlkNmIwYTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oUVUSV9o2/0rTdkbv9BA9WTSY6V
H0/lP5stzwI1qqEv3BdLzvqZbABiDf2YY2FI4BhCyly7RPoYmv327qnsy/sVn75n
bplujY9BMDGzNswaXiaN0ItPJH9k/mtLn7fHE6kUkVb+yw+POd16VHFXiN1RtKiy
ZzgSfsHXFF0KtrU2LxGmum6fZAGjX94NNiBnCdlGTFaN7BVLeJXULX5FRJJn63Rd
H+xOkQM1jABuQeAb+WV1GBfoEGimyaKUy/3XUA2/8plzZpMZJt6AQfBEbXG817Nm
m0o+lmDUQkYkSx5YnILqM8tcu8OXbzJCJrv0jrQOSmx4D/Atec0FgJf/5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXsevMkYhWBgqG0WdCwEPudawqDMB8GA1UdIwQY
MBaAFNaqife3IiecAylC3PJIZfbXLWUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYt
OGJhNjg4ODY2OWNmLzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTdlMjgtYTgyOS00N2QyLTgwZTYtOGJhNjg4ODY2OWNm
LzEvMXFxSjk3Y2lKNXdES1VMYzhraGw5dGN0WlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo9JHkRr
hOBaXt9ATYe0YIaNcfxsjHdU3NOSSaCfMBn11QAtUQqPjkMM428QFbxRj2ST/CMU
UYub0GuntpY7is2NbzawcXuTeRpSlPIdNTHXe+y1kBPWiVvK8L/CmieRWxfY2Q6x
VsPYvGr/Mpe4VcZlZCY9oNDjXsJKeVfuYW9vbDbapZES+RQOBfKomd1VvHFzeTKW
xlzZfywD3W8hHlAeY9ErKXbWe7VmEYMv80K5a6Qf2RP+re094jIETrIVCJHl42bh
j9tcLlmWY+NMKZSYj8YbYzofZc7fi/2pIzP0e95fw8MqI8ZUytOuwRoj4EFQH+zG
SmFCWzyTO5VgcA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:54 2025 by rpki-client