Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
File: CqLxIFVT-llg8YBcbtk4np4NySw.mft (raw, json)
Hash identifier: TT6X8OB0G5hqVirKqBW2uc7GCJtm+ZqPEfNepGzL1Hw=
Subject key identifier: 64:E1:78:32:67:5E:9E:B4:02:EF:DB:F4:87:8D:B7:5D:0E:F2:C4:7F
Authority key identifier: 0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
Certificate issuer: /CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Certificate serial: 0199FB0F09DEF3DFA9DEE57D7169794B776D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
Manifest number: 0F01
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: CqLxIFVT-llg8YBcbtk4np4NySw.crl (hash: 9jANZ5xbs/nnU9xyAjyt98/cIQN3d4CGZG21rma9bUc=)
2: MAyKtR82lE73Rh03ItY-WJwlb0g.roa (hash: f22v5OwOnzL/KWHiBBd5+v5oBvo4HOCog7B7G8jEiaw=)
3: RmEKf5AMcv-GlXgJ8CZCaZ-S-bA.roa (hash: eaj18qKp8KNClDH+PpQWLvjTLItUDXXCJ/w32Wi8Qaw=)
4: Zf3An3BZ0tkzgzLF3YZuNzRqcaQ.roa (hash: g/EpgWzY2fh+5ethfX/aF6EmwHM9mLLUcuJd+6tww38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:09:de:f3:df:a9:de:e5:7d:71:69:79:4b:77:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa2f1205553fa5960f1805c6ed9389e9e0dc92c
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=64e17832675e9eb402efdbf4878db75d0ef2c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:00:39:69:1f:84:b8:a9:58:53:0b:98:2f:
b1:4a:78:05:f8:46:ab:d7:a5:1c:b3:03:0f:80:18:
79:5c:b2:79:02:39:cb:42:75:db:98:be:e3:82:6d:
77:e8:20:cb:09:d2:89:ff:47:b8:9f:b9:56:25:86:
17:21:1e:29:9c:ad:31:0d:08:82:54:53:99:9d:f2:
cc:05:ed:0d:04:d5:e3:9f:c0:9e:d9:07:91:06:17:
2d:bc:bd:db:ba:65:a5:c9:14:11:27:49:ac:7b:45:
01:e8:57:cf:d5:11:f5:b1:e6:97:31:5a:0a:b6:58:
3a:17:0c:0f:33:de:70:8b:2a:5c:94:55:2d:b3:34:
00:6e:eb:31:80:4b:d1:36:94:5f:32:b7:fe:9e:f1:
d5:5e:35:a5:c9:15:6d:aa:5e:47:0e:79:5b:0a:36:
95:0d:07:a4:af:bd:90:88:5b:b2:16:5b:48:f6:7d:
89:91:75:b2:f6:ad:50:54:63:cc:5a:e9:96:87:68:
0b:e5:6a:d7:c2:00:f0:28:8f:18:3a:e6:ef:53:5f:
10:0c:fc:76:27:ba:1b:6f:22:48:2b:ee:56:7e:37:
8c:c0:16:5f:33:d8:01:02:b2:8b:db:f2:19:3f:bb:
ec:10:bc:9e:a0:67:6f:93:c8:a0:9f:ed:50:b1:fd:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:78:32:67:5E:9E:B4:02:EF:DB:F4:87:8D:B7:5D:0E:F2:C4:7F
X509v3 Authority Key Identifier:
keyid:0A:A2:F1:20:55:53:FA:59:60:F1:80:5C:6E:D9:38:9E:9E:0D:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqLxIFVT-llg8YBcbtk4np4NySw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e442-137e-4101-bb6c-b06831596449/1/CqLxIFVT-llg8YBcbtk4np4NySw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b7:ab:f0:d1:68:91:b2:56:58:96:9d:a5:f2:86:f4:09:ae:
1b:ed:80:2a:3b:4c:f1:7c:99:1c:37:af:62:f4:cb:da:d3:d0:
61:61:13:f1:2c:05:89:25:ca:51:41:97:8d:25:3c:e3:47:04:
98:62:3c:a9:b3:4d:8d:0f:65:13:7d:12:f8:ad:22:9f:84:cb:
bf:0d:35:32:dd:5a:72:97:21:7e:b2:72:2f:b7:3d:62:4b:dc:
40:37:de:e0:d4:0c:49:ac:9b:88:00:20:21:8c:93:e1:8d:5b:
dc:ec:a3:b8:e1:c1:a5:0f:28:58:a5:f0:b0:23:ca:ee:94:d7:
ec:91:b3:24:34:8f:31:90:fa:7b:e7:19:65:2d:af:02:f2:7e:
fd:a6:1a:94:78:e2:9d:9e:a2:1b:12:ba:72:ad:aa:f1:e1:73:
7d:32:45:23:95:56:f8:aa:fb:d6:f6:25:bb:5d:2e:b0:b5:05:
ca:a6:f3:88:bb:aa:06:74:40:dd:ed:47:6c:ce:19:73:ce:f6:
3a:b2:22:8d:04:c0:e5:c4:cb:02:27:05:ba:05:34:ff:2d:fd:
35:d2:13:6f:38:7e:40:02:9d:60:5b:02:fd:32:fb:fc:40:e3:
49:1a:e1:ee:4d:fb:06:fa:36:68:74:28:24:c2:9c:04:ca:4a:
d1:3a:83:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dwne89+p3uV9cWl5S3dtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYTJmMTIwNTU1M2ZhNTk2MGYxODA1YzZlZDkzODllOWUw
ZGM5MmMwHhcNMjUxMDE5MDYwMTMwWhcNMjUxMDIwMDYwMTMwWjAzMTEwLwYDVQQD
Eyg2NGUxNzgzMjY3NWU5ZWI0MDJlZmRiZjQ4NzhkYjc1ZDBlZjJjNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTcAOWkfhLipWFMLmC+xSngF+Ear
16UcswMPgBh5XLJ5AjnLQnXbmL7jgm136CDLCdKJ/0e4n7lWJYYXIR4pnK0xDQiC
VFOZnfLMBe0NBNXjn8Ce2QeRBhctvL3bumWlyRQRJ0mse0UB6FfP1RH1seaXMVoK
tlg6FwwPM95wiypclFUtszQAbusxgEvRNpRfMrf+nvHVXjWlyRVtql5HDnlbCjaV
DQekr72QiFuyFltI9n2JkXWy9q1QVGPMWumWh2gL5WrXwgDwKI8YOubvU18QDPx2
J7obbyJIK+5WfjeMwBZfM9gBArKL2/IZP7vsELyeoGdvk8ign+1Qsf24jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTheDJnXp60Au/b9IeNt10O8sR/MB8GA1UdIwQY
MBaAFAqi8SBVU/pZYPGAXG7ZOJ6eDcksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMt
YjA2ODMxNTk2NDQ5LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82NGU0NDItMTM3ZS00MTAxLWJiNmMtYjA2ODMxNTk2NDQ5
LzEvQ3FMeElGVlQtbGxnOFlCY2J0azRucDROeVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgber8NFo
kbJWWJadpfKG9AmuG+2AKjtM8XyZHDevYvTL2tPQYWET8SwFiSXKUUGXjSU840cE
mGI8qbNNjQ9lE30S+K0in4TLvw01Mt1acpchfrJyL7c9YkvcQDfe4NQMSaybiAAg
IYyT4Y1b3OyjuOHBpQ8oWKXwsCPK7pTX7JGzJDSPMZD6e+cZZS2vAvJ+/aYalHji
nZ6iGxK6cq2q8eFzfTJFI5VW+Kr71vYlu10usLUFyqbziLuqBnRA3e1HbM4Zc872
OrIijQTA5cTLAicFugU0/y39NdITbzh+QAKdYFsC/TL7/EDjSRrh7k37Bvo2aHQo
JMKcBMpK0TqDuw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:54 2025 by rpki-client