Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: SOT4VqoHPmZ94vat8WccsznhyDJuj2lH2rpW5RcLwDY=
Subject key identifier: FB:9F:A8:88:F4:AC:24:91:49:11:8B:78:90:BA:8D:EA:EE:6D:AD:27
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 0199FCC64F9979A05D2663042300311C3BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 05C3
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: jphuiQZ+znD97TMaxqocdRdFbtnUhNGWZiaLRvaUI/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4f:99:79:a0:5d:26:63:04:23:00:31:1c:3b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=fb9fa888f4ac249149118b7890ba8deaee6dad27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:22:d0:4a:ac:dd:97:e4:f5:db:7b:29:b0:40:
00:2e:22:84:01:09:fb:cd:ce:28:b6:66:b6:86:94:
50:3e:cf:aa:ef:52:14:fd:b2:1a:ff:e4:3f:6f:26:
79:41:e2:91:23:91:c9:31:c4:d4:3e:89:ad:bf:fa:
07:3f:40:ec:cb:5d:49:de:0c:4d:00:ee:07:4f:6d:
ce:6b:30:22:1d:5e:46:92:53:ac:b5:2f:40:66:1c:
18:07:23:0e:ee:5d:22:e9:93:00:0e:46:af:05:1c:
88:7a:12:84:e5:5c:2a:06:b5:99:55:d6:8c:03:24:
bb:92:52:ed:e2:2d:73:e6:a2:61:4f:69:69:85:e6:
15:7f:e2:4a:72:7b:e0:30:79:61:a2:a9:27:3e:2e:
c2:31:64:86:78:80:68:9e:b4:b3:ea:1a:f3:9c:30:
ad:46:ce:4d:e6:29:79:2b:ca:ea:ac:8a:28:f7:72:
46:60:03:aa:14:73:e6:b0:99:9d:8a:ee:9c:1a:27:
e5:9c:70:cf:49:51:87:42:14:80:60:d7:b9:94:90:
53:1b:42:6d:84:0f:da:ae:e1:dd:6b:3a:4a:f6:b1:
c2:ee:87:45:e4:ed:9f:f7:a8:d9:38:e4:91:7a:46:
b0:20:ef:21:8b:73:b8:18:a0:f0:44:02:1a:2e:70:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9F:A8:88:F4:AC:24:91:49:11:8B:78:90:BA:8D:EA:EE:6D:AD:27
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8b:74:de:5c:38:cb:7a:c2:01:d0:e1:8f:c1:da:d7:fc:a8:
f7:0f:bf:87:98:86:1d:b2:9c:c9:ca:ca:4a:5a:22:88:97:13:
9b:ae:b8:79:cf:25:8c:66:4a:f7:38:f8:ac:c6:72:f0:48:08:
f5:a7:2c:a9:b1:50:a9:60:d6:90:2f:a3:1a:e9:22:21:81:bd:
11:6f:91:fc:6e:d1:12:09:99:e3:f5:d0:40:e6:c2:78:e4:11:
48:82:b3:1d:6b:34:80:a5:91:c1:9d:bc:c8:38:94:3e:c9:e0:
45:01:ff:1c:2e:dc:88:b9:a5:bc:91:e3:8e:e8:d2:01:bd:29:
60:34:b5:5b:81:e2:0c:c3:8f:53:bc:70:1b:59:21:d8:85:90:
a6:73:be:73:17:d8:4a:e8:ca:e8:6b:00:96:02:4f:aa:d9:e6:
ec:18:2c:e5:04:f0:d9:de:14:ee:d5:0b:96:82:5f:2c:13:57:
90:26:95:73:ef:fc:5e:d1:d0:9a:18:0d:1f:ef:21:cd:bd:7d:
10:55:fb:ff:b1:56:1f:78:1d:9c:92:35:25:bd:5b:ce:44:a7:
57:7e:ef:a4:7d:43:14:7f:fa:e4:85:a3:55:be:ae:34:63:ba:
78:ed:e0:06:d4:35:96:97:47:34:31:11:39:22:8d:e7:9a:b4:
97:33:8c:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xk+ZeaBdJmMEIwAxHDuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMWYxNDgwNjUxZjFiMzM4YmUyNjM0MWUyZGIzYTBhYTNi
MzQ0ZWIwHhcNMjUxMDE5MTQwMTE4WhcNMjUxMDIwMTQwMTE4WjAzMTEwLwYDVQQD
EyhmYjlmYTg4OGY0YWMyNDkxNDkxMThiNzg5MGJhOGRlYWVlNmRhZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CLQSqzdl+T123spsEAALiKEAQn7
zc4otma2hpRQPs+q71IU/bIa/+Q/byZ5QeKRI5HJMcTUPomtv/oHP0Dsy11J3gxN
AO4HT23OazAiHV5GklOstS9AZhwYByMO7l0i6ZMADkavBRyIehKE5VwqBrWZVdaM
AyS7klLt4i1z5qJhT2lpheYVf+JKcnvgMHlhoqknPi7CMWSGeIBonrSz6hrznDCt
Rs5N5il5K8rqrIoo93JGYAOqFHPmsJmdiu6cGiflnHDPSVGHQhSAYNe5lJBTG0Jt
hA/aruHdazpK9rHC7odF5O2f96jZOOSRekawIO8hi3O4GKDwRAIaLnCp+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPufqIj0rCSRSRGLeJC6jeruba0nMB8GA1UdIwQY
MBaAFEMfFIBlHxszi+JjQeLbOgqjs0TrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYt
NGUwMDA5NDMxNDlmLzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wODUzN2MtMDI2Yy00NzZiLTgwNTYtNGUwMDA5NDMxNDlm
LzEvUXg4VWdHVWZHek9MNG1OQjR0czZDcU96Uk9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4t03lw4
y3rCAdDhj8Ha1/yo9w+/h5iGHbKcycrKSloiiJcTm664ec8ljGZK9zj4rMZy8EgI
9acsqbFQqWDWkC+jGukiIYG9EW+R/G7REgmZ4/XQQObCeOQRSIKzHWs0gKWRwZ28
yDiUPsngRQH/HC7ciLmlvJHjjujSAb0pYDS1W4HiDMOPU7xwG1kh2IWQpnO+cxfY
SujK6GsAlgJPqtnm7Bgs5QTw2d4U7tULloJfLBNXkCaVc+/8XtHQmhgNH+8hzb19
EFX7/7FWH3gdnJI1Jb1bzkSnV37vpH1DFH/65IWjVb6uNGO6eO3gBtQ1lpdHNDER
OSKN55q0lzOMyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:54 2025 by rpki-client