Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: gYZKGgCXNOKr0WYz862FwIfCy2wy2UGUPF2wb+wUgZM=
Subject key identifier: EF:47:E3:1A:C8:B2:21:0D:31:81:A6:36:DA:FF:9C:AF:0F:60:58:3C
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0199FCFD26E36F19FD9C374569EBFD724947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 0239
Signing time: Sun 19 Oct 2025 15:01:12 +0000
Manifest this update: Sun 19 Oct 2025 15:01:12 +0000
Manifest next update: Mon 20 Oct 2025 15:01:12 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: R6pWjO6ZjPnFYakvTNTSkISbAZomUkXtCX4ly1HyhvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:26:e3:6f:19:fd:9c:37:45:69:eb:fd:72:49:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Oct 19 15:01:12 2025 GMT
Not After : Oct 20 15:01:12 2025 GMT
Subject: CN=ef47e31ac8b2210d3181a636daff9caf0f60583c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:d2:6f:e8:81:05:bc:d4:6b:7f:6b:e5:ff:
be:ac:c5:4c:70:7c:9d:a7:24:f9:f2:0f:8b:05:04:
73:a7:db:d8:46:cd:56:2f:c8:88:56:1c:8c:d5:b8:
73:42:ee:01:5c:3f:7c:ce:6f:51:50:c8:79:35:f8:
b2:ee:ee:e8:ff:78:78:6d:7f:64:00:99:27:f6:3a:
cf:2a:fc:b6:50:6c:c9:b5:9e:d6:23:09:d5:06:c1:
54:3a:1d:03:41:02:8d:89:32:71:21:89:8e:4b:c4:
2c:0d:57:b7:15:b0:a1:10:55:49:2b:39:f6:f6:72:
71:a9:38:44:17:24:33:51:79:6b:0b:9c:c7:f9:3e:
69:89:63:01:a4:eb:cc:ee:33:25:51:c7:8e:62:4b:
e5:25:88:e0:bd:00:57:36:07:dd:49:95:37:5a:02:
48:b6:e5:1e:18:2f:0a:2c:f8:92:b5:43:31:86:b5:
76:67:cc:6a:71:c4:7d:d6:fd:4b:0e:d3:e9:04:52:
9f:29:77:69:4f:6e:c0:86:a9:9a:02:48:43:4d:a5:
1f:98:e7:b2:47:ae:5e:da:f9:b7:a7:22:08:6b:fe:
54:5e:67:6b:23:46:14:bc:86:79:93:98:d2:70:33:
40:da:bc:b8:df:bd:72:cb:4c:3a:c4:05:f3:ae:0f:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:47:E3:1A:C8:B2:21:0D:31:81:A6:36:DA:FF:9C:AF:0F:60:58:3C
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1a:2f:5f:59:95:65:da:df:36:62:e2:88:81:a4:66:20:d3:
3c:2e:b3:7e:96:5c:cf:04:b5:40:7b:53:7e:09:10:1e:62:b6:
47:2b:7e:b4:d9:a4:24:9f:2a:82:90:8b:2b:88:ca:56:0d:5d:
a0:53:6e:93:a8:dc:94:f1:41:1f:7f:7c:26:37:31:88:a0:11:
28:f7:2b:ab:71:37:2b:6a:7c:f0:f5:de:a9:49:84:27:f0:72:
ea:b3:f6:76:54:85:9b:45:28:e0:fd:c9:e9:d9:91:6b:f7:3f:
06:25:6f:c0:7e:a7:ed:b2:bc:9a:f0:40:80:5a:05:e4:ca:87:
c8:f4:87:6d:a3:54:53:86:b4:04:1d:95:c8:9d:3b:01:59:c8:
44:83:33:37:10:6e:05:77:62:3f:f2:c5:5c:80:3c:5a:c7:56:
84:05:24:2e:1d:a9:92:46:96:17:19:e3:e8:1d:9e:29:57:9d:
81:f0:a3:7a:f8:23:48:c0:55:41:7c:42:84:96:7b:17:b2:c4:
af:a4:fd:b9:c5:28:eb:06:08:26:95:d5:ef:74:d2:8a:7f:28:
37:35:20:dc:e8:d9:b6:26:ab:67:da:a8:64:1d:6e:6f:43:d1:
9e:7d:57:a0:64:fd:a7:ee:fc:9f:be:46:23:65:5d:57:64:59:
b4:7e:02:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/Sbjbxn9nDdFaev9cklHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYTAzMjAxY2RhNmE4YWRiZGU0ZmU4MDQ2ZWM2NWY5NmFj
NmE5NmMwHhcNMjUxMDE5MTUwMTEyWhcNMjUxMDIwMTUwMTEyWjAzMTEwLwYDVQQD
EyhlZjQ3ZTMxYWM4YjIyMTBkMzE4MWE2MzZkYWZmOWNhZjBmNjA1ODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTjSb+iBBbzUa39r5f++rMVMcHyd
pyT58g+LBQRzp9vYRs1WL8iIVhyM1bhzQu4BXD98zm9RUMh5Nfiy7u7o/3h4bX9k
AJkn9jrPKvy2UGzJtZ7WIwnVBsFUOh0DQQKNiTJxIYmOS8QsDVe3FbChEFVJKzn2
9nJxqThEFyQzUXlrC5zH+T5piWMBpOvM7jMlUceOYkvlJYjgvQBXNgfdSZU3WgJI
tuUeGC8KLPiStUMxhrV2Z8xqccR91v1LDtPpBFKfKXdpT27AhqmaAkhDTaUfmOey
R65e2vm3pyIIa/5UXmdrI0YUvIZ5k5jScDNA2ry4371yy0w6xAXzrg84JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9H4xrIsiENMYGmNtr/nK8PYFg8MB8GA1UdIwQY
MBaAFK6gMgHNpqitveT+gEbsZflqxqlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQt
ZWE0MTJmMjFlMjMwLzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9kZDA5ZGMtMjQ3Mi00NTE3LTllMmQtZWE0MTJmMjFlMjMw
LzEvcnFBeUFjMm1xSzI5NVA2QVJ1eGwtV3JHcVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxovX1mV
ZdrfNmLiiIGkZiDTPC6zfpZczwS1QHtTfgkQHmK2Ryt+tNmkJJ8qgpCLK4jKVg1d
oFNuk6jclPFBH398JjcxiKARKPcrq3E3K2p88PXeqUmEJ/By6rP2dlSFm0Uo4P3J
6dmRa/c/BiVvwH6n7bK8mvBAgFoF5MqHyPSHbaNUU4a0BB2VyJ07AVnIRIMzNxBu
BXdiP/LFXIA8WsdWhAUkLh2pkkaWFxnj6B2eKVedgfCjevgjSMBVQXxChJZ7F7LE
r6T9ucUo6wYIJpXV73TSin8oNzUg3OjZtiarZ9qoZB1ub0PRnn1XoGT9p+78n75G
I2VdV2RZtH4CUA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:16:00 2025 by rpki-client