Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: /di6TwaNy1nOCUmdm/5qMSjUVOWhnZtlJ4qEBJdG0Lc=
Subject key identifier: 96:FB:52:36:9D:98:35:DD:97:12:1D:AC:0E:BE:C6:C6:40:C9:DF:8E
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 0199FBEB49A2A83EC4AFD8BD7A291D8B72EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: zWxZsFOk1K51jBSynz2vDb3vq+YrXiDtBsqW7AQF79s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:49:a2:a8:3e:c4:af:d8:bd:7a:29:1d:8b:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=96fb52369d9835dd97121dac0ebec6c640c9df8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:02:e4:fe:eb:14:0e:9d:07:49:a7:0e:f8:
20:6f:31:75:a0:ca:74:7a:b2:3c:e5:30:5f:47:e5:
0f:1a:a0:06:19:0c:63:1c:df:a0:84:e3:20:4b:2a:
bd:79:ff:c0:3e:17:8c:c3:55:ed:ec:fe:08:64:41:
1f:16:81:cd:5d:85:1c:33:0b:aa:51:0d:23:0b:2f:
0d:36:75:9a:f3:23:77:39:d3:ba:26:b4:7f:f0:0b:
e4:bf:64:52:36:da:4f:2c:0b:17:9c:5c:8c:a7:8f:
ba:c4:ae:7b:de:8d:07:f1:94:5a:d0:fc:d8:cc:f4:
21:1f:53:84:41:62:60:bd:53:97:b3:9c:b1:ec:86:
be:63:3f:9a:be:6e:1c:15:ae:fd:66:7e:02:ee:d6:
99:e3:e1:8c:cb:18:61:c2:e3:f4:55:d9:9a:4d:02:
de:b4:f8:1a:f9:65:5e:41:96:7f:95:d6:f7:3b:5c:
48:e0:74:b0:3c:2c:54:7c:a6:4d:87:6b:4b:5c:d3:
79:f0:f9:ee:c4:db:70:d3:d1:10:be:58:b4:ed:2e:
3d:23:e8:08:21:c3:3a:74:b3:09:5c:de:4c:a1:0a:
ed:f8:57:7a:fc:84:c6:fd:8a:22:77:45:8e:47:bc:
19:d0:3f:19:73:3a:63:91:22:f4:60:17:c1:6a:95:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:52:36:9D:98:35:DD:97:12:1D:AC:0E:BE:C6:C6:40:C9:DF:8E
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:f7:77:77:63:33:77:fe:89:b2:b2:11:d5:2a:32:f1:b8:
60:ba:86:28:e5:d1:66:79:a2:5c:a5:57:72:2e:35:2c:d7:a7:
55:35:1f:18:88:de:83:5c:19:21:a7:a5:bd:a3:a6:0a:3f:52:
5a:0f:c3:a4:30:f1:f5:42:4b:80:f9:2e:62:24:e5:60:fa:a3:
a6:9e:f1:de:72:08:78:90:89:cd:b5:43:de:72:b9:0b:d5:96:
63:44:c1:1e:27:ee:e5:fc:57:d0:52:3d:e0:b6:50:e8:94:0a:
95:5f:d7:2a:ae:7e:01:3a:d4:f1:5f:73:b0:40:da:19:d7:6f:
73:cf:47:99:08:f0:a3:68:86:c9:09:a7:dd:88:b6:f1:06:a3:
ea:68:e3:92:84:41:29:94:d2:fe:2c:02:9d:56:78:26:ed:a5:
fe:c5:18:34:b5:01:fa:3e:a8:64:96:ad:c2:c6:be:22:7b:76:
55:19:55:37:44:6c:aa:6f:e3:3e:6f:75:28:fd:fd:03:42:6d:
c5:73:7f:d6:7d:b2:df:23:27:cc:94:da:45:fc:48:5d:c2:3a:
31:03:83:7a:a8:d0:be:30:f7:54:c7:37:4a:1c:74:56:ef:62:
4e:d9:d9:2a:53:d2:c1:d2:fb:2b:34:b4:d1:c6:0c:38:d8:5c:
de:ae:23:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760miqD7Er9i9eikdi3LuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTM1MTc2MDY5ODllYjM1MmY2OTk5NzZmMjE5ZmFlYzhl
MzUwZTcwHhcNMjUxMDE5MTAwMjA0WhcNMjUxMDIwMTAwMjA0WjAzMTEwLwYDVQQD
Eyg5NmZiNTIzNjlkOTgzNWRkOTcxMjFkYWMwZWJlYzZjNjQwYzlkZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPcC5P7rFA6dB0mnDvggbzF1oMp0
erI85TBfR+UPGqAGGQxjHN+ghOMgSyq9ef/APheMw1Xt7P4IZEEfFoHNXYUcMwuq
UQ0jCy8NNnWa8yN3OdO6JrR/8Avkv2RSNtpPLAsXnFyMp4+6xK573o0H8ZRa0PzY
zPQhH1OEQWJgvVOXs5yx7Ia+Yz+avm4cFa79Zn4C7taZ4+GMyxhhwuP0VdmaTQLe
tPga+WVeQZZ/ldb3O1xI4HSwPCxUfKZNh2tLXNN58PnuxNtw09EQvli07S49I+gI
IcM6dLMJXN5MoQrt+Fd6/ITG/Yoid0WOR7wZ0D8ZczpjkSL0YBfBapVyzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb7UjadmDXdlxIdrA6+xsZAyd+OMB8GA1UdIwQY
MBaAFEOjUXYGmJ6zUvaZl28hn67I41DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjIt
YjBhMmRlZGM2NWE2LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xZjZmOTUtMzI5YS00NjUyLWJlMjItYjBhMmRlZGM2NWE2
LzEvUTZOUmRnYVluck5TOXBtWGJ5R2Zyc2pqVU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAn3d3dj
M3f+ibKyEdUqMvG4YLqGKOXRZnmiXKVXci41LNenVTUfGIjeg1wZIaelvaOmCj9S
Wg/DpDDx9UJLgPkuYiTlYPqjpp7x3nIIeJCJzbVD3nK5C9WWY0TBHifu5fxX0FI9
4LZQ6JQKlV/XKq5+ATrU8V9zsEDaGddvc89HmQjwo2iGyQmn3Yi28Qaj6mjjkoRB
KZTS/iwCnVZ4Ju2l/sUYNLUB+j6oZJatwsa+Int2VRlVN0Rsqm/jPm91KP39A0Jt
xXN/1n2y3yMnzJTaRfxIXcI6MQODeqjQvjD3VMc3Shx0Vu9iTtnZKlPSwdL7KzS0
0cYMONhc3q4joQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:31 2025 by rpki-client