Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: VLVIAjwMxB4ZiolsQLEkVf64BYtO/7sDMz0SNz583Mk=
Subject key identifier: 99:85:7D:AC:F8:B5:9D:9D:06:F9:95:D9:96:C3:E9:26:4E:F6:0B:EF
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 0199FCFD5FB79C128FDF7BBE7873BB0A075E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:27 +0000
Manifest this update: Sun 19 Oct 2025 15:01:27 +0000
Manifest next update: Mon 20 Oct 2025 15:01:27 +0000
Files and hashes: 1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: sSzAZuMOM9fXhF7U7cB/WlFFZuqzob/TVVsHK/VebrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5f:b7:9c:12:8f:df:7b:be:78:73:bb:0a:07:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Oct 19 15:01:27 2025 GMT
Not After : Oct 20 15:01:27 2025 GMT
Subject: CN=99857dacf8b59d9d06f995d996c3e9264ef60bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:db:8b:1b:f1:0a:2b:52:6a:89:c1:00:62:
eb:64:36:cd:b2:98:de:9e:95:9f:db:7c:c6:3d:b8:
c0:1b:8d:45:4a:8d:7d:db:4e:a2:b4:81:a7:81:8b:
c0:b6:6b:ec:1d:56:f4:af:83:8f:5c:99:5d:71:90:
73:e6:bb:6e:12:e1:60:93:dd:26:24:d3:91:42:cf:
88:c5:14:ae:bd:5f:25:db:1b:f5:fc:a0:6b:db:07:
7d:7a:32:50:44:c5:ca:4d:b5:29:ed:c6:d7:87:87:
cd:68:53:71:74:14:ef:a6:7d:81:ea:dd:7f:91:af:
64:b2:44:57:7f:30:4f:59:85:e5:85:25:63:20:34:
90:5b:5d:7d:43:74:55:c8:e9:ac:67:18:6f:a5:8f:
c3:91:69:51:52:36:ea:f2:e1:c8:64:07:92:08:45:
34:cd:b8:1d:8d:7f:f9:0b:bb:eb:13:ac:f9:d3:d9:
d9:49:c8:97:f0:de:6c:6d:f4:d9:18:c7:bf:c9:9e:
85:b6:fb:f4:ca:8b:ba:eb:fa:6f:cb:00:07:63:cc:
7d:28:f6:52:c5:cd:21:b1:1a:fb:73:f8:19:a4:ed:
15:cc:6e:c8:cb:b1:e8:66:f9:40:4f:ee:ea:c7:6a:
c8:b6:97:33:ac:17:6b:61:87:e5:d4:7e:48:3f:c9:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:85:7D:AC:F8:B5:9D:9D:06:F9:95:D9:96:C3:E9:26:4E:F6:0B:EF
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:21:d0:1c:86:1c:ff:3f:9e:47:70:18:e8:e2:2d:39:bb:
bc:fc:34:a5:be:b0:e3:c8:fb:c7:6a:22:02:64:90:86:7e:0b:
28:a9:45:d8:27:7e:f2:2b:a7:5d:d2:71:4b:35:d2:d2:0a:72:
e2:03:c2:f2:4f:3b:d7:b3:2b:55:46:56:f5:95:e2:0a:58:99:
29:4d:bf:e7:7f:e3:73:78:3d:d6:bc:cc:55:eb:ed:41:ad:85:
07:fb:9f:5f:a2:03:5e:bf:06:16:ef:b4:f1:a4:75:ea:7b:6b:
bc:a6:79:cf:10:94:1c:a0:d2:55:5f:20:1a:ee:d8:59:fa:5a:
77:09:94:93:3c:26:dd:0d:b3:cf:e6:82:71:ea:50:ae:28:f2:
46:84:66:a1:f0:8f:0c:8c:c3:76:bf:d9:5f:ea:f7:91:4a:cd:
8c:4f:a5:31:a6:57:94:9e:1b:c2:23:21:3f:40:42:76:d4:8a:
93:4f:dc:0e:b5:63:b4:50:a0:07:ac:4f:92:cb:8b:9d:7e:38:
34:d3:4b:64:a1:74:93:2b:ba:1d:61:8b:9d:f0:15:3e:32:b4:
da:6c:84:c7:ac:72:e5:69:72:be:1d:e2:4b:44:c4:f4:4d:3c:
3e:a7:bf:d3:90:1a:74:9f:60:3b:6b:e0:05:b9:5b:70:39:4d:
49:23:77:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/V+3nBKP33u+eHO7CgdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzUzNDk5ZmYyMGYwMzVjYjhiMWMwYWE5Yjc3YzNkN2Qy
ODk3NmMwHhcNMjUxMDE5MTUwMTI3WhcNMjUxMDIwMTUwMTI3WjAzMTEwLwYDVQQD
Eyg5OTg1N2RhY2Y4YjU5ZDlkMDZmOTk1ZDk5NmMzZTkyNjRlZjYwYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9HbixvxCitSaonBAGLrZDbNspje
npWf23zGPbjAG41FSo19206itIGngYvAtmvsHVb0r4OPXJldcZBz5rtuEuFgk90m
JNORQs+IxRSuvV8l2xv1/KBr2wd9ejJQRMXKTbUp7cbXh4fNaFNxdBTvpn2B6t1/
ka9kskRXfzBPWYXlhSVjIDSQW119Q3RVyOmsZxhvpY/DkWlRUjbq8uHIZAeSCEU0
zbgdjX/5C7vrE6z509nZSciX8N5sbfTZGMe/yZ6Ftvv0you66/pvywAHY8x9KPZS
xc0hsRr7c/gZpO0VzG7Iy7HoZvlAT+7qx2rItpczrBdrYYfl1H5IP8lb/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmFfaz4tZ2dBvmV2ZbD6SZO9gvvMB8GA1UdIwQY
MBaAFKrFNJn/IPA1y4scCqm3fD19KJdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMt
ZmFiOWJmN2EyNmQ4LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MThlZTAtYmNjNy00ODUxLWJjMmMtZmFiOWJmN2EyNmQ4
LzEvcXNVMG1mOGc4RFhMaXh3S3FiZDhQWDBvbDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjYh0ByG
HP8/nkdwGOjiLTm7vPw0pb6w48j7x2oiAmSQhn4LKKlF2Cd+8iunXdJxSzXS0gpy
4gPC8k8717MrVUZW9ZXiCliZKU2/53/jc3g91rzMVevtQa2FB/ufX6IDXr8GFu+0
8aR16ntrvKZ5zxCUHKDSVV8gGu7YWfpadwmUkzwm3Q2zz+aCcepQrijyRoRmofCP
DIzDdr/ZX+r3kUrNjE+lMaZXlJ4bwiMhP0BCdtSKk0/cDrVjtFCgB6xPksuLnX44
NNNLZKF0kyu6HWGLnfAVPjK02myEx6xy5Wlyvh3iS0TE9E08Pqe/05AadJ9gO2vg
BblbcDlNSSN3qQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:34 2025 by rpki-client