Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: av8RNKygFs/GUbD2y/X0dmZeRpzlO+1dp3iWOi48olk=
Subject key identifier: 3F:64:B3:3F:59:6F:0A:38:3D:B1:A2:1F:EB:20:49:0B:D8:75:9F:8B
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 019A4D744583B759E7588C8ED5C509F6F8D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 1023
Signing time: Tue 04 Nov 2025 06:00:56 +0000
Manifest this update: Tue 04 Nov 2025 06:00:56 +0000
Manifest next update: Wed 05 Nov 2025 06:00:56 +0000
Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=)
2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=)
3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: iZJIzJYgUTcAo5KUECp0R83mAr7msMXhbFxKaID2B1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:45:83:b7:59:e7:58:8c:8e:d5:c5:09:f6:f8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Nov 4 06:00:56 2025 GMT
Not After : Nov 5 06:00:56 2025 GMT
Subject: CN=3f64b33f596f0a383db1a21feb20490bd8759f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:3e:b7:83:01:32:6f:d3:e5:e4:15:cf:9a:
c0:55:56:3c:a0:cf:05:7e:f9:c6:63:50:e1:c3:2d:
d9:a7:6e:1b:89:51:fd:23:1d:76:5d:c1:d3:11:50:
00:17:1e:0e:b9:01:31:6e:00:15:74:6d:78:34:e0:
72:6c:76:b4:c2:fd:39:8a:29:aa:96:50:fd:bc:e1:
aa:6b:98:c7:ac:d0:9f:a8:9e:ec:3b:c2:3f:22:de:
09:48:89:5f:13:9d:66:d9:fe:30:9f:a6:05:d0:5d:
7d:1f:6a:6b:07:d5:85:45:ab:2a:71:2d:74:a2:9c:
58:03:b7:0e:af:bf:ff:a9:26:1f:8f:6e:d4:bf:95:
56:15:67:ea:28:78:ad:cc:85:f8:51:31:95:35:a6:
75:90:bf:5c:76:69:00:b0:26:84:44:b0:f0:86:f2:
a4:c9:d2:48:20:ff:27:13:d5:e2:c5:1d:fc:65:c5:
12:ab:4b:ed:a8:1a:f7:18:1d:fc:1a:27:44:e7:3f:
31:18:bb:68:ec:7c:aa:fc:af:34:b0:77:29:b9:4f:
40:fb:c2:d7:4a:53:d5:a7:d0:db:8b:de:37:aa:38:
6c:89:41:2a:4b:13:13:39:5d:78:59:76:9d:1f:27:
e7:04:ec:35:d1:f7:c6:b9:36:16:6c:ae:54:7b:ff:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:B3:3F:59:6F:0A:38:3D:B1:A2:1F:EB:20:49:0B:D8:75:9F:8B
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d6:dc:b8:9f:8f:56:2e:b1:ba:ea:c2:2b:ee:6d:0b:5d:de:
7b:29:24:a9:cc:9c:d8:83:72:6d:6e:20:0c:f0:1f:a2:bc:ab:
d0:fa:07:d5:48:f3:d3:33:df:7e:e2:f4:74:45:c5:ae:6b:f6:
1f:e3:61:e2:64:11:db:b7:6d:3b:ab:17:bb:f3:6e:02:3b:8a:
9a:9d:55:49:b5:4e:24:b4:ab:ff:fd:fe:69:86:01:c8:60:6a:
75:ed:e1:ef:f4:8f:e3:24:77:10:23:23:9e:76:98:bd:47:0f:
ad:4c:a9:ea:67:b7:ec:05:c8:8e:ab:1e:d0:93:3d:5e:7d:ea:
57:fb:36:88:65:47:4c:8d:25:a1:95:a3:cf:03:0c:b6:86:18:
af:94:d4:67:31:8e:a0:03:d4:a0:11:86:31:6a:78:86:95:11:
2e:0f:b4:13:0a:ac:97:48:d0:a3:3d:b4:6c:e6:15:a2:13:1b:
df:99:ef:d5:88:df:98:c2:65:90:d8:24:a3:3d:4c:e7:16:76:
72:d8:c0:33:e2:83:df:55:e3:fe:98:23:a7:5c:e1:56:ca:ac:
fd:d4:41:09:2c:fd:c3:e7:65:ac:c1:e4:34:84:9b:94:ed:ef:
dc:78:03:4c:5c:4d:8b:a0:02:6b:92:d9:a4:c6:2d:9b:61:c1:
dd:4b:e0:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdEWDt1nnWIyO1cUJ9vjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2Y0YTEyOGQwOWRmYzRiOGIwMzVhMTJjZDgzMWY5Zjdi
MDE0NjkwHhcNMjUxMTA0MDYwMDU2WhcNMjUxMTA1MDYwMDU2WjAzMTEwLwYDVQQD
EygzZjY0YjMzZjU5NmYwYTM4M2RiMWEyMWZlYjIwNDkwYmQ4NzU5ZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqw+t4MBMm/T5eQVz5rAVVY8oM8F
fvnGY1Dhwy3Zp24biVH9Ix12XcHTEVAAFx4OuQExbgAVdG14NOBybHa0wv05iimq
llD9vOGqa5jHrNCfqJ7sO8I/It4JSIlfE51m2f4wn6YF0F19H2prB9WFRasqcS10
opxYA7cOr7//qSYfj27Uv5VWFWfqKHitzIX4UTGVNaZ1kL9cdmkAsCaERLDwhvKk
ydJIIP8nE9XixR38ZcUSq0vtqBr3GB38GidE5z8xGLto7Hyq/K80sHcpuU9A+8LX
SlPVp9Dbi943qjhsiUEqSxMTOV14WXadHyfnBOw10ffGuTYWbK5Ue/8mmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9ksz9Zbwo4PbGiH+sgSQvYdZ+LMB8GA1UdIwQY
MBaAFELPShKNCd/EuLA1oSzYMfn3sBRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEt
MGIwNDM3NWY5YjM2LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEtMGIwNDM3NWY5YjM2
LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNbcuJ+P
Vi6xuurCK+5tC13eeykkqcyc2INybW4gDPAforyr0PoH1Ujz0zPffuL0dEXFrmv2
H+Nh4mQR27dtO6sXu/NuAjuKmp1VSbVOJLSr//3+aYYByGBqde3h7/SP4yR3ECMj
nnaYvUcPrUyp6me37AXIjqse0JM9Xn3qV/s2iGVHTI0loZWjzwMMtoYYr5TUZzGO
oAPUoBGGMWp4hpURLg+0Ewqsl0jQoz20bOYVohMb35nv1YjfmMJlkNgkoz1M5xZ2
ctjAM+KD31Xj/pgjp1zhVsqs/dRBCSz9w+dlrMHkNISblO3v3HgDTFxNi6ACa5LZ
pMYtm2HB3UvgEQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:29 2025 by rpki-client