Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: tDw0BfwyefDXlug1eXyTJuJeyVMRnL0syfX/j2dZ+0I=
Subject key identifier: A4:E2:D4:2D:48:FD:74:CE:68:7D:C8:5C:D2:96:88:53:17:7F:96:90
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 019A4F624D9BCB2C0FE11CF7C4546CEFA0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 12DD
Signing time: Tue 04 Nov 2025 15:00:33 +0000
Manifest this update: Tue 04 Nov 2025 15:00:33 +0000
Manifest next update: Wed 05 Nov 2025 15:00:33 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: rrqDSfjtoPx3D5Erm89a/lb60dwECQjCTpdguoZ0nns=)
2: o7v3w6s-TtM4FqHNx2KIzrdDfyg.roa (hash: E/bv9FlRfrfb8DUNG3s4m8ELhpH6SWFAZyVqbfxptQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4d:9b:cb:2c:0f:e1:1c:f7:c4:54:6c:ef:a0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Nov 4 15:00:33 2025 GMT
Not After : Nov 5 15:00:33 2025 GMT
Subject: CN=a4e2d42d48fd74ce687dc85cd2968853177f9690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:0b:e9:8c:ed:4f:e3:95:8f:4c:16:d0:2a:
ab:51:24:b9:8c:1d:70:00:40:d7:45:2b:d2:3a:82:
2b:aa:11:6e:2b:93:69:f4:6f:77:d0:05:af:26:1a:
30:25:32:7a:4c:e4:11:13:f6:c9:6b:0b:cb:36:51:
3c:6b:91:01:c3:04:8e:d6:3f:e6:b7:fb:eb:6e:3c:
b0:83:cd:31:64:48:2f:bb:57:98:f1:b5:c0:ac:58:
e2:36:28:70:f2:93:4d:8b:c4:83:64:c1:64:62:6c:
ec:2d:8f:16:95:e2:c2:9e:8c:e4:61:64:aa:84:16:
06:6c:a8:9e:c9:50:c5:9b:57:1e:e2:73:8d:90:df:
b7:de:b3:f1:60:94:0b:a4:1b:34:9c:5f:bd:47:77:
65:16:a6:59:92:3d:d4:17:16:6c:fe:90:f9:1a:5d:
42:69:d0:22:05:6d:47:d0:d6:e8:54:cb:ca:2d:b4:
4c:b1:35:d0:ca:e8:27:75:30:ec:0a:d8:e2:58:5f:
22:c2:5a:a5:51:26:4b:0e:a2:db:2b:d2:17:a7:d8:
f7:62:93:4f:b3:eb:c9:1c:7e:32:3b:b5:b6:61:40:
cf:89:19:e4:0d:88:17:00:bd:72:c3:97:a1:bc:fe:
8c:2b:f3:19:c6:21:ef:c0:d5:2e:2d:6e:ab:44:44:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E2:D4:2D:48:FD:74:CE:68:7D:C8:5C:D2:96:88:53:17:7F:96:90
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2f:01:bf:c8:92:b2:d6:33:45:00:ac:d3:33:64:5a:32:33:
eb:1a:c5:ff:33:b6:2a:b2:b3:b1:71:be:40:84:55:e6:60:b6:
d9:67:1b:66:51:30:23:00:e8:26:2b:a0:3e:3a:e5:a1:d8:04:
14:99:b6:79:02:0e:3f:b4:0b:1a:fc:1d:57:41:58:42:85:72:
fc:af:88:34:17:26:c3:92:21:88:90:94:42:70:fb:11:91:c0:
21:e8:00:98:8e:2f:1f:56:71:6c:4d:09:17:4d:2e:3c:6f:01:
09:e3:a7:e6:f9:41:66:a7:9c:67:87:03:85:96:e3:74:a4:c8:
84:f0:4e:fe:36:ae:2e:0b:ef:15:5c:22:7c:2f:16:b1:1a:92:
60:d9:2a:88:a1:fe:cf:ce:fd:27:7a:63:d3:12:52:b8:3b:64:
a6:df:1f:a6:bd:15:e6:b5:7a:ba:32:88:21:f0:95:c0:37:2a:
77:d5:81:5e:fb:54:f4:c7:a9:4c:f8:c8:09:d5:d2:94:91:ee:
08:08:6f:27:de:ea:3d:56:99:9f:8f:41:2b:69:fa:91:9d:df:
66:4f:47:87:73:de:26:0d:df:7f:0c:70:63:43:ef:67:f7:20:
41:38:72:7c:67:de:79:c9:b8:2f:5f:cd:da:2e:82:dd:9b:f0:
a8:60:03:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYk2byywP4Rz3xFRs76D6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGM5NmI5MmI2YzY5OGZkMzRmYWM3ZDU4MWQ0YzA5MDhk
Y2NlOTkwHhcNMjUxMTA0MTUwMDMzWhcNMjUxMTA1MTUwMDMzWjAzMTEwLwYDVQQD
EyhhNGUyZDQyZDQ4ZmQ3NGNlNjg3ZGM4NWNkMjk2ODg1MzE3N2Y5NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKAL6YztT+OVj0wW0CqrUSS5jB1w
AEDXRSvSOoIrqhFuK5Np9G930AWvJhowJTJ6TOQRE/bJawvLNlE8a5EBwwSO1j/m
t/vrbjywg80xZEgvu1eY8bXArFjiNihw8pNNi8SDZMFkYmzsLY8WleLCnozkYWSq
hBYGbKieyVDFm1ce4nONkN+33rPxYJQLpBs0nF+9R3dlFqZZkj3UFxZs/pD5Gl1C
adAiBW1H0NboVMvKLbRMsTXQyugndTDsCtjiWF8iwlqlUSZLDqLbK9IXp9j3YpNP
s+vJHH4yO7W2YUDPiRnkDYgXAL1yw5ehvP6MK/MZxiHvwNUuLW6rRET+iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTi1C1I/XTOaH3IXNKWiFMXf5aQMB8GA1UdIwQY
MBaAFECMlrkrbGmP00+sfVgdTAkI3M6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzct
NTZiYmYwYmVhZjQ3LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzctNTZiYmYwYmVhZjQ3
LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey8Bv8iS
stYzRQCs0zNkWjIz6xrF/zO2KrKzsXG+QIRV5mC22WcbZlEwIwDoJiugPjrlodgE
FJm2eQIOP7QLGvwdV0FYQoVy/K+INBcmw5IhiJCUQnD7EZHAIegAmI4vH1ZxbE0J
F00uPG8BCeOn5vlBZqecZ4cDhZbjdKTIhPBO/jauLgvvFVwifC8WsRqSYNkqiKH+
z879J3pj0xJSuDtkpt8fpr0V5rV6ujKIIfCVwDcqd9WBXvtU9MepTPjICdXSlJHu
CAhvJ97qPVaZn49BK2n6kZ3fZk9Hh3PeJg3ffwxwY0PvZ/cgQThyfGfeecm4L1/N
2i6C3ZvwqGADCA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:41 2025 by rpki-client