Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier: ftf1iGYX9c5UDSXTDa5kFphvKX2qiRpo8KJxO+nBy1k=
Subject key identifier: 6A:05:19:E7:13:0D:91:FC:89:81:F2:10:46:1F:38:5F:D2:65:69:20
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 019A5263616D122E71CCAE0D2B74BEE41D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number: 0214
Signing time: Wed 05 Nov 2025 05:00:35 +0000
Manifest this update: Wed 05 Nov 2025 05:00:35 +0000
Manifest next update: Thu 06 Nov 2025 05:00:35 +0000
Files and hashes: 1: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (hash: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=)
2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: mKodEqgmxFr7/pJEU/Yl8xTvt/wbuXudlMv/RNH1yjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:61:6d:12:2e:71:cc:ae:0d:2b:74:be:e4:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Nov 5 05:00:35 2025 GMT
Not After : Nov 6 05:00:35 2025 GMT
Subject: CN=6a0519e7130d91fc8981f210461f385fd2656920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:6b:dd:6a:06:02:e1:a9:6c:a8:58:8e:5e:
4c:fa:44:6a:54:57:9d:53:b5:b5:25:d6:16:0e:5d:
44:97:db:c2:7a:bb:43:0a:ea:9f:28:06:22:5d:ef:
6d:5f:1e:43:36:74:7a:2b:52:e6:87:a4:ec:f7:5c:
7e:d5:7e:49:8f:b9:c8:6d:b2:6f:bc:ce:27:db:43:
1e:04:d6:24:6f:dd:57:af:38:c4:39:0c:75:75:62:
bb:e7:b3:98:46:70:5e:44:de:9e:3c:58:27:37:ae:
8d:67:ca:a5:bf:2c:1a:bd:d9:a9:89:44:9e:c1:df:
d8:bd:b3:2e:5a:d2:a7:3d:9b:58:6d:3d:e6:ab:55:
85:b4:64:77:2a:17:78:58:64:0a:8d:dd:7b:e3:7a:
6e:ed:e8:e3:0c:e9:ac:e5:8d:62:b0:e4:eb:6b:0a:
6d:5d:d4:df:6d:1c:a9:76:a8:7e:ae:72:bc:16:04:
3c:6d:b0:10:16:e6:05:3c:93:85:48:78:01:80:9b:
a3:b0:98:b5:f4:d3:05:5c:df:df:63:bc:fb:dd:b7:
22:a1:bb:14:aa:04:05:85:92:71:45:87:d7:bd:41:
70:31:dd:60:b7:15:5e:6d:8f:24:ab:51:c9:ff:97:
6a:c0:46:55:6f:dc:61:c8:94:ee:c4:fd:f9:b2:8b:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:19:E7:13:0D:91:FC:89:81:F2:10:46:1F:38:5F:D2:65:69:20
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:33:26:3f:66:3a:34:2c:ef:be:cb:d3:a3:6e:88:57:3c:7f:
9e:c4:02:99:b8:79:1e:7c:e5:bf:74:3b:96:45:1a:e0:71:23:
6e:00:15:6f:f3:cd:42:86:76:1b:6b:55:37:f4:94:f9:ef:be:
b3:76:27:3d:78:36:a6:6b:01:54:ca:68:1a:cd:6a:f1:d1:d5:
3d:df:fd:d7:66:fc:63:42:27:3a:25:4c:09:cc:a0:bc:1b:ed:
9d:ce:d2:de:11:d3:b1:e7:56:1d:d4:60:14:ca:2d:01:35:ef:
85:c9:a9:c8:47:36:89:1d:2e:8f:c5:ca:f5:c0:3e:46:82:ee:
fb:cd:bd:f1:18:a8:6f:f3:23:aa:a2:be:18:50:2b:f3:7b:fa:
e6:18:33:c3:71:61:c3:43:23:04:51:e6:a4:57:01:e1:4c:cf:
eb:54:99:06:d7:06:4a:5a:c4:e1:1f:fb:a7:df:15:71:2d:79:
17:06:2c:47:a4:b4:b1:c8:68:39:cf:f3:1e:71:ed:c1:96:5e:
ae:fc:38:4f:fe:27:8b:97:5e:82:90:d1:0f:3d:17:d8:bd:09:
e4:d4:30:8e:de:3a:40:12:6b:41:59:02:53:77:e4:89:a7:69:
4c:6f:cc:61:68:2f:73:b2:f9:b4:43:4a:23:e6:7a:51:25:17:
24:ea:c0:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSY2FtEi5xzK4NK3S+5B0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2JlMzRmNWQyNjlkYTUwMmFhNjgzNDhiZjA3YjkyZDky
YzBjYzQwHhcNMjUxMTA1MDUwMDM1WhcNMjUxMTA2MDUwMDM1WjAzMTEwLwYDVQQD
Eyg2YTA1MTllNzEzMGQ5MWZjODk4MWYyMTA0NjFmMzg1ZmQyNjU2OTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHxr3WoGAuGpbKhYjl5M+kRqVFed
U7W1JdYWDl1El9vCertDCuqfKAYiXe9tXx5DNnR6K1Lmh6Ts91x+1X5Jj7nIbbJv
vM4n20MeBNYkb91XrzjEOQx1dWK757OYRnBeRN6ePFgnN66NZ8qlvywavdmpiUSe
wd/YvbMuWtKnPZtYbT3mq1WFtGR3Khd4WGQKjd1743pu7ejjDOms5Y1isOTrawpt
XdTfbRypdqh+rnK8FgQ8bbAQFuYFPJOFSHgBgJujsJi19NMFXN/fY7z73bciobsU
qgQFhZJxRYfXvUFwMd1gtxVebY8kq1HJ/5dqwEZVb9xhyJTuxP35sov3aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoFGecTDZH8iYHyEEYfOF/SZWkgMB8GA1UdIwQY
MBaAFKt7409dJp2lAqpoNIvwe5LZLAzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUt
NTU4M2U2MWFkYjM4LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lMGFmNjgtZGM2ZS00MWNjLWE2ZGUtNTU4M2U2MWFkYjM4
LzEvcTN2alQxMG1uYVVDcW1nMGlfQjdrdGtzRE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTMmP2Y6
NCzvvsvTo26IVzx/nsQCmbh5Hnzlv3Q7lkUa4HEjbgAVb/PNQoZ2G2tVN/SU+e++
s3YnPXg2pmsBVMpoGs1q8dHVPd/912b8Y0InOiVMCcygvBvtnc7S3hHTsedWHdRg
FMotATXvhcmpyEc2iR0uj8XK9cA+RoLu+8298Riob/MjqqK+GFAr83v65hgzw3Fh
w0MjBFHmpFcB4UzP61SZBtcGSlrE4R/7p98VcS15FwYsR6S0schoOc/zHnHtwZZe
rvw4T/4ni5degpDRDz0X2L0J5NQwjt46QBJrQVkCU3fkiadpTG/MYWgvc7L5tENK
I+Z6USUXJOrAZg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:05 2025 by rpki-client