Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
File: qJ3jcDei8quO2_asHfHCmZfIiMg.mft (raw, json)
Hash identifier: TpqogqQMmN2GF6gKkQ4jIbV4y5B4nQ79azGvbvcW64U=
Subject key identifier: E9:86:79:58:D5:2F:33:B3:BA:1C:CB:81:15:73:22:9B:11:AF:46:30
Authority key identifier: A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
Certificate issuer: /CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Certificate serial: 019A4FD05422BE56F72A79E8682DFC378A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
Manifest number: 0411
Signing time: Tue 04 Nov 2025 17:00:44 +0000
Manifest this update: Tue 04 Nov 2025 17:00:44 +0000
Manifest next update: Wed 05 Nov 2025 17:00:44 +0000
Files and hashes: 1: qJ3jcDei8quO2_asHfHCmZfIiMg.crl (hash: RXrspOM2spsDPtk0EuQRhNV3njBexzNQbnu83+yEJM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:54:22:be:56:f7:2a:79:e8:68:2d:fc:37:8a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Validity
Not Before: Nov 4 17:00:44 2025 GMT
Not After : Nov 5 17:00:44 2025 GMT
Subject: CN=e9867958d52f33b3ba1ccb811573229b11af4630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:4f:53:59:ea:8e:cd:93:5e:98:0f:b5:13:
08:81:62:89:fb:8a:6b:61:b9:4e:f8:d0:8b:d1:77:
0c:a3:3f:b4:97:00:10:08:86:40:81:c9:3f:fc:65:
28:f9:92:2d:18:bf:7d:c9:96:50:43:39:34:c9:ca:
b7:f3:10:b5:a0:94:ca:cf:fc:66:93:80:ce:20:1c:
24:3b:eb:04:b3:e9:c1:75:b0:36:f0:12:fb:7c:f5:
d2:0d:90:bb:12:14:15:08:c5:90:ff:a9:33:08:22:
69:ae:ee:22:78:c1:e5:2d:19:fe:db:f2:aa:11:a0:
c3:44:61:20:42:4d:ab:7f:42:85:9d:47:df:b2:a6:
7e:13:89:f5:01:a7:27:fb:aa:7f:74:86:51:9f:2d:
1b:14:49:13:74:19:f9:32:39:8e:40:6b:bc:ad:33:
33:db:6a:99:53:0f:51:3b:80:c4:5c:22:74:db:2a:
60:89:e2:50:4a:5b:91:64:f4:07:ba:02:55:e6:35:
fd:57:c7:bb:c6:89:48:ca:dd:2a:2d:dd:39:e8:b8:
ac:e1:79:09:eb:31:0f:ce:9a:71:71:7d:a5:65:77:
59:6f:25:e8:ff:73:98:09:e4:2a:d2:59:69:11:ad:
cb:1c:20:9f:4a:37:63:05:99:aa:f3:39:c7:68:13:
dc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:86:79:58:D5:2F:33:B3:BA:1C:CB:81:15:73:22:9B:11:AF:46:30
X509v3 Authority Key Identifier:
keyid:A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:42:b8:64:87:e0:0a:4d:43:e1:87:11:fc:2d:43:ad:e8:ca:
45:67:37:a2:03:55:3a:c5:a0:2e:8f:1c:eb:98:b7:5a:10:7c:
d5:70:5d:be:ff:7e:ab:61:33:18:24:bf:ba:8f:3f:7f:8d:2e:
78:29:a6:05:79:94:ba:20:b5:52:04:0f:3f:a3:60:c3:e0:e1:
2f:05:f6:92:9f:5e:13:07:77:4f:71:ce:0e:30:1b:c4:a4:5d:
a3:93:bb:6c:14:5e:a9:39:36:ac:b0:3a:ff:ba:a8:41:e9:42:
cb:d6:dd:d4:b1:37:2b:8b:ea:72:d1:b5:fe:14:de:46:a1:43:
3f:e9:71:dd:bb:ad:d4:79:cb:13:81:61:62:96:cb:85:41:03:
4e:ad:10:51:c4:e0:16:60:40:5e:c7:50:2d:d4:e5:da:06:55:
88:f0:35:f4:e0:61:fb:d9:b2:cf:b5:65:19:77:ef:4c:78:f1:
1b:68:ad:17:f1:a1:4b:d0:64:51:40:73:46:18:82:06:9f:6d:
b2:ff:55:90:49:7e:64:c3:f9:dc:90:14:99:93:3f:f0:e8:5b:
32:ac:cb:54:0a:21:58:dc:81:70:fe:3d:c3:52:e0:94:4d:db:
97:44:14:88:7d:0c:13:fc:32:25:83:6d:83:9f:b9:70:e0:d7:
2a:9b:3e:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0FQivlb3KnnoaC38N4oxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OWRlMzcwMzdhMmYyYWI4ZWRiZjZhYzFkZjFjMjk5OTdj
ODg4YzgwHhcNMjUxMTA0MTcwMDQ0WhcNMjUxMTA1MTcwMDQ0WjAzMTEwLwYDVQQD
EyhlOTg2Nzk1OGQ1MmYzM2IzYmExY2NiODExNTczMjI5YjExYWY0NjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EtPU1nqjs2TXpgPtRMIgWKJ+4pr
YblO+NCL0XcMoz+0lwAQCIZAgck//GUo+ZItGL99yZZQQzk0ycq38xC1oJTKz/xm
k4DOIBwkO+sEs+nBdbA28BL7fPXSDZC7EhQVCMWQ/6kzCCJpru4ieMHlLRn+2/Kq
EaDDRGEgQk2rf0KFnUffsqZ+E4n1Aacn+6p/dIZRny0bFEkTdBn5MjmOQGu8rTMz
22qZUw9RO4DEXCJ02ypgieJQSluRZPQHugJV5jX9V8e7xolIyt0qLd056Lis4XkJ
6zEPzppxcX2lZXdZbyXo/3OYCeQq0llpEa3LHCCfSjdjBZmq8znHaBPchwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmGeVjVLzOzuhzLgRVzIpsRr0YwMB8GA1UdIwQY
MBaAFKid43A3ovKrjtv2rB3xwpmXyIjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kNDA0MDctNWQxMy00ZWQyLTkwZGQt
ZmZiNjcwN2M2MWIzLzEvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kNDA0MDctNWQxMy00ZWQyLTkwZGQtZmZiNjcwN2M2MWIz
LzEvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUK4ZIfg
Ck1D4YcR/C1DrejKRWc3ogNVOsWgLo8c65i3WhB81XBdvv9+q2EzGCS/uo8/f40u
eCmmBXmUuiC1UgQPP6Ngw+DhLwX2kp9eEwd3T3HODjAbxKRdo5O7bBReqTk2rLA6
/7qoQelCy9bd1LE3K4vqctG1/hTeRqFDP+lx3but1HnLE4FhYpbLhUEDTq0QUcTg
FmBAXsdQLdTl2gZViPA19OBh+9myz7VlGXfvTHjxG2itF/GhS9BkUUBzRhiCBp9t
sv9VkEl+ZMP53JAUmZM/8OhbMqzLVAohWNyBcP49w1LglE3bl0QUiH0ME/wyJYNt
g5+5cODXKps+fQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:03 2025 by rpki-client