Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier: Odz0uanQ+LbeWvMV7fpFvpfAe2dDG0ALAoTkGxcyzvE=
Subject key identifier: 41:A0:40:2A:21:61:5A:B3:77:01:6B:CE:D9:D7:E1:20:CA:A9:95:5D
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 019A4E18CA5CB85D219E462F0D2CC76748D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number: 1369
Signing time: Tue 04 Nov 2025 09:00:38 +0000
Manifest this update: Tue 04 Nov 2025 09:00:38 +0000
Manifest next update: Wed 05 Nov 2025 09:00:38 +0000
Files and hashes: 1: 9Usz5mjL7Eqg2BKdlKm61_qGXA0.roa (hash: tm7XoNOtROJxqpd0QLHAYI1n3J02MIzjMbI9J6S5daM=)
2: hYQ5Af5d91S_vu2hLfWPZokf1ds.roa (hash: b+J2iWbiq5H0kTA4RnCVkz8UkglYOscwMixBlHnjvIw=)
3: htWv83j5mtpGTlM4Lw1xIRvmIbk.roa (hash: cnK1fN2lnd7WvHE3Ad4lixpuor2/4VBvsHu1sSW/tYg=)
4: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: 8lBh79Me+jML5zEGOznLBY+r8biNP1H4TKV3turAgfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ca:5c:b8:5d:21:9e:46:2f:0d:2c:c7:67:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Nov 4 09:00:38 2025 GMT
Not After : Nov 5 09:00:38 2025 GMT
Subject: CN=41a0402a21615ab377016bced9d7e120caa9955d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:71:f3:a6:36:ee:56:71:31:54:2d:f7:42:
ce:7a:4e:5a:08:38:02:46:be:b1:11:20:15:49:48:
cd:75:bf:29:36:ac:9e:dd:9b:90:e0:06:f2:75:1f:
c7:f9:5b:69:f8:15:e7:f8:09:8f:60:92:7e:42:ee:
37:58:df:d1:34:d4:e7:30:37:c5:4f:8d:24:48:03:
00:c6:2f:3a:48:e7:05:5e:e5:c3:29:79:b4:3d:f4:
4d:f0:2c:39:34:5e:61:1d:f3:f9:44:5f:d6:5f:6f:
ab:7c:de:82:f7:8f:58:0d:39:49:8e:b6:00:34:59:
06:19:50:b0:79:69:cc:5d:59:dd:38:7b:b8:18:ad:
92:2a:3b:20:da:08:b9:25:f4:c2:a3:6c:11:0d:cd:
07:93:61:19:96:a7:3b:9d:6e:38:34:f1:e1:bb:41:
31:9d:55:3b:8c:cc:00:9a:38:07:c2:23:88:c4:77:
10:b9:94:72:f1:9b:d0:6b:a1:61:a5:b5:0a:7d:90:
89:d3:85:f9:18:93:8a:78:8e:70:44:65:f2:14:7f:
f5:82:4e:b6:5b:4c:b9:2b:c0:7e:92:f7:bc:cf:de:
bb:0f:ca:06:c0:bd:4e:76:27:ff:1f:0f:22:ab:c1:
ca:46:f4:67:fc:ea:73:8f:90:77:93:3b:2a:6e:57:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:40:2A:21:61:5A:B3:77:01:6B:CE:D9:D7:E1:20:CA:A9:95:5D
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:36:42:94:be:57:5e:20:21:bd:dd:0e:9f:ff:63:fa:6c:a0:
ab:7a:c3:1e:41:92:b1:17:2b:e4:5c:02:e4:c4:c8:19:4d:21:
c9:91:72:8c:e1:0f:e2:8d:47:16:f6:cd:34:d1:ce:bf:e7:8e:
fc:dc:af:82:cb:7d:a2:06:05:ea:74:77:28:4b:2f:06:06:be:
1a:9b:82:74:50:3e:a5:08:34:e0:2c:81:40:eb:ac:fb:da:1b:
c3:1e:42:98:65:29:7c:f0:39:97:d2:4e:0c:00:f3:9c:83:77:
51:f5:25:cf:b5:62:0c:19:1d:e0:54:9b:07:d8:fc:b9:3e:8a:
4f:b7:d2:d7:de:0b:14:17:3a:12:ef:e8:0f:55:62:aa:d8:56:
cc:b3:ea:c6:32:b8:f0:4b:bf:fb:44:e7:9e:7f:a9:e5:a5:6c:
8d:d6:ee:65:07:64:8c:eb:92:b2:8a:6b:e7:6f:54:57:02:77:
1e:57:d7:cf:f1:f7:1a:9d:38:c6:dc:09:25:32:f6:76:8a:4d:
e8:ab:79:05:37:1e:e9:c5:ac:b2:b7:82:4e:90:3f:66:01:0d:
56:f2:b2:cd:a0:23:97:ae:f4:4a:ac:28:6e:e1:67:b4:81:80:
ec:8e:f6:70:be:57:11:c3:d0:99:8b:9f:a9:13:c2:45:6f:d9:
3c:26:68:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGMpcuF0hnkYvDSzHZ0jWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh
NjVjYTMwHhcNMjUxMTA0MDkwMDM4WhcNMjUxMTA1MDkwMDM4WjAzMTEwLwYDVQQD
Eyg0MWEwNDAyYTIxNjE1YWIzNzcwMTZiY2VkOWQ3ZTEyMGNhYTk5NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIhx86Y27lZxMVQt90LOek5aCDgC
Rr6xESAVSUjNdb8pNqye3ZuQ4AbydR/H+Vtp+BXn+AmPYJJ+Qu43WN/RNNTnMDfF
T40kSAMAxi86SOcFXuXDKXm0PfRN8Cw5NF5hHfP5RF/WX2+rfN6C949YDTlJjrYA
NFkGGVCweWnMXVndOHu4GK2SKjsg2gi5JfTCo2wRDc0Hk2EZlqc7nW44NPHhu0Ex
nVU7jMwAmjgHwiOIxHcQuZRy8ZvQa6FhpbUKfZCJ04X5GJOKeI5wRGXyFH/1gk62
W0y5K8B+kve8z967D8oGwL1Odif/Hw8iq8HKRvRn/Opzj5B3kzsqbldKoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGgQCohYVqzdwFrztnX4SDKqZVdMB8GA1UdIwQY
MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt
ZjU1YmM4YWYxNTA2LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2
LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDZClL5X
XiAhvd0On/9j+mygq3rDHkGSsRcr5FwC5MTIGU0hyZFyjOEP4o1HFvbNNNHOv+eO
/Nyvgst9ogYF6nR3KEsvBga+GpuCdFA+pQg04CyBQOus+9obwx5CmGUpfPA5l9JO
DADznIN3UfUlz7ViDBkd4FSbB9j8uT6KT7fS194LFBc6Eu/oD1ViqthWzLPqxjK4
8Eu/+0Tnnn+p5aVsjdbuZQdkjOuSsopr529UVwJ3HlfXz/H3Gp04xtwJJTL2dopN
6Kt5BTce6cWssreCTpA/ZgENVvKyzaAjl670SqwobuFntIGA7I72cL5XEcPQmYuf
qRPCRW/ZPCZoFw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:33 2025 by rpki-client