Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: P3WR/71WJjuGZ6caIai8E8RTdJosBmPKiwNbGnbd2IA=
Subject key identifier: E6:C9:39:DB:E5:42:C5:F9:5B:AE:01:9C:48:6F:A7:CA:CD:FF:B2:98
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 019A4D3CDB2CE2A9D707373F157B6EA77E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 0B9E
Signing time: Tue 04 Nov 2025 05:00:25 +0000
Manifest this update: Tue 04 Nov 2025 05:00:25 +0000
Manifest next update: Wed 05 Nov 2025 05:00:25 +0000
Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: uPxHXIaOceichXiLnTNHzFvzKfTkVl8CK3wJpz7vOSU=)
2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:db:2c:e2:a9:d7:07:37:3f:15:7b:6e:a7:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Nov 4 05:00:25 2025 GMT
Not After : Nov 5 05:00:25 2025 GMT
Subject: CN=e6c939dbe542c5f95bae019c486fa7cacdffb298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:03:91:3d:94:9d:f1:2f:34:3b:a0:d2:b5:
6c:bf:e6:36:8a:71:8a:2e:b0:d6:67:4d:18:b4:1a:
79:ca:de:38:eb:d6:0c:63:40:b6:d1:71:ed:37:b6:
96:56:53:0d:3e:40:87:3c:0f:f7:f7:fd:91:08:ce:
13:23:73:9c:c1:68:da:fc:9e:cd:78:7e:69:4c:54:
2f:2a:34:09:d0:18:39:50:cb:8c:c6:9c:40:42:87:
7c:de:fd:a5:6e:96:c0:92:41:81:4f:4e:2e:52:4c:
a3:9b:cb:30:bf:71:23:d9:f3:9b:33:ce:ef:25:7f:
74:de:7e:28:55:1c:79:7e:e8:45:70:62:c7:cd:84:
4b:1a:ae:12:c5:f4:22:2f:09:c6:7d:4b:53:4f:b9:
5e:9f:08:11:31:5a:0a:02:94:ed:f8:79:b6:1f:57:
ec:8a:e1:9c:ca:02:73:59:09:22:2e:17:d3:6f:26:
58:79:83:ac:12:3a:e4:f1:05:98:1d:c5:5a:60:5f:
85:e7:5c:ae:b2:13:c0:89:97:24:4e:a8:2a:7c:e7:
e5:be:bc:24:7f:52:63:43:00:b0:df:4e:d0:3e:4c:
c5:7b:3d:3a:6e:e4:17:20:56:0b:2a:9d:6f:38:5d:
84:eb:8c:c8:ef:c5:5c:7c:75:20:cf:d1:cc:3a:bd:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C9:39:DB:E5:42:C5:F9:5B:AE:01:9C:48:6F:A7:CA:CD:FF:B2:98
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3b:62:e5:a1:3b:36:fe:4d:52:fb:e6:aa:0e:6d:d9:22:bc:
d7:6e:c8:c0:8d:7a:12:f2:33:4a:c4:5c:5e:35:b3:ed:4a:c1:
1c:dd:73:a8:ba:56:3e:19:87:52:f5:7f:f4:f2:95:8c:10:e2:
3b:0b:66:06:07:b0:a7:d6:8f:f2:a7:97:6e:c1:70:b6:59:a0:
a3:54:7e:5e:b3:3e:75:16:df:5c:5f:f7:ea:92:90:c8:48:ee:
20:b3:15:a8:a2:c2:7a:c8:ce:0c:b0:38:71:dd:fa:e9:58:9d:
e0:1f:be:02:32:c5:89:20:0b:4f:43:fa:43:33:94:4e:e0:ea:
1c:bc:2d:88:a6:2f:fc:1b:c4:27:ff:93:b2:b2:a2:03:ac:ab:
64:60:74:76:38:ac:41:9d:fa:f6:1e:ff:fd:3c:7f:ef:34:a9:
6c:ac:84:86:89:c5:fa:2e:71:50:57:72:ff:82:e2:e5:40:42:
e3:96:cb:52:7d:75:de:0b:2c:02:85:03:54:bf:69:29:48:1c:
57:b6:d6:84:5b:35:10:dd:5b:97:34:ca:87:a0:f7:d7:61:ca:
6b:b6:31:25:6f:8a:b3:7f:33:03:36:ac:16:2e:18:9c:e5:1b:
20:06:7b:60:6d:62:47:5d:52:80:41:e4:87:6d:eb:05:dc:54:
3d:4f:54:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPNss4qnXBzc/FXtup34EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjY3ZjVhNmNmNDliYzQzZjIzMDRkZTAwZjc3MDVlYzVi
NzlmY2EwHhcNMjUxMTA0MDUwMDI1WhcNMjUxMTA1MDUwMDI1WjAzMTEwLwYDVQQD
EyhlNmM5MzlkYmU1NDJjNWY5NWJhZTAxOWM0ODZmYTdjYWNkZmZiMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn0DkT2UnfEvNDug0rVsv+Y2inGK
LrDWZ00YtBp5yt4469YMY0C20XHtN7aWVlMNPkCHPA/39/2RCM4TI3OcwWja/J7N
eH5pTFQvKjQJ0Bg5UMuMxpxAQod83v2lbpbAkkGBT04uUkyjm8swv3Ej2fObM87v
JX903n4oVRx5fuhFcGLHzYRLGq4SxfQiLwnGfUtTT7lenwgRMVoKApTt+Hm2H1fs
iuGcygJzWQkiLhfTbyZYeYOsEjrk8QWYHcVaYF+F51yushPAiZckTqgqfOflvrwk
f1JjQwCw307QPkzFez06buQXIFYLKp1vOF2E64zI78VcfHUgz9HMOr1mPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObJOdvlQsX5W64BnEhvp8rN/7KYMB8GA1UdIwQY
MBaAFEImf1ps9JvEPyME3gD3cF7Ft5/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYt
YjIyNjk1YzcwM2E5LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81ZmUwZGYtYjAwOC00ZTk0LTk5YzYtYjIyNjk1YzcwM2E5
LzEvUWlaX1dtejBtOFFfSXdUZUFQZHdYc1czbjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTti5aE7
Nv5NUvvmqg5t2SK8127IwI16EvIzSsRcXjWz7UrBHN1zqLpWPhmHUvV/9PKVjBDi
OwtmBgewp9aP8qeXbsFwtlmgo1R+XrM+dRbfXF/36pKQyEjuILMVqKLCesjODLA4
cd366Vid4B++AjLFiSALT0P6QzOUTuDqHLwtiKYv/BvEJ/+TsrKiA6yrZGB0djis
QZ369h7//Tx/7zSpbKyEhonF+i5xUFdy/4Li5UBC45bLUn113gssAoUDVL9pKUgc
V7bWhFs1EN1blzTKh6D312HKa7YxJW+Ks38zAzasFi4YnOUbIAZ7YG1iR11SgEHk
h23rBdxUPU9UOA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:24 2025 by rpki-client