Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: Vtxe3CUDMfFSlJwQPGMd5x6cR4wN7/adfoyuWKxjGu4=
Subject key identifier: E0:49:C4:49:4A:84:2C:4E:87:40:1A:9D:52:35:CA:45:CF:3C:F3:4B
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 019A4E4F8681AD18A0B5E0784C247D2A6CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 165A
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: RDkLRl9+zCtShkdOrXBw7qofLXMbltZz0XuEU2+8i7g=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:86:81:ad:18:a0:b5:e0:78:4c:24:7d:2a:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=e049c4494a842c4e87401a9d5235ca45cf3cf34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:03:3e:05:4e:d7:22:14:4c:3d:5c:e4:7d:23:
1d:46:9e:a1:e9:7b:4e:19:62:aa:32:b9:66:0e:bc:
0d:54:57:41:73:c0:38:44:af:0e:97:35:ac:3b:e3:
5d:eb:5b:94:25:73:33:3f:1a:14:8c:8a:4e:7f:82:
83:e4:8a:c6:53:31:fb:32:fd:5f:46:68:97:d3:3e:
63:a1:ef:60:51:e1:e6:6e:cd:a7:04:3a:ca:2a:ee:
65:d3:3a:c4:42:74:1e:15:ab:18:f3:53:09:bc:6e:
5f:d4:26:8b:39:aa:6a:a6:30:9c:a3:f7:b5:78:ac:
1a:57:2a:20:09:6d:15:4b:44:3b:d4:92:da:a4:f2:
b8:a2:ff:31:25:84:40:f5:df:fe:5b:fe:c3:e1:28:
f7:f6:ae:67:4d:23:9c:26:32:44:1d:d3:51:df:b4:
65:cb:18:f4:ab:6b:c1:16:dd:8a:39:b4:90:8c:29:
ef:bc:36:50:0b:79:e5:aa:35:a6:ff:99:68:8d:56:
4e:4a:18:d0:bf:92:f4:3e:eb:96:a2:77:89:f0:09:
5f:05:f5:bc:74:75:df:45:43:70:d4:e4:d8:76:7b:
ab:0a:5d:c5:a3:ce:d2:99:d4:08:0d:21:c8:be:88:
1e:32:ef:d6:72:5c:a5:33:5c:f9:30:23:1c:04:d4:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:C4:49:4A:84:2C:4E:87:40:1A:9D:52:35:CA:45:CF:3C:F3:4B
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:71:b7:03:a8:a9:5a:40:67:6e:e4:48:b2:aa:14:10:a3:38:
31:98:c6:20:3f:c4:e0:d6:19:94:0e:d0:dd:a1:55:45:9e:49:
6e:5d:30:8d:6f:72:c6:f5:86:e5:a7:99:ee:b1:09:81:3e:f5:
0e:41:59:29:4e:81:d5:12:56:f1:3e:bd:e4:03:c8:e3:f6:8a:
a9:a6:4e:02:6d:89:0a:20:39:fa:1d:62:fd:2f:34:bc:6d:84:
de:0d:aa:45:b1:0e:d1:8c:eb:b6:d3:85:f7:74:35:30:b2:4e:
43:ad:eb:ca:17:7b:cd:04:6d:bf:87:2d:ec:04:5c:f9:41:2a:
09:e3:85:7e:7f:f5:44:6d:da:66:8b:1d:58:09:32:12:9a:46:
4f:bc:8c:4c:aa:5c:97:f2:ec:b6:03:fa:b3:bf:26:45:c4:99:
63:7e:60:b8:ed:94:7a:86:36:9f:4c:52:c4:8f:3d:c0:25:fd:
6b:1f:fa:64:17:8d:70:7e:04:cb:d0:f7:2c:e0:61:9a:67:d0:
4d:33:a2:03:a2:a4:7f:d5:f1:d7:d9:38:9c:19:23:b1:e9:cb:
5a:5e:ad:a4:63:8b:45:5d:b6:a1:a2:1e:1e:09:04:8d:9c:21:
58:5a:e2:00:9e:d3:a6:fc:52:8a:fa:e9:d7:11:91:42:70:24:
39:64:f7:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT4aBrRigteB4TCR9KmywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMDA0NDc3MjQzY2EyMGI5NWRjOGVmZTA3MzM3NjM5ODA2
ZjYwNzUwHhcNMjUxMTA0MTAwMDI1WhcNMjUxMTA1MTAwMDI1WjAzMTEwLwYDVQQD
EyhlMDQ5YzQ0OTRhODQyYzRlODc0MDFhOWQ1MjM1Y2E0NWNmM2NmMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgM+BU7XIhRMPVzkfSMdRp6h6XtO
GWKqMrlmDrwNVFdBc8A4RK8OlzWsO+Nd61uUJXMzPxoUjIpOf4KD5IrGUzH7Mv1f
RmiX0z5joe9gUeHmbs2nBDrKKu5l0zrEQnQeFasY81MJvG5f1CaLOapqpjCco/e1
eKwaVyogCW0VS0Q71JLapPK4ov8xJYRA9d/+W/7D4Sj39q5nTSOcJjJEHdNR37Rl
yxj0q2vBFt2KObSQjCnvvDZQC3nlqjWm/5lojVZOShjQv5L0PuuWoneJ8AlfBfW8
dHXfRUNw1OTYdnurCl3Fo87SmdQIDSHIvogeMu/WclylM1z5MCMcBNSB3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBJxElKhCxOh0AanVI1ykXPPPNLMB8GA1UdIwQY
MBaAFEIARHckPKILldyO/gczdjmAb2B1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mZDc1N2MtM2E3Yy00YjMxLWI0YTEt
Y2ZhN2EzMTBkNTQyLzEvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mZDc1N2MtM2E3Yy00YjMxLWI0YTEtY2ZhN2EzMTBkNTQy
LzEvUWdCRWR5UThvZ3VWM0k3LUJ6TjJPWUJ2WUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHG3A6ip
WkBnbuRIsqoUEKM4MZjGID/E4NYZlA7Q3aFVRZ5Jbl0wjW9yxvWG5aeZ7rEJgT71
DkFZKU6B1RJW8T695API4/aKqaZOAm2JCiA5+h1i/S80vG2E3g2qRbEO0YzrttOF
93Q1MLJOQ63ryhd7zQRtv4ct7ARc+UEqCeOFfn/1RG3aZosdWAkyEppGT7yMTKpc
l/LstgP6s78mRcSZY35guO2UeoY2n0xSxI89wCX9ax/6ZBeNcH4Ey9D3LOBhmmfQ
TTOiA6Kkf9Xx19k4nBkjsenLWl6tpGOLRV22oaIeHgkEjZwhWFriAJ7TpvxSivrp
1xGRQnAkOWT3UA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:27:54 2025 by rpki-client