Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
File: QwTYaLC50dQ2eOtGeufD-jv_4vg.mft (raw, json)
Hash identifier: I82mlGKBqsB3X216qpwQP1iUhtTHZtR20wAyMJZH4CU=
Subject key identifier: EB:6A:62:1C:05:42:B1:4A:7D:26:BC:EE:A4:B9:CA:3B:5D:2F:AB:4E
Authority key identifier: 43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
Certificate issuer: /CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Certificate serial: 019A4F991896DA935FFB24153758CDDE25CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
Manifest number: 0DB7
Signing time: Tue 04 Nov 2025 16:00:24 +0000
Manifest this update: Tue 04 Nov 2025 16:00:24 +0000
Manifest next update: Wed 05 Nov 2025 16:00:24 +0000
Files and hashes: 1: 0sfAJDOKEgD2Tzsu1RWmyLUySdU.roa (hash: VH3wSYokwNKbdRdlo/plfnhiJKHB8F9C3/JbEz05f7k=)
2: QwTYaLC50dQ2eOtGeufD-jv_4vg.crl (hash: doNogL6qn17spY59IeU5vJKPMg87MUNbSUE6/dwUvJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:18:96:da:93:5f:fb:24:15:37:58:cd:de:25:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4304d868b0b9d1d43678eb467ae7c3fa3bffe2f8
Validity
Not Before: Nov 4 16:00:24 2025 GMT
Not After : Nov 5 16:00:24 2025 GMT
Subject: CN=eb6a621c0542b14a7d26bceea4b9ca3b5d2fab4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:a7:20:c5:88:b1:92:da:3c:f9:18:2b:0d:
02:d2:fd:a1:32:1a:b6:45:ee:06:6e:04:d3:21:31:
6f:9d:b9:4b:1a:15:0e:ad:ac:fa:9c:29:bb:fb:da:
b3:e8:01:6a:dd:18:7d:ae:19:1f:4e:8e:d1:c6:be:
3c:f8:33:a4:5f:61:26:9a:50:cd:35:3e:8c:86:06:
32:58:95:0c:7d:64:a4:d8:35:35:db:44:e5:41:45:
2a:f2:81:7f:e3:f5:cb:16:33:d9:32:f5:a1:92:57:
1f:0d:36:8f:fb:13:c0:c5:a9:fd:06:73:16:65:1b:
33:cc:01:3a:37:4f:8a:c4:58:11:65:26:e6:4b:a0:
50:9e:90:e6:ae:63:96:f8:ee:04:3c:64:e1:6f:3e:
1f:e4:ac:ae:68:4f:fb:c9:74:37:a4:3f:78:49:8e:
ac:7b:47:bc:75:60:82:49:08:80:83:dc:6c:2c:f0:
11:a0:cf:a8:5c:ac:15:f5:4d:93:df:d4:24:c4:69:
e5:16:62:4d:f8:1a:7e:7b:9b:00:7f:0c:b1:49:1d:
a9:0b:61:64:0a:12:12:b1:c1:87:ac:a5:d1:5e:d2:
d1:19:a6:a1:de:5d:dd:51:49:1a:12:fa:cb:53:75:
45:4f:64:a4:b5:2c:eb:12:57:18:89:50:3e:61:2f:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:62:1C:05:42:B1:4A:7D:26:BC:EE:A4:B9:CA:3B:5D:2F:AB:4E
X509v3 Authority Key Identifier:
keyid:43:04:D8:68:B0:B9:D1:D4:36:78:EB:46:7A:E7:C3:FA:3B:FF:E2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwTYaLC50dQ2eOtGeufD-jv_4vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fbde29-b946-43f3-b847-1a20cdd560c2/1/QwTYaLC50dQ2eOtGeufD-jv_4vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c6:35:b1:b9:eb:c3:b0:d5:1a:b0:91:8d:03:7b:30:46:dc:
16:41:eb:f9:50:cc:1e:26:e2:36:d8:36:bd:96:50:df:db:e8:
2d:7d:53:66:d2:9b:1e:5b:d4:80:1c:5c:92:db:a0:19:db:aa:
44:dd:ed:83:99:23:c4:a2:e7:7c:5c:2d:4a:1a:a8:09:2b:d7:
dd:da:3b:a3:33:5e:8f:23:e8:ca:12:4f:7b:de:5e:53:85:92:
1b:29:8d:1c:06:50:51:29:e1:d9:61:05:25:92:04:85:c5:fa:
11:f9:0d:75:b1:1b:22:da:96:99:49:41:c9:f2:3a:e5:cb:2f:
08:dc:7c:97:20:03:74:29:49:8b:bf:b5:4d:c3:5b:db:52:c7:
f0:36:3e:e1:72:2f:bf:84:7e:cf:ef:c1:35:f6:50:ff:b2:ba:
b0:a1:c7:f5:b0:a7:28:94:30:df:c8:67:5e:fe:bb:cc:99:0b:
f6:a1:ed:95:c0:80:9c:0a:83:71:66:2d:4d:bb:1d:70:3c:3c:
40:de:8a:d9:23:84:9a:f2:77:27:75:35:fe:14:25:e5:f7:cd:
bf:8e:f6:12:cd:98:a9:12:08:d8:66:0a:98:bf:38:61:a6:83:
8c:54:f9:08:7c:53:11:e3:a3:e8:23:a3:73:a1:7b:ff:84:db:
cb:ef:6c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmRiW2pNf+yQVN1jN3iXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDRkODY4YjBiOWQxZDQzNjc4ZWI0NjdhZTdjM2ZhM2Jm
ZmUyZjgwHhcNMjUxMTA0MTYwMDI0WhcNMjUxMTA1MTYwMDI0WjAzMTEwLwYDVQQD
EyhlYjZhNjIxYzA1NDJiMTRhN2QyNmJjZWVhNGI5Y2EzYjVkMmZhYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWinIMWIsZLaPPkYKw0C0v2hMhq2
Re4GbgTTITFvnblLGhUOraz6nCm7+9qz6AFq3Rh9rhkfTo7Rxr48+DOkX2EmmlDN
NT6MhgYyWJUMfWSk2DU120TlQUUq8oF/4/XLFjPZMvWhklcfDTaP+xPAxan9BnMW
ZRszzAE6N0+KxFgRZSbmS6BQnpDmrmOW+O4EPGThbz4f5KyuaE/7yXQ3pD94SY6s
e0e8dWCCSQiAg9xsLPARoM+oXKwV9U2T39QkxGnlFmJN+Bp+e5sAfwyxSR2pC2Fk
ChISscGHrKXRXtLRGaah3l3dUUkaEvrLU3VFT2SktSzrElcYiVA+YS8S8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtqYhwFQrFKfSa87qS5yjtdL6tOMB8GA1UdIwQY
MBaAFEME2GiwudHUNnjrRnrnw/o7/+L4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDct
MWEyMGNkZDU2MGMyLzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYmRlMjktYjk0Ni00M2YzLWI4NDctMWEyMGNkZDU2MGMy
LzEvUXdUWWFMQzUwZFEyZU90R2V1ZkQtanZfNHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8Y1sbnr
w7DVGrCRjQN7MEbcFkHr+VDMHibiNtg2vZZQ39voLX1TZtKbHlvUgBxcktugGduq
RN3tg5kjxKLnfFwtShqoCSvX3do7ozNejyPoyhJPe95eU4WSGymNHAZQUSnh2WEF
JZIEhcX6EfkNdbEbItqWmUlByfI65csvCNx8lyADdClJi7+1TcNb21LH8DY+4XIv
v4R+z+/BNfZQ/7K6sKHH9bCnKJQw38hnXv67zJkL9qHtlcCAnAqDcWYtTbsdcDw8
QN6K2SOEmvJ3J3U1/hQl5ffNv472Es2YqRII2GYKmL84YaaDjFT5CHxTEeOj6COj
c6F7/4Tby+9sBg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:43 2025 by rpki-client