Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier: M91WJwRHC8GKncABPofJuatcfWmAT/2BrZM7tlLS5ww=
Subject key identifier: 02:9B:7E:35:3D:D8:C1:F4:EF:E0:95:54:EB:7E:4B:79:5E:FB:79:D1
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial: 019A50E351109C8B35CD96260CD651A073D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number: 0DE4
Signing time: Tue 04 Nov 2025 22:01:05 +0000
Manifest this update: Tue 04 Nov 2025 22:01:05 +0000
Manifest next update: Wed 05 Nov 2025 22:01:05 +0000
Files and hashes: 1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: 5RnUv4wC1NwGVIWa/DrUKwGgTpEJFZ4zfwXYVLOJP0Q=)
2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:51:10:9c:8b:35:cd:96:26:0c:d6:51:a0:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Validity
Not Before: Nov 4 22:01:05 2025 GMT
Not After : Nov 5 22:01:05 2025 GMT
Subject: CN=029b7e353dd8c1f4efe09554eb7e4b795efb79d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:24:91:fa:cd:ef:43:e9:c7:33:56:55:29:
7c:9b:ff:0f:fa:bb:c6:8c:4a:4e:ad:d2:ab:c9:a0:
84:bd:f5:d1:fd:1b:96:a4:9f:8e:f6:d0:c1:13:c7:
9e:11:12:eb:5f:fc:e9:d2:10:6f:be:07:95:0c:46:
40:8c:d2:1f:9f:ed:39:9a:61:0c:aa:6e:ee:3c:97:
ad:08:c5:06:dd:ae:f5:16:89:ed:34:be:b5:af:00:
39:34:d8:c8:a1:4b:6e:95:31:f4:62:f0:1c:f6:94:
4e:74:a7:07:6f:e7:81:b7:57:f5:8e:a3:43:8c:55:
6e:91:67:21:43:eb:c1:38:74:03:7a:eb:c2:a0:3d:
14:78:d6:db:db:32:9a:37:46:ce:e1:e3:04:8f:b0:
0f:a7:2d:5d:bb:34:59:75:4b:77:51:2c:57:f6:a4:
50:15:02:d7:b5:63:71:c9:15:ec:aa:35:a8:50:37:
fb:db:24:c6:6f:a3:2c:c3:e7:75:77:94:ce:b7:9c:
b7:a4:5c:a9:8b:90:9d:22:a4:79:c3:20:3a:d3:c8:
55:0a:c9:61:96:de:9f:d7:27:64:6b:22:ec:7f:38:
ed:87:da:a3:18:0e:ae:de:13:eb:a3:22:2a:fe:9c:
42:f4:74:f8:47:eb:56:40:6b:d2:2e:28:40:8f:27:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9B:7E:35:3D:D8:C1:F4:EF:E0:95:54:EB:7E:4B:79:5E:FB:79:D1
X509v3 Authority Key Identifier:
keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:8e:15:24:7f:ec:5d:a3:d7:c7:7d:cb:10:7c:5f:de:58:
60:9c:dc:6d:ad:7d:3a:0c:87:8e:7d:a2:64:f2:52:2b:36:43:
46:ba:e2:d3:b4:49:2b:54:77:b2:fb:ae:ce:a6:1b:e6:f4:25:
ed:a7:c0:13:39:02:ee:b9:37:00:2c:24:b0:21:5b:1a:e1:3c:
36:97:a5:eb:e1:78:aa:5a:8a:77:9c:71:5c:23:41:34:9c:24:
08:4a:39:78:af:15:9e:ca:3d:58:d7:a0:17:04:33:cc:45:b4:
ba:8c:c3:1c:b5:a8:af:0e:4d:f1:d7:11:02:b4:e8:12:7a:2f:
a6:0c:22:24:3f:1a:81:26:96:f6:39:de:72:75:34:3d:6d:18:
71:85:71:b5:ac:25:ab:39:62:55:0e:19:69:5d:9f:fd:70:99:
ad:2a:41:51:37:4a:63:bc:b8:b4:00:87:18:c0:03:18:57:a3:
c0:61:51:7b:4e:a9:2e:4a:4a:9f:1b:cd:dd:a6:7b:02:b4:c2:
2c:70:ff:29:af:f2:29:0e:25:54:da:94:c2:4f:b6:d5:1a:4f:
c1:80:c3:7c:62:0e:f5:54:0d:8e:d1:46:09:80:81:af:70:5c:
df:3b:42:77:76:11:a1:3d:6b:64:fd:0c:6f:52:13:f9:fc:c8:
87:18:30:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ41EQnIs1zZYmDNZRoHPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjAwMzAwZWVlZDVhZjVkN2ZjMDlkOGZjMTU4YjY1OTM1
ZWQwNTcwHhcNMjUxMTA0MjIwMTA1WhcNMjUxMTA1MjIwMTA1WjAzMTEwLwYDVQQD
EygwMjliN2UzNTNkZDhjMWY0ZWZlMDk1NTRlYjdlNGI3OTVlZmI3OWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WgkkfrN70PpxzNWVSl8m/8P+rvG
jEpOrdKryaCEvfXR/RuWpJ+O9tDBE8eeERLrX/zp0hBvvgeVDEZAjNIfn+05mmEM
qm7uPJetCMUG3a71FontNL61rwA5NNjIoUtulTH0YvAc9pROdKcHb+eBt1f1jqND
jFVukWchQ+vBOHQDeuvCoD0UeNbb2zKaN0bO4eMEj7APpy1duzRZdUt3USxX9qRQ
FQLXtWNxyRXsqjWoUDf72yTGb6Msw+d1d5TOt5y3pFypi5CdIqR5wyA608hVCslh
lt6f1ydkayLsfzjth9qjGA6u3hProyIq/pxC9HT4R+tWQGvSLihAjyd+ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKbfjU92MH07+CVVOt+S3le+3nRMB8GA1UdIwQY
MBaAFEFgAwDu7Vr11/wJ2PwVi2WTXtBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGZkZDgtMDRkZC00YTIyLTg0MTAt
N2Q3OWMwNzE3M2Y0LzEvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NGZkZDgtMDRkZC00YTIyLTg0MTAtN2Q3OWMwNzE3M2Y0
LzEvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+mOFSR/
7F2j18d9yxB8X95YYJzcba19OgyHjn2iZPJSKzZDRrri07RJK1R3svuuzqYb5vQl
7afAEzkC7rk3ACwksCFbGuE8Npel6+F4qlqKd5xxXCNBNJwkCEo5eK8Vnso9WNeg
FwQzzEW0uozDHLWorw5N8dcRArToEnovpgwiJD8agSaW9jnecnU0PW0YcYVxtawl
qzliVQ4ZaV2f/XCZrSpBUTdKY7y4tACHGMADGFejwGFRe06pLkpKnxvN3aZ7ArTC
LHD/Ka/yKQ4lVNqUwk+21RpPwYDDfGIO9VQNjtFGCYCBr3Bc3ztCd3YRoT1rZP0M
b1IT+fzIhxgwNw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:05:51 2025 by rpki-client