Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json)
Hash identifier: V+lbPqTg9Zneq6M2BaY0hKS0TYXu73eCwgeHGtfRyGA=
Subject key identifier: 6A:BD:B0:52:1D:5D:91:C5:CB:62:7A:3E:79:2C:06:DA:F5:51:A9:8B
Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Certificate serial: 019A4FCFD60AF4A20406B70F3878028FB8C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
Manifest number: 0669
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: UHon8mZVCYWe4bReDAMxY85oWoKjoPXkqTg/V9ROE1c=)
2: ekPIeumjzc0aQ-0qnlrmTiVhDJI.roa (hash: MI/BYhVlkTAuExjmOk0h+DG2/B/CqzwrvfdzA0OS10s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d6:0a:f4:a2:04:06:b7:0f:38:78:02:8f:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=6abdb0521d5d91c5cb627a3e792c06daf551a98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:7c:83:7c:a7:d3:c8:30:1f:76:7c:48:f2:
fa:ad:df:3f:16:9a:55:3b:1d:71:7f:5d:b3:2d:f5:
68:1b:04:9f:a4:8d:1f:57:ef:b4:bb:c2:76:ab:12:
dc:35:68:ff:a7:7e:28:cf:d2:67:c7:09:2a:e6:19:
10:b2:d6:24:e2:40:c1:35:fa:af:e9:d9:d5:b6:66:
ff:9e:02:1b:ac:39:26:c0:aa:d2:55:66:18:46:eb:
53:0f:b9:27:a5:41:a5:7a:d7:77:69:4c:95:a9:26:
40:44:a2:c3:5a:34:22:16:aa:f5:c3:2f:65:2f:c9:
aa:13:e9:13:08:3f:96:d5:8b:78:09:00:de:01:50:
b0:b8:f7:f2:ae:c0:b1:69:a5:f1:46:99:c3:a9:75:
eb:60:5a:87:70:05:d5:d4:8a:93:47:8b:84:79:d7:
b9:08:1d:79:87:ee:78:13:19:9e:58:6d:8a:eb:ec:
fa:da:c5:2a:8e:b7:5d:eb:f6:62:82:6a:84:b3:49:
85:45:84:60:9e:74:40:56:7b:4e:bf:68:87:18:02:
7e:4d:a0:4a:9c:75:df:1e:be:d5:b1:53:f3:2c:67:
04:43:ad:d7:f4:92:49:c3:69:0c:93:6a:70:98:bb:
48:f6:04:a6:be:b5:14:2f:6b:0d:8b:57:fd:2f:ae:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BD:B0:52:1D:5D:91:C5:CB:62:7A:3E:79:2C:06:DA:F5:51:A9:8B
X509v3 Authority Key Identifier:
keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:13:e9:a8:37:ae:80:bc:9f:2b:3f:f4:29:6b:bf:bb:f8:d4:
e0:62:bf:db:63:c3:ac:db:26:dd:cb:6a:69:bc:fe:6d:91:56:
79:c8:72:67:73:0f:df:26:57:97:8a:95:02:df:79:5b:92:6e:
71:6b:40:67:75:06:81:96:55:4e:16:12:4b:3b:e4:c3:e6:5b:
00:5c:da:3b:9f:04:57:f8:d8:db:1a:ad:c5:47:cf:f5:c0:43:
85:76:ee:d8:42:ef:98:30:69:8c:e6:65:01:34:91:dc:69:0c:
31:e2:c8:a1:f9:36:71:eb:4c:2e:60:24:81:a8:cb:2f:36:51:
5e:a6:c9:32:ce:95:e2:e5:e5:83:2f:bf:85:74:ac:a5:8c:ea:
e9:7f:da:c7:34:48:98:82:ea:e9:b9:87:d8:0e:b5:b1:a7:42:
63:67:9d:e3:15:00:56:b6:e7:8a:93:8f:b6:1c:0e:12:75:fb:
17:0b:ef:47:2a:fb:1d:57:d3:ec:85:29:19:7e:dc:c0:65:e0:
84:55:b8:ca:49:a4:eb:43:38:c8:fe:89:25:48:7b:55:eb:96:
cf:b5:a1:8b:7e:aa:44:f0:dd:bb:f6:2d:ed:6a:3a:82:54:43:
2f:c6:57:9c:08:7a:82:6e:dc:23:a9:ad:33:5e:50:1f:cc:42:
16:6a:ba:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz9YK9KIEBrcPOHgCj7jEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTZlMGNiMzhjZDYxMjVjZWUxNGU0OTcyMjhiODQ5MGEx
ZDQwZTkwHhcNMjUxMTA0MTcwMDEyWhcNMjUxMTA1MTcwMDEyWjAzMTEwLwYDVQQD
Eyg2YWJkYjA1MjFkNWQ5MWM1Y2I2MjdhM2U3OTJjMDZkYWY1NTFhOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnd8g3yn08gwH3Z8SPL6rd8/FppV
Ox1xf12zLfVoGwSfpI0fV++0u8J2qxLcNWj/p34oz9Jnxwkq5hkQstYk4kDBNfqv
6dnVtmb/ngIbrDkmwKrSVWYYRutTD7knpUGletd3aUyVqSZARKLDWjQiFqr1wy9l
L8mqE+kTCD+W1Yt4CQDeAVCwuPfyrsCxaaXxRpnDqXXrYFqHcAXV1IqTR4uEede5
CB15h+54ExmeWG2K6+z62sUqjrdd6/ZigmqEs0mFRYRgnnRAVntOv2iHGAJ+TaBK
nHXfHr7VsVPzLGcEQ63X9JJJw2kMk2pwmLtI9gSmvrUUL2sNi1f9L64jeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGq9sFIdXZHFy2J6PnksBtr1UamLMB8GA1UdIwQY
MBaAFEJW4Ms4zWElzuFOSXIouEkKHUDpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEt
YTVlODUwYjZhMWJjLzEvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9jMzE0ZjQtYjFhYy00MjZmLThmMjEtYTVlODUwYjZhMWJj
LzEvUWxiZ3l6ak5ZU1hPNFU1SmNpaTRTUW9kUU9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhPpqDeu
gLyfKz/0KWu/u/jU4GK/22PDrNsm3ctqabz+bZFWechyZ3MP3yZXl4qVAt95W5Ju
cWtAZ3UGgZZVThYSSzvkw+ZbAFzaO58EV/jY2xqtxUfP9cBDhXbu2ELvmDBpjOZl
ATSR3GkMMeLIofk2cetMLmAkgajLLzZRXqbJMs6V4uXlgy+/hXSspYzq6X/axzRI
mILq6bmH2A61sadCY2ed4xUAVrbnipOPthwOEnX7FwvvRyr7HVfT7IUpGX7cwGXg
hFW4ykmk60M4yP6JJUh7VeuWz7Whi36qRPDdu/Yt7Wo6glRDL8ZXnAh6gm7cI6mt
M15QH8xCFmq6kA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:54 2025 by rpki-client