Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: nlbNZlFTisNyjj/aQfPUVdsv6Pu/wAmuwL4RMcKqPbQ=
Subject key identifier: A1:4F:91:2C:AD:91:FC:F8:6C:22:9A:2F:10:A0:33:FF:AF:89:31:12
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 019A4DAAA966CE69B88BB10F49B0AEC30394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 07:00:21 +0000
Manifest this update: Tue 04 Nov 2025 07:00:21 +0000
Manifest next update: Wed 05 Nov 2025 07:00:21 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: Osx6KA3Nr/IzuUzi1bO9KcRE7u1PLlCe90ugxp8Ouq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a9:66:ce:69:b8:8b:b1:0f:49:b0:ae:c3:03:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Nov 4 07:00:21 2025 GMT
Not After : Nov 5 07:00:21 2025 GMT
Subject: CN=a14f912cad91fcf86c229a2f10a033ffaf893112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:87:14:f0:08:31:97:4c:a0:33:9d:26:66:
db:6e:e2:19:7b:d6:e6:92:47:3c:da:c1:e1:2c:45:
00:78:ef:33:0f:f6:36:d3:0e:37:bc:9e:0b:18:a8:
59:3a:43:cc:e1:cc:4b:2c:ed:f4:e2:c4:d0:3f:3e:
70:6f:b6:12:d7:b0:8c:f9:22:41:b4:58:af:f4:4d:
b7:9d:0e:df:f8:9a:9c:2d:95:06:67:e2:da:80:ac:
f5:ce:6c:54:57:18:10:9d:bf:31:6b:69:bc:1f:e5:
d2:4c:70:0e:0d:07:de:a4:47:6e:67:e7:ed:66:c4:
99:62:23:f6:db:e2:39:d6:9f:27:de:9d:d7:82:f9:
8e:f2:63:cc:d9:69:30:0e:c9:75:87:c0:e6:1d:67:
ba:01:b6:eb:c0:33:e3:3a:0d:ec:32:1b:b7:06:46:
6a:78:fd:34:25:27:26:f6:7c:d1:b8:42:c7:16:a1:
d6:a5:63:48:91:51:b7:ea:55:5e:25:2e:35:3b:51:
d9:90:d3:d6:9a:5c:34:01:3e:65:41:05:41:94:33:
0a:24:4c:57:c6:ba:57:f0:1e:ce:4d:96:0e:c7:8d:
ff:30:9b:e9:30:2b:7a:5d:9e:1c:c1:9b:aa:44:63:
22:8c:be:c2:09:9a:f4:51:b1:69:b4:1f:97:9d:28:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:91:2C:AD:91:FC:F8:6C:22:9A:2F:10:A0:33:FF:AF:89:31:12
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d5:94:0c:64:42:60:14:74:c4:0c:d0:2e:7e:c0:53:ad:a0:
70:65:f9:58:70:32:9b:99:c3:c3:9b:15:88:d8:07:51:c4:57:
c5:99:2e:f5:df:57:c0:17:fa:69:00:b8:09:2b:71:10:91:e3:
e6:99:4f:4e:c4:b0:cc:7c:87:ac:cc:e8:35:e3:f8:8d:ea:a7:
d6:09:5e:8c:fa:77:e3:6f:13:40:4a:b1:37:03:11:db:19:4d:
53:29:23:14:33:c8:40:85:3a:21:ed:ff:ad:93:d1:23:3b:d1:
3a:a9:0f:ce:03:34:29:fb:c9:15:e6:ac:13:64:91:45:df:a0:
5e:81:4f:d8:12:02:f2:4e:1a:26:af:93:28:ca:ab:d5:13:d4:
3f:3d:50:8f:7b:09:f7:44:a7:cc:2c:cc:bc:b7:a2:8a:86:79:
4d:aa:34:7a:b4:7d:54:89:08:30:1f:a3:fb:bb:22:8b:31:fd:
e9:ff:b3:a1:58:83:eb:5f:28:07:78:6e:43:66:bb:f1:b9:ef:
3c:17:39:a4:ed:9b:e7:31:ad:d4:d6:db:c1:69:f8:8f:1f:71:
05:75:24:5f:5f:4e:1c:18:26:0e:b2:35:97:39:91:d0:82:91:
7d:03:7d:d6:dd:03:39:86:a1:ba:c3:a9:76:a6:24:27:d2:3c:
b6:e0:47:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqqlmzmm4i7EPSbCuwwOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2ExYTFlM2QwOTI1NDIzMzEwYzE1NGI1MDJjMjg0Mjg4
OGU2MTIwHhcNMjUxMTA0MDcwMDIxWhcNMjUxMTA1MDcwMDIxWjAzMTEwLwYDVQQD
EyhhMTRmOTEyY2FkOTFmY2Y4NmMyMjlhMmYxMGEwMzNmZmFmODkzMTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyWHFPAIMZdMoDOdJmbbbuIZe9bm
kkc82sHhLEUAeO8zD/Y20w43vJ4LGKhZOkPM4cxLLO304sTQPz5wb7YS17CM+SJB
tFiv9E23nQ7f+JqcLZUGZ+LagKz1zmxUVxgQnb8xa2m8H+XSTHAODQfepEduZ+ft
ZsSZYiP22+I51p8n3p3XgvmO8mPM2WkwDsl1h8DmHWe6AbbrwDPjOg3sMhu3BkZq
eP00JScm9nzRuELHFqHWpWNIkVG36lVeJS41O1HZkNPWmlw0AT5lQQVBlDMKJExX
xrpX8B7OTZYOx43/MJvpMCt6XZ4cwZuqRGMijL7CCZr0UbFptB+XnSi3NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFPkSytkfz4bCKaLxCgM/+viTESMB8GA1UdIwQY
MBaAFELKGh49CSVCMxDBVLUCwoQoiOYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEt
NDM2YmZiOWU3N2VkLzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85MmI4YWUtOWMwOS00NDNjLWI4YmEtNDM2YmZiOWU3N2Vk
LzEvUXNvYUhqMEpKVUl6RU1GVXRRTENoQ2lJNWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEtWUDGRC
YBR0xAzQLn7AU62gcGX5WHAym5nDw5sViNgHUcRXxZku9d9XwBf6aQC4CStxEJHj
5plPTsSwzHyHrMzoNeP4jeqn1glejPp3428TQEqxNwMR2xlNUykjFDPIQIU6Ie3/
rZPRIzvROqkPzgM0KfvJFeasE2SRRd+gXoFP2BIC8k4aJq+TKMqr1RPUPz1Qj3sJ
90SnzCzMvLeiioZ5Tao0erR9VIkIMB+j+7siizH96f+zoViD618oB3huQ2a78bnv
PBc5pO2b5zGt1NbbwWn4jx9xBXUkX19OHBgmDrI1lzmR0IKRfQN91t0DOYahusOp
dqYkJ9I8tuBHkg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:32 2025 by rpki-client