Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
File: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft (raw, json)
Hash identifier: Lcrf4Q9TccStlofnf2I/nyIWLfGKZTKDwTBorJFjoxo=
Subject key identifier: B7:FD:2A:F3:F2:C6:F2:5F:0A:B6:E1:73:03:A1:3C:2D:EB:D2:A0:13
Authority key identifier: 41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
Certificate issuer: /CN=41cede907492e50c951263957881bc3cc5ce30ae
Certificate serial: 019A51F573687EAA2E61A890739E224CD0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 03:00:31 +0000
Manifest this update: Wed 05 Nov 2025 03:00:31 +0000
Manifest next update: Thu 06 Nov 2025 03:00:31 +0000
Files and hashes: 1: 8cg6ls0eHu6-sPH76NoZH2FkNOI.roa (hash: 7HXBEdZlw4igKW3gOd2YE5Q8LK/5FqBXGlSg1vYH3n8=)
2: Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl (hash: cI+JJF8FX3CZQYP0zBlWCSbXaxZnRgSCKln3sqstcD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:73:68:7e:aa:2e:61:a8:90:73:9e:22:4c:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cede907492e50c951263957881bc3cc5ce30ae
Validity
Not Before: Nov 5 03:00:31 2025 GMT
Not After : Nov 6 03:00:31 2025 GMT
Subject: CN=b7fd2af3f2c6f25f0ab6e17303a13c2debd2a013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:62:c9:33:59:6e:d6:34:c5:c6:cd:45:85:52:
90:ed:e5:85:82:43:79:1d:fb:a1:f3:d7:17:f1:f8:
ed:d1:3d:15:cc:dc:20:bc:ad:54:c4:52:dc:1e:fb:
33:47:4e:1b:91:e4:d8:0b:d4:69:a0:e0:e4:3a:5c:
1c:d1:85:c5:f5:e4:f4:66:81:e8:6b:8a:04:bd:ed:
d9:c3:a4:3a:73:d8:80:ba:72:a4:5e:27:79:a3:a3:
52:14:a1:a1:9a:e8:52:4b:88:78:13:6e:22:d3:81:
1d:c6:0a:8c:00:f0:8a:0a:56:8d:31:c3:8e:68:fc:
9c:b7:13:b1:3a:bd:e6:e5:e4:52:00:8b:15:3a:89:
d0:5f:30:98:85:bf:53:55:3c:58:c2:4a:f7:2a:03:
5e:d8:c9:f6:d6:f0:0d:8f:1c:e4:77:db:2d:8a:71:
b8:df:63:68:ef:10:ba:0f:c5:90:bd:96:5a:05:01:
26:29:98:22:0a:86:ec:a2:60:e8:b8:0f:0d:86:0f:
4f:89:02:8d:4c:40:bf:06:d4:65:21:59:1e:f9:11:
5d:49:e4:f5:d7:ab:df:77:de:a7:e5:c4:c4:59:15:
4a:e2:50:bd:51:0e:da:90:57:4c:9d:68:a6:09:4e:
8e:91:fc:3d:e9:a3:d0:1a:5f:3c:4c:b3:56:7e:b2:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FD:2A:F3:F2:C6:F2:5F:0A:B6:E1:73:03:A1:3C:2D:EB:D2:A0:13
X509v3 Authority Key Identifier:
keyid:41:CE:DE:90:74:92:E5:0C:95:12:63:95:78:81:BC:3C:C5:CE:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ca9cc3-7537-4c6a-a028-70af5f6573b5/1/Qc7ekHSS5QyVEmOVeIG8PMXOMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:85:a3:a8:a5:40:b1:15:2e:02:7e:4b:00:9e:38:9a:e5:01:
18:a8:ac:2c:c1:47:30:89:2d:02:67:6b:43:0e:69:c6:ea:1a:
e8:0c:ef:d3:ad:02:c6:c8:9e:c1:4f:70:fa:d5:5a:a6:2e:35:
e9:da:ab:40:87:b0:20:b8:b9:a9:cd:36:e1:fc:1b:69:d4:93:
30:36:87:39:93:cb:11:16:ff:a3:d6:8d:f8:b2:97:00:f5:21:
bb:0d:90:08:18:83:fd:c1:d1:06:12:66:ff:b7:3d:5b:74:58:
b2:82:32:a3:13:01:f1:d2:d1:30:5d:96:43:55:45:10:67:4d:
3c:d6:06:a1:a9:6b:05:24:f8:3d:75:f9:75:0a:80:11:20:4a:
42:60:6d:6d:ae:18:1b:03:f1:0a:59:0c:4b:aa:2b:2c:d2:11:
13:60:e1:72:cd:60:79:26:1f:fc:13:e4:6e:33:90:ad:42:c2:
cc:21:6c:a3:ae:19:a6:ad:8c:82:32:42:ef:98:49:34:1a:34:
75:8f:55:a0:9f:1b:a9:eb:d2:0f:70:a9:b2:69:f3:15:3d:d7:
0c:df:25:d4:70:75:f6:25:51:8e:c4:64:4b:3f:35:e2:44:b8:
4d:8b:95:d6:30:01:52:9b:78:a1:d3:59:d0:9b:a8:5c:10:fa:
a3:64:4f:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9XNofqouYaiQc54iTNDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxY2VkZTkwNzQ5MmU1MGM5NTEyNjM5NTc4ODFiYzNjYzVj
ZTMwYWUwHhcNMjUxMTA1MDMwMDMxWhcNMjUxMTA2MDMwMDMxWjAzMTEwLwYDVQQD
EyhiN2ZkMmFmM2YyYzZmMjVmMGFiNmUxNzMwM2ExM2MyZGViZDJhMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GLJM1lu1jTFxs1FhVKQ7eWFgkN5
Hfuh89cX8fjt0T0VzNwgvK1UxFLcHvszR04bkeTYC9RpoODkOlwc0YXF9eT0ZoHo
a4oEve3Zw6Q6c9iAunKkXid5o6NSFKGhmuhSS4h4E24i04EdxgqMAPCKClaNMcOO
aPyctxOxOr3m5eRSAIsVOonQXzCYhb9TVTxYwkr3KgNe2Mn21vANjxzkd9stinG4
32No7xC6D8WQvZZaBQEmKZgiCobsomDouA8Nhg9PiQKNTEC/BtRlIVke+RFdSeT1
16vfd96n5cTEWRVK4lC9UQ7akFdMnWimCU6Okfw96aPQGl88TLNWfrKfjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLf9KvPyxvJfCrbhcwOhPC3r0qATMB8GA1UdIwQY
MBaAFEHO3pB0kuUMlRJjlXiBvDzFzjCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgt
NzBhZjVmNjU3M2I1LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9jYTljYzMtNzUzNy00YzZhLWEwMjgtNzBhZjVmNjU3M2I1
LzEvUWM3ZWtIU1M1UXlWRW1PVmVJRzhQTVhPTUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioWjqKVA
sRUuAn5LAJ44muUBGKisLMFHMIktAmdrQw5pxuoa6Azv060CxsiewU9w+tVapi41
6dqrQIewILi5qc024fwbadSTMDaHOZPLERb/o9aN+LKXAPUhuw2QCBiD/cHRBhJm
/7c9W3RYsoIyoxMB8dLRMF2WQ1VFEGdNPNYGoalrBST4PXX5dQqAESBKQmBtba4Y
GwPxClkMS6orLNIRE2Dhcs1geSYf/BPkbjOQrULCzCFso64Zpq2MgjJC75hJNBo0
dY9VoJ8bqevSD3CpsmnzFT3XDN8l1HB19iVRjsRkSz814kS4TYuV1jABUpt4odNZ
0JuoXBD6o2RP2A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:30 2025 by rpki-client