Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: tmhxWftLZwlAWY4OqnpjQgHcWSVwiVnLSp0dtGVo8y0=
Subject key identifier: 67:DA:73:5E:71:8D:92:B7:E4:FF:F2:84:BD:AD:38:C2:79:2D:E4:84
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 019A4F62C91B896677B52F738C20952C7EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:01:05 +0000
Manifest this update: Tue 04 Nov 2025 15:01:05 +0000
Manifest next update: Wed 05 Nov 2025 15:01:05 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: QgjxWly+gxM9yaIugRhMKQu1otK/5DXxIy1MCgNIZS0=)
2: osrkqaQb3qx2EG4vPDrSx-jUbRs.roa (hash: 60lpTHLn4dLpnmjc421kdUFig6Uy9lDHTrD8OxkZHo4=)
3: xkbe7-bpi_soiL6y9FjVY-pZjq4.roa (hash: DD/O2GJZO7TOSqwXXJo222/YwW4YcV/75ci14nBdOpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:c9:1b:89:66:77:b5:2f:73:8c:20:95:2c:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Nov 4 15:01:05 2025 GMT
Not After : Nov 5 15:01:05 2025 GMT
Subject: CN=67da735e718d92b7e4fff284bdad38c2792de484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:89:6c:9f:57:75:8e:c3:6c:67:35:d0:d5:
ef:1e:0d:2e:04:18:dd:6f:e9:34:7d:ee:2d:0a:29:
5f:3f:98:71:3f:72:f0:03:0f:aa:9b:0c:65:94:e5:
42:95:05:ff:01:3a:7f:3a:31:7c:67:2e:7c:11:b3:
76:f4:67:74:3e:6c:89:0b:a6:c4:79:33:03:5a:0f:
fe:0b:ab:fc:4c:9d:3e:1d:ad:33:88:81:43:0b:27:
d4:bd:f2:fb:0d:0c:6f:44:91:37:a8:20:40:4a:6a:
8f:40:50:96:46:f3:b7:34:5f:f8:d9:3a:d4:40:74:
2a:1b:37:4d:c4:85:49:7b:bf:bf:cb:2d:93:bf:64:
6a:23:df:e8:c9:b8:e1:cf:e2:9b:b9:97:e2:78:e3:
56:1f:92:01:98:68:88:df:1d:0e:c6:72:c6:7b:2c:
e7:21:f7:2d:b3:e5:9a:3a:6b:83:3a:8a:d0:2a:b7:
ad:72:58:6c:98:ab:80:5e:f1:86:0d:94:f7:39:f0:
93:9b:94:22:e8:0b:42:c9:33:09:65:db:54:67:7c:
2c:61:9b:54:45:5f:32:ca:be:a0:20:80:ef:e9:32:
3a:fc:e3:dc:05:87:69:a8:1f:3e:4d:28:97:8e:a7:
a5:e5:00:b5:5f:3b:27:e2:4b:53:47:bc:8e:df:f1:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:73:5E:71:8D:92:B7:E4:FF:F2:84:BD:AD:38:C2:79:2D:E4:84
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:50:a1:a7:d0:7f:65:d0:f7:43:ea:89:05:bc:4d:d3:36:1a:
c4:b8:72:d4:ec:ba:a2:97:ed:9a:26:8b:c8:44:50:5c:37:69:
52:c3:3e:d0:9b:7a:7f:73:a0:5d:b9:90:77:a8:e6:fe:12:0b:
19:c6:cd:9a:85:38:34:cc:aa:40:4c:c4:9a:cc:24:30:5b:cd:
88:4f:b2:ef:13:01:57:74:df:eb:6d:b5:58:31:6b:cd:3c:4f:
2b:29:ec:83:28:b3:81:f0:f2:db:63:cc:b3:6d:ef:b6:41:33:
90:66:c8:be:6e:44:cb:b7:8f:e5:ae:fe:ff:7e:d5:5b:f1:90:
e4:1a:1a:90:27:75:c5:d6:5e:b0:31:d4:a5:62:63:e7:a2:ce:
ec:1b:df:46:4f:cb:d9:53:aa:ad:d0:50:b2:8d:35:75:fd:02:
81:7c:00:b0:5c:0c:65:4c:37:a7:60:57:e8:65:f1:5a:66:cd:
85:68:6c:9d:18:f8:c5:94:18:7f:03:49:7e:fe:22:d4:ee:35:
b4:79:1f:5a:20:02:6a:50:ea:9e:8f:3a:96:09:e2:ef:80:50:
4c:a6:dd:f9:f2:50:44:f5:5f:2b:cc:c9:72:50:96:dc:b6:a1:
bb:72:86:10:b4:61:9b:62:97:7e:26:43:82:28:ed:ed:c1:8e:
33:a0:58:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYskbiWZ3tS9zjCCVLH7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3
OTBjZjcwHhcNMjUxMTA0MTUwMTA1WhcNMjUxMTA1MTUwMTA1WjAzMTEwLwYDVQQD
Eyg2N2RhNzM1ZTcxOGQ5MmI3ZTRmZmYyODRiZGFkMzhjMjc5MmRlNDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXyJbJ9XdY7DbGc10NXvHg0uBBjd
b+k0fe4tCilfP5hxP3LwAw+qmwxllOVClQX/ATp/OjF8Zy58EbN29Gd0PmyJC6bE
eTMDWg/+C6v8TJ0+Ha0ziIFDCyfUvfL7DQxvRJE3qCBASmqPQFCWRvO3NF/42TrU
QHQqGzdNxIVJe7+/yy2Tv2RqI9/oybjhz+KbuZfieONWH5IBmGiI3x0OxnLGeyzn
Ifcts+WaOmuDOorQKretclhsmKuAXvGGDZT3OfCTm5Qi6AtCyTMJZdtUZ3wsYZtU
RV8yyr6gIIDv6TI6/OPcBYdpqB8+TSiXjqel5QC1Xzsn4ktTR7yO3/EBFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfac15xjZK35P/yhL2tOMJ5LeSEMB8GA1UdIwQY
MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt
N2YyMGVmMDJmMjY0LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0
LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVChp9B/
ZdD3Q+qJBbxN0zYaxLhy1Oy6opftmiaLyERQXDdpUsM+0Jt6f3OgXbmQd6jm/hIL
GcbNmoU4NMyqQEzEmswkMFvNiE+y7xMBV3Tf6221WDFrzTxPKynsgyizgfDy22PM
s23vtkEzkGbIvm5Ey7eP5a7+/37VW/GQ5BoakCd1xdZesDHUpWJj56LO7BvfRk/L
2VOqrdBQso01df0CgXwAsFwMZUw3p2BX6GXxWmbNhWhsnRj4xZQYfwNJfv4i1O41
tHkfWiACalDqno86lgni74BQTKbd+fJQRPVfK8zJclCW3Lahu3KGELRhm2KXfiZD
gijt7cGOM6BYVw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:03 2025 by rpki-client