Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: rGooK7rCJKPDxakt997tgGCuPXXUHazQVsS+qZNnmzk=
Subject key identifier: F5:73:29:1E:E0:9B:36:4F:5B:9B:2C:3F:45:A1:17:8B:2B:88:7D:14
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 019A507526D2AE5B453D7AD8343F6C58B902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 08E8
Signing time: Tue 04 Nov 2025 20:00:46 +0000
Manifest this update: Tue 04 Nov 2025 20:00:46 +0000
Manifest next update: Wed 05 Nov 2025 20:00:46 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: z24gJNRAhK2bV2MTs+iIMrFA7Ls7/lLuM1Z1oQhfueU=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:26:d2:ae:5b:45:3d:7a:d8:34:3f:6c:58:b9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Nov 4 20:00:46 2025 GMT
Not After : Nov 5 20:00:46 2025 GMT
Subject: CN=f573291ee09b364f5b9b2c3f45a1178b2b887d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9c:20:4b:ff:07:53:a1:6b:41:f6:aa:eb:1d:
25:a2:51:e2:31:48:be:ee:3d:ac:7b:c2:0c:a2:61:
64:5c:55:a9:1f:37:c5:69:0c:79:da:ee:49:b7:2d:
dc:4b:c2:7c:18:dc:f7:13:7b:46:61:f9:eb:5b:57:
56:0e:c8:0e:13:c2:c1:2c:11:a9:a0:7c:2d:ec:8e:
d9:85:ec:1c:ef:e5:a7:d4:30:f9:1d:0c:dd:54:3e:
9f:c0:ee:54:ef:dd:28:38:2b:30:ad:99:b7:0d:b9:
68:78:6c:f5:7a:43:c4:95:b7:28:40:13:19:1a:f7:
5b:6f:2b:cc:4e:41:ad:38:9f:35:72:57:c9:9b:67:
c5:5e:2f:1e:29:ed:b9:23:59:ac:a3:08:e5:b9:d7:
31:82:9a:0a:38:08:8d:18:6a:4c:c8:24:92:8a:a1:
91:df:53:ef:1a:d9:76:2d:0d:a4:ab:63:25:b6:9c:
87:4b:a5:f0:5a:64:c9:5b:b1:08:0b:29:5a:42:a7:
32:96:dc:21:e4:7a:e4:31:1d:e3:98:87:fd:90:ab:
48:04:35:ee:ce:f6:71:b2:4b:a7:1b:dc:37:cc:7f:
c5:9d:e0:65:a0:1a:7b:4e:7a:7e:69:2a:cd:58:02:
63:a0:b4:3d:90:fb:d8:04:96:2c:ac:37:a7:7a:a5:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:29:1E:E0:9B:36:4F:5B:9B:2C:3F:45:A1:17:8B:2B:88:7D:14
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0f:fe:bd:d2:69:a5:11:c7:0a:44:0c:24:65:ab:8d:0e:4e:
19:46:f8:87:12:c7:70:26:36:d9:22:59:43:22:f1:a1:db:a4:
3b:db:66:35:f8:1f:f8:3f:5a:d6:85:6b:5c:9a:e7:c7:18:7f:
67:03:49:cb:79:43:a1:9f:fe:ec:2b:68:a8:43:d7:6e:b2:47:
cc:99:a9:3f:40:bc:a8:8e:9c:55:8e:37:de:64:94:08:01:46:
61:db:e0:49:f4:8f:e7:b9:94:2a:ad:a4:87:d4:d3:f2:f6:0b:
e9:67:92:bf:04:06:2f:db:cc:7a:69:ff:d9:95:a0:dc:f6:6a:
aa:57:23:cc:fd:8f:c7:09:36:50:f2:e7:13:93:32:bc:15:ca:
95:2b:68:df:44:cd:0a:3c:31:a9:74:e7:a4:ba:89:dc:6a:9c:
4e:6e:82:12:80:fa:c6:b7:e5:c2:59:17:25:94:39:a1:d7:6f:
ff:63:d9:cd:f4:03:ce:ae:7d:83:b3:de:18:ad:47:39:f4:bd:
cb:6e:b0:fb:e0:f8:f3:ae:43:b0:80:9f:56:cd:ed:1a:7c:2e:
80:19:63:e8:d6:54:4f:c0:c8:6e:b8:d3:8e:30:90:a3:d1:c1:
26:dd:56:ab:07:af:05:21:d0:27:20:fb:2e:c0:8f:6c:6f:fe:
5b:11:e1:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdSbSrltFPXrYND9sWLkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDMzNTBiY2M3YjU0MGZhZGVhOTUxZTA0NjA4MWQ4ZGEw
NmMxNDUwHhcNMjUxMTA0MjAwMDQ2WhcNMjUxMTA1MjAwMDQ2WjAzMTEwLwYDVQQD
EyhmNTczMjkxZWUwOWIzNjRmNWI5YjJjM2Y0NWExMTc4YjJiODg3ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JwgS/8HU6FrQfaq6x0lolHiMUi+
7j2se8IMomFkXFWpHzfFaQx52u5Jty3cS8J8GNz3E3tGYfnrW1dWDsgOE8LBLBGp
oHwt7I7Zhewc7+Wn1DD5HQzdVD6fwO5U790oOCswrZm3DbloeGz1ekPElbcoQBMZ
GvdbbyvMTkGtOJ81clfJm2fFXi8eKe25I1msowjludcxgpoKOAiNGGpMyCSSiqGR
31PvGtl2LQ2kq2MltpyHS6XwWmTJW7EICylaQqcyltwh5HrkMR3jmIf9kKtIBDXu
zvZxskunG9w3zH/FneBloBp7Tnp+aSrNWAJjoLQ9kPvYBJYsrDeneqWjPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVzKR7gmzZPW5ssP0WhF4sriH0UMB8GA1UdIwQY
MBaAFEADNQvMe1QPreqVHgRggdjaBsFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUt
Njk2YjYxNWNiZWMzLzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZDg4NzctZDA4Mi00MWVhLTlmODUtNjk2YjYxNWNiZWMz
LzEvUUFNMUM4eDdWQS10NnBVZUJHQ0IyTm9Hd1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACg/+vdJp
pRHHCkQMJGWrjQ5OGUb4hxLHcCY22SJZQyLxodukO9tmNfgf+D9a1oVrXJrnxxh/
ZwNJy3lDoZ/+7CtoqEPXbrJHzJmpP0C8qI6cVY433mSUCAFGYdvgSfSP57mUKq2k
h9TT8vYL6WeSvwQGL9vMemn/2ZWg3PZqqlcjzP2Pxwk2UPLnE5MyvBXKlSto30TN
CjwxqXTnpLqJ3GqcTm6CEoD6xrflwlkXJZQ5oddv/2PZzfQDzq59g7PeGK1HOfS9
y26w++D4865DsICfVs3tGnwugBlj6NZUT8DIbrjTjjCQo9HBJt1WqwevBSHQJyD7
LsCPbG/+WxHhcA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:29 2025 by rpki-client