Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
File: Q1QWsigrRTPDUJwY6VfODINryDc.mft (raw, json)
Hash identifier: QrBCKm5lxuDzG9ci2LDNJtfaFmHDNJqrlbKoYcIvyV0=
Subject key identifier: 0C:82:E2:E6:98:04:3D:FE:F6:15:D6:CC:FB:7F:2B:F0:12:CB:0D:40
Authority key identifier: 43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
Certificate issuer: /CN=435416b2282b4533c3509c18e957ce0c836bc837
Certificate serial: 019A4F2B8B3729CCD5923B81696D0099EC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
Manifest number: 0EFC
Signing time: Tue 04 Nov 2025 14:00:44 +0000
Manifest this update: Tue 04 Nov 2025 14:00:44 +0000
Manifest next update: Wed 05 Nov 2025 14:00:44 +0000
Files and hashes: 1: Q1QWsigrRTPDUJwY6VfODINryDc.crl (hash: SBGMS3zGAKpbWn8mBnJjcHuJndUvyyvPFWs5vENF8zY=)
2: Tt9cDnLqp2SOeeoElhH21A1JSmo.roa (hash: g7FEq0smlg0TkkjLfygzTEzTD8KkWT+7GvQHUxPqdJo=)
3: pSYXiKXGXABhmANIG0Y2vhGLRUA.roa (hash: kjXcWabBcy+Nz9B+eKiIbdHIvrnXu/XwD/9ZftdegXw=)
4: uJ1wgWjtfF_PUvxzUj8noSaLQx0.roa (hash: 5K3mYspcTrH8J1dlAJJG2SBHWuIALi8AQG16SYzuq8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:8b:37:29:cc:d5:92:3b:81:69:6d:00:99:ec:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435416b2282b4533c3509c18e957ce0c836bc837
Validity
Not Before: Nov 4 14:00:44 2025 GMT
Not After : Nov 5 14:00:44 2025 GMT
Subject: CN=0c82e2e698043dfef615d6ccfb7f2bf012cb0d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:08:8f:b9:7e:86:13:9d:b1:dd:ef:c3:48:
d9:41:d6:d9:df:2e:1e:7b:d1:b9:fa:4d:bd:e0:13:
c8:1e:21:66:bc:66:a6:5a:b6:d2:de:29:d1:e6:1d:
44:dc:d8:87:1d:8b:b3:44:84:0a:d7:ee:b6:58:32:
96:ce:8d:d9:53:26:bf:a5:90:d1:af:52:19:4f:11:
3f:a8:56:19:48:5a:71:4a:4f:2e:a0:6c:48:6e:17:
91:ae:8f:77:8d:fd:96:f1:27:9f:59:18:49:a0:79:
82:83:8b:a1:7a:02:d7:b9:89:3b:84:03:e8:19:fc:
b7:53:46:4e:49:8f:ee:09:43:8e:53:11:2a:4e:28:
f6:3c:34:9e:d2:78:3a:96:86:56:99:48:ce:c2:14:
7f:9c:88:f4:2f:5a:11:bf:99:51:b7:5d:72:9b:a6:
c0:95:0d:f2:9d:f4:4e:18:0e:cd:a1:a5:9c:35:d5:
5b:7f:d3:c5:84:cf:2f:46:79:27:85:6a:0f:3f:d1:
6c:2c:7a:71:35:ae:0d:d6:d3:e3:93:bd:a2:1b:1f:
a6:df:9f:bc:d2:44:0b:da:d2:4a:db:60:b7:5f:29:
9f:49:cd:9f:fa:ac:b3:cb:12:75:11:0c:8a:e0:00:
39:6f:4b:7d:19:27:eb:a1:99:bd:a3:ad:16:c7:5c:
93:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:82:E2:E6:98:04:3D:FE:F6:15:D6:CC:FB:7F:2B:F0:12:CB:0D:40
X509v3 Authority Key Identifier:
keyid:43:54:16:B2:28:2B:45:33:C3:50:9C:18:E9:57:CE:0C:83:6B:C8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1QWsigrRTPDUJwY6VfODINryDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/63ff81-6460-4c05-852d-262eb39bbe76/1/Q1QWsigrRTPDUJwY6VfODINryDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cb:cc:49:ad:16:dc:e0:6c:d4:c6:8d:5c:fe:b9:2f:86:e5:
c2:d1:ec:9c:a1:85:93:8e:cc:d9:f3:27:82:e2:94:b4:7e:f0:
be:d9:d5:97:29:b0:86:58:76:45:c2:91:ec:1d:50:e4:74:63:
bb:54:a3:7a:05:2d:1b:d5:86:d0:4d:ca:49:d1:cd:5d:ee:78:
3d:ee:17:ad:c6:b0:c7:59:2c:c9:0c:2f:cf:8c:9c:98:b7:e3:
25:5f:27:58:a0:29:e6:ce:f1:d1:6d:57:57:60:5c:f0:21:20:
fd:f9:1a:d8:9b:63:73:1f:ba:41:7e:5b:82:9b:64:5c:aa:69:
2c:d1:1f:8b:77:2d:32:7d:26:0e:20:a0:22:99:f2:bd:da:ff:
2f:14:15:29:a6:46:8c:44:20:78:1d:31:1a:c6:7f:93:5b:f4:
e1:81:3d:69:64:c0:24:59:86:51:26:7e:84:4f:cc:dc:0d:4f:
8c:cc:ea:05:46:06:2d:d4:7c:71:ad:85:e2:df:0a:86:81:26:
86:85:14:2c:97:9b:4a:a7:17:33:07:6e:72:ae:c9:95:b4:89:
38:19:fd:3e:45:37:c9:84:4a:0c:5d:41:fe:98:c8:0a:5d:67:
96:47:87:b1:3d:cc:85:bc:85:4f:62:92:03:c0:9b:80:38:37:
b7:9b:8a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK4s3KczVkjuBaW0AmewfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTQxNmIyMjgyYjQ1MzNjMzUwOWMxOGU5NTdjZTBjODM2
YmM4MzcwHhcNMjUxMTA0MTQwMDQ0WhcNMjUxMTA1MTQwMDQ0WjAzMTEwLwYDVQQD
EygwYzgyZTJlNjk4MDQzZGZlZjYxNWQ2Y2NmYjdmMmJmMDEyY2IwZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SkIj7l+hhOdsd3vw0jZQdbZ3y4e
e9G5+k294BPIHiFmvGamWrbS3inR5h1E3NiHHYuzRIQK1+62WDKWzo3ZUya/pZDR
r1IZTxE/qFYZSFpxSk8uoGxIbheRro93jf2W8SefWRhJoHmCg4uhegLXuYk7hAPo
Gfy3U0ZOSY/uCUOOUxEqTij2PDSe0ng6loZWmUjOwhR/nIj0L1oRv5lRt11ym6bA
lQ3ynfROGA7NoaWcNdVbf9PFhM8vRnknhWoPP9FsLHpxNa4N1tPjk72iGx+m35+8
0kQL2tJK22C3XymfSc2f+qyzyxJ1EQyK4AA5b0t9GSfroZm9o60Wx1yT8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyC4uaYBD3+9hXWzPt/K/ASyw1AMB8GA1UdIwQY
MBaAFENUFrIoK0Uzw1CcGOlXzgyDa8g3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQt
MjYyZWIzOWJiZTc2LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82M2ZmODEtNjQ2MC00YzA1LTg1MmQtMjYyZWIzOWJiZTc2
LzEvUTFRV3NpZ3JSVFBEVUp3WTZWZk9ESU5yeURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMvMSa0W
3OBs1MaNXP65L4blwtHsnKGFk47M2fMnguKUtH7wvtnVlymwhlh2RcKR7B1Q5HRj
u1SjegUtG9WG0E3KSdHNXe54Pe4Xrcawx1ksyQwvz4ycmLfjJV8nWKAp5s7x0W1X
V2Bc8CEg/fka2Jtjcx+6QX5bgptkXKppLNEfi3ctMn0mDiCgIpnyvdr/LxQVKaZG
jEQgeB0xGsZ/k1v04YE9aWTAJFmGUSZ+hE/M3A1PjMzqBUYGLdR8ca2F4t8KhoEm
hoUULJebSqcXMwducq7JlbSJOBn9PkU3yYRKDF1B/pjICl1nlkeHsT3MhbyFT2KS
A8CbgDg3t5uKYg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:57:51 2025 by rpki-client