Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: rLWwWzLrS1dbnNgD1PrCo4vuHU9dXz8zCxwqzpCF22g=
Subject key identifier: 5E:D1:AB:63:65:BE:7C:2E:09:40:E5:28:6D:98:D1:41:3A:2E:7A:51
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 019A4DAABA42B4466940C81216018813496C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0A2C
Signing time: Tue 04 Nov 2025 07:00:25 +0000
Manifest this update: Tue 04 Nov 2025 07:00:25 +0000
Manifest next update: Wed 05 Nov 2025 07:00:25 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: ASSo60q66QlbOZO6a7dEwBtoByFEU9QgmDYcM4LKr5A=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:ba:42:b4:46:69:40:c8:12:16:01:88:13:49:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Nov 4 07:00:25 2025 GMT
Not After : Nov 5 07:00:25 2025 GMT
Subject: CN=5ed1ab6365be7c2e0940e5286d98d1413a2e7a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:f5:8d:69:69:37:a5:5b:7f:d9:b6:4b:30:
c0:f6:cd:66:70:08:29:84:68:f8:b5:f4:81:8d:3a:
d4:7e:99:0a:47:47:70:bc:1c:c7:8a:2d:df:99:4a:
31:a5:3c:25:76:a4:12:bb:26:f3:b8:e2:f8:19:9e:
02:9c:56:c7:1f:ec:10:54:ef:30:a6:26:6c:6f:d2:
97:4d:d6:11:4a:61:fb:e1:e8:79:53:3c:7e:8e:14:
68:6f:78:51:e6:35:63:91:2d:ef:a7:6c:a7:10:fe:
1a:9b:ad:63:0a:97:22:57:7a:27:6b:0d:8e:8a:f7:
3a:a5:19:c2:f4:cd:78:59:dc:63:d7:c4:0d:af:de:
c3:ed:63:3a:ab:2c:ce:e0:1e:ae:1a:b8:ae:24:8d:
a8:8e:d2:dd:fb:aa:3a:7f:6e:e8:95:b0:e8:16:18:
e4:33:30:18:19:d0:04:df:c7:1d:41:40:a1:7f:bc:
b2:4e:59:30:90:1e:f8:65:20:24:69:d2:12:79:14:
78:d3:d5:a7:79:a3:a0:c2:7f:cd:b7:41:bb:5f:d0:
96:02:a3:24:ed:fc:41:c1:53:f1:44:12:da:27:f9:
af:dd:48:a6:74:e6:1f:07:79:64:1d:d6:c9:ce:58:
e9:1f:76:f8:0b:6d:cb:94:ff:a9:a2:26:39:e0:d8:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:AB:63:65:BE:7C:2E:09:40:E5:28:6D:98:D1:41:3A:2E:7A:51
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6f:93:6f:35:28:1b:ab:75:17:29:a6:e2:07:72:21:3c:9b:
a3:eb:b4:b2:99:dd:63:7c:64:81:65:51:0b:e8:22:9e:ac:d6:
2e:82:10:6b:87:a0:4b:15:6e:ad:1a:82:11:1a:42:ae:b3:c8:
8c:76:e6:38:bd:cb:0d:d2:6e:d0:8c:07:98:20:85:39:b9:88:
31:ee:e1:91:49:c2:d9:bb:ea:fc:e2:13:6e:27:4e:4d:18:b7:
16:d4:45:a7:ac:f7:8c:21:e0:01:1b:3a:02:19:62:c7:1c:7f:
54:8a:b4:1c:11:e1:6f:95:8e:48:c5:93:94:75:8c:6e:74:0a:
4b:ae:19:ed:55:1e:c8:0f:5c:76:3e:00:b0:c5:c7:32:58:a8:
ac:12:b1:08:bd:fa:9e:39:c7:35:06:1c:39:2f:95:2a:d1:6a:
a3:5d:b8:de:d3:f3:66:c9:5a:c8:f7:33:fc:e4:c3:55:eb:b9:
a3:23:9e:49:c4:a3:06:89:e0:1b:9e:72:1d:68:4e:70:92:6b:
03:c8:ed:ed:50:bd:0a:19:c7:fe:53:85:83:70:1d:9e:58:3a:
1d:c4:0c:1e:20:99:57:4a:45:86:8f:8e:2c:ea:2a:ec:32:89:
ed:7e:8d:9e:cd:ab:17:81:0f:1e:8c:b0:94:ad:3e:f4:26:b1:
b6:1b:4e:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqrpCtEZpQMgSFgGIE0lsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzUzNWFhNmMzMTdiYTc2Y2NiODFiYmZlZTVkNDc0YjE5
M2U2ZTMwHhcNMjUxMTA0MDcwMDI1WhcNMjUxMTA1MDcwMDI1WjAzMTEwLwYDVQQD
Eyg1ZWQxYWI2MzY1YmU3YzJlMDk0MGU1Mjg2ZDk4ZDE0MTNhMmU3YTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymj1jWlpN6Vbf9m2SzDA9s1mcAgp
hGj4tfSBjTrUfpkKR0dwvBzHii3fmUoxpTwldqQSuybzuOL4GZ4CnFbHH+wQVO8w
piZsb9KXTdYRSmH74eh5Uzx+jhRob3hR5jVjkS3vp2ynEP4am61jCpciV3onaw2O
ivc6pRnC9M14Wdxj18QNr97D7WM6qyzO4B6uGriuJI2ojtLd+6o6f27olbDoFhjk
MzAYGdAE38cdQUChf7yyTlkwkB74ZSAkadISeRR409WneaOgwn/Nt0G7X9CWAqMk
7fxBwVPxRBLaJ/mv3UimdOYfB3lkHdbJzljpH3b4C23LlP+poiY54NhXvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7Rq2NlvnwuCUDlKG2Y0UE6LnpRMB8GA1UdIwQY
MBaAFEI1NapsMXunbMuBu/7l1HSxk+bjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEt
MDk5NTg3YzcxYmFiLzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEtMDk5NTg3YzcxYmFi
LzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2+TbzUo
G6t1Fymm4gdyITybo+u0spndY3xkgWVRC+ginqzWLoIQa4egSxVurRqCERpCrrPI
jHbmOL3LDdJu0IwHmCCFObmIMe7hkUnC2bvq/OITbidOTRi3FtRFp6z3jCHgARs6
Ahlixxx/VIq0HBHhb5WOSMWTlHWMbnQKS64Z7VUeyA9cdj4AsMXHMliorBKxCL36
njnHNQYcOS+VKtFqo1243tPzZslayPcz/OTDVeu5oyOeScSjBongG55yHWhOcJJr
A8jt7VC9ChnH/lOFg3Adnlg6HcQMHiCZV0pFho+OLOoq7DKJ7X6Nns2rF4EPHoyw
lK0+9CaxthtOJQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:42 2025 by rpki-client