Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: kvFf3oeZ1gegrrhZ25hF+KyFW0qqfh7+28ONMQCz6sc=
Subject key identifier: C1:1E:CE:60:A9:E9:A2:A9:8E:C2:5A:93:B0:4A:0C:CA:51:E0:06:6A
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 019A4D73E4BF62845432B3DE87B4BD5A6AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 05D5
Signing time: Tue 04 Nov 2025 06:00:32 +0000
Manifest this update: Tue 04 Nov 2025 06:00:32 +0000
Manifest next update: Wed 05 Nov 2025 06:00:32 +0000
Files and hashes: 1: 49r3EiPqYIwA3FVnQ3pruyaEeaY.roa (hash: S4fah+Hi++9D/Vhg9/JWPzVOXskqt4CfJ/0z6MaI0ok=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: IlExTTRYLuzpB5dUWZHGagESJrukb4qig2l0sB6RnL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e4:bf:62:84:54:32:b3:de:87:b4:bd:5a:6a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Nov 4 06:00:32 2025 GMT
Not After : Nov 5 06:00:32 2025 GMT
Subject: CN=c11ece60a9e9a2a98ec25a93b04a0cca51e0066a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:17:73:c5:4c:42:0f:46:08:dc:03:87:c6:
d4:df:4d:41:c6:55:88:bc:00:c2:8d:c7:65:36:68:
ad:f3:65:a8:dd:23:3c:04:8c:dd:a8:d4:0c:b5:af:
d0:74:fe:cf:68:1c:8b:f3:44:53:1d:14:8e:8b:3f:
f8:3d:e7:c9:ef:26:92:2e:84:b6:6c:18:87:99:dd:
33:7c:7c:5f:c6:44:2c:60:4c:69:2a:35:8a:9d:89:
80:86:ae:ce:3c:3b:6e:e7:27:fb:b6:bb:5d:71:2e:
a2:18:8a:44:70:36:ab:de:fb:93:4c:82:6d:48:af:
b2:d7:7c:a0:bd:f2:4b:96:72:cc:6b:63:c3:6e:3a:
55:76:84:d7:64:2a:22:a4:0c:a2:02:19:bb:8f:74:
69:c0:b0:b4:11:74:13:2b:03:58:d9:4f:ea:b0:09:
37:91:9c:8e:1a:4e:e2:88:3f:42:cf:19:d0:e0:77:
71:91:66:9f:b1:16:94:8b:93:ab:c0:ff:19:cd:ca:
a2:eb:6f:a3:d5:f9:15:9f:39:e3:5d:91:d0:6c:39:
29:25:37:75:95:f1:c3:fb:4e:82:9c:b5:05:08:38:
44:30:fa:9c:ab:be:e6:f5:70:e8:fe:df:bc:b0:16:
8a:52:e1:46:3c:5c:0a:bf:d0:ed:61:74:04:9a:1f:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:CE:60:A9:E9:A2:A9:8E:C2:5A:93:B0:4A:0C:CA:51:E0:06:6A
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d9:38:e6:fe:98:d4:ed:04:b8:ec:40:ac:6f:8e:1c:f2:9c:
c0:41:63:f6:2d:d2:20:45:2f:bf:0f:bf:e0:83:e3:cb:79:b9:
13:90:c4:4e:66:ab:41:a7:de:63:e1:c1:6f:d1:e9:32:26:5e:
51:8b:ad:23:84:d1:84:bd:b9:66:67:52:a9:6d:7e:06:23:7e:
33:4a:86:1d:84:32:6e:5f:19:f0:be:49:b1:50:c3:32:68:3b:
f7:40:cc:be:4b:b7:0d:b7:20:fb:f5:3c:33:dc:8d:17:7d:d5:
a2:52:fa:ec:6b:05:ad:70:01:13:b1:cb:7e:97:98:e2:d2:2c:
47:4a:30:f6:07:bd:ef:b5:47:01:ae:ef:52:f2:d5:50:41:98:
90:0f:32:82:94:a0:d7:1f:46:78:e7:eb:d2:b2:d5:ca:f9:fb:
c5:6d:b3:0d:32:22:b3:17:95:46:8e:b2:48:60:b8:c8:18:3f:
83:d2:31:c9:7f:3b:22:cd:2d:ab:4b:05:4f:0b:1a:21:29:c2:
ea:39:f6:e1:2f:23:1e:ef:ca:2b:14:59:86:bb:ec:eb:0a:a0:
87:22:79:72:f9:f0:a3:cf:1a:42:9e:c2:6a:5c:ff:86:1e:41:
99:4c:99:e1:92:7b:a0:41:02:0a:fe:4f:7e:67:33:f7:33:5c:
d0:e0:a6:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc+S/YoRUMrPeh7S9Wmr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMGJkNzhjYTJjYWE1ZWI4ZmYzYjllODIzNzc0ZGMxYjc0
ZGViZWIwHhcNMjUxMTA0MDYwMDMyWhcNMjUxMTA1MDYwMDMyWjAzMTEwLwYDVQQD
EyhjMTFlY2U2MGE5ZTlhMmE5OGVjMjVhOTNiMDRhMGNjYTUxZTAwNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYEXc8VMQg9GCNwDh8bU301BxlWI
vADCjcdlNmit82Wo3SM8BIzdqNQMta/QdP7PaByL80RTHRSOiz/4PefJ7yaSLoS2
bBiHmd0zfHxfxkQsYExpKjWKnYmAhq7OPDtu5yf7trtdcS6iGIpEcDar3vuTTIJt
SK+y13ygvfJLlnLMa2PDbjpVdoTXZCoipAyiAhm7j3RpwLC0EXQTKwNY2U/qsAk3
kZyOGk7iiD9CzxnQ4HdxkWafsRaUi5OrwP8Zzcqi62+j1fkVnznjXZHQbDkpJTd1
lfHD+06CnLUFCDhEMPqcq77m9XDo/t+8sBaKUuFGPFwKv9DtYXQEmh8s7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEezmCp6aKpjsJak7BKDMpR4AZqMB8GA1UdIwQY
MBaAFKoL14yiyqXrj/O56CN3TcG3TevrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzct
YTEwOGRiZTBmZDFmLzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85Nzg4MzctMTAyMy00YjM5LTliMzctYTEwOGRiZTBmZDFm
LzEvcWd2WGpLTEtwZXVQODdub0kzZE53YmRONi1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9k45v6Y
1O0EuOxArG+OHPKcwEFj9i3SIEUvvw+/4IPjy3m5E5DETmarQafeY+HBb9HpMiZe
UYutI4TRhL25ZmdSqW1+BiN+M0qGHYQybl8Z8L5JsVDDMmg790DMvku3Dbcg+/U8
M9yNF33VolL67GsFrXABE7HLfpeY4tIsR0ow9ge977VHAa7vUvLVUEGYkA8ygpSg
1x9GeOfr0rLVyvn7xW2zDTIisxeVRo6ySGC4yBg/g9IxyX87Is0tq0sFTwsaISnC
6jn24S8jHu/KKxRZhrvs6wqghyJ5cvnwo88aQp7Calz/hh5BmUyZ4ZJ7oEECCv5P
fmcz9zNc0OCmjw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:02 2025 by rpki-client