Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
File: MN-QKoFpKFoeCclwPGOg89St7kg.mft (raw, json)
Hash identifier: PbnpL/ZO1UtQasXRTdj9l5jBS+fH5Ovo34ZZOG/13TI=
Subject key identifier: C1:64:7D:BD:98:11:E6:11:67:1E:10:34:EC:83:E0:88:80:9C:8C:5F
Authority key identifier: 30:DF:90:2A:81:69:28:5A:1E:09:C9:70:3C:63:A0:F3:D4:AD:EE:48
Certificate issuer: /CN=30df902a8169285a1e09c9703c63a0f3d4adee48
Certificate serial: 019A51507879EB039C16677F9AFD36FD17F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
Manifest number: 075A
Signing time: Wed 05 Nov 2025 00:00:19 +0000
Manifest this update: Wed 05 Nov 2025 00:00:19 +0000
Manifest next update: Thu 06 Nov 2025 00:00:19 +0000
Files and hashes: 1: MN-QKoFpKFoeCclwPGOg89St7kg.crl (hash: EeErdvqu7kcQQz0og7vb6MsC9h7Mp1qaZcafFET3QEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:78:79:eb:03:9c:16:67:7f:9a:fd:36:fd:17:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30df902a8169285a1e09c9703c63a0f3d4adee48
Validity
Not Before: Nov 5 00:00:19 2025 GMT
Not After : Nov 6 00:00:19 2025 GMT
Subject: CN=c1647dbd9811e611671e1034ec83e088809c8c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:64:0e:e5:c7:13:1a:15:b9:ec:7f:a9:81:
8a:b2:8f:c0:f9:55:59:ca:a9:82:d8:10:e8:c6:92:
61:06:03:13:73:64:80:50:a1:2c:6f:05:cc:5c:c5:
39:1d:be:37:d7:fc:11:33:48:a5:e1:8a:20:d2:5f:
41:d1:ba:c5:17:1c:7e:51:4f:41:b6:b8:ae:7c:4f:
35:9c:ff:66:13:0c:2d:d9:98:84:57:37:97:7b:76:
5b:59:ca:af:8f:bc:c0:66:cf:77:18:7e:cd:7c:9a:
56:d0:4d:84:9d:86:d4:79:ff:9b:c2:71:1a:de:be:
fa:60:67:3c:1b:91:23:60:4d:c6:82:49:3d:a0:d2:
9e:0a:fe:72:a3:c2:c4:3a:fa:58:d1:f8:71:71:70:
f1:3a:ff:60:36:a3:18:5d:aa:30:2f:b1:0c:0b:54:
0d:97:0c:e1:bb:39:c7:d6:01:99:86:a0:95:9b:de:
7d:15:80:74:c3:44:c5:91:2f:ee:bb:2a:c7:9e:36:
56:7d:4a:8d:f8:79:09:04:85:e2:29:48:fc:c0:0b:
85:5b:0b:1b:1c:1a:1b:df:74:8d:76:5e:ec:16:f7:
fe:56:e4:98:dc:c1:f3:71:63:bc:77:5a:d8:5c:07:
cc:ee:fc:a9:f3:3b:7e:d6:ba:6f:ce:bc:51:15:3f:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:64:7D:BD:98:11:E6:11:67:1E:10:34:EC:83:E0:88:80:9C:8C:5F
X509v3 Authority Key Identifier:
keyid:30:DF:90:2A:81:69:28:5A:1E:09:C9:70:3C:63:A0:F3:D4:AD:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:50:c9:58:a0:29:d0:62:2f:c0:a3:fa:1a:22:6b:08:c8:c3:
c7:7f:98:f5:da:7e:54:e5:5f:83:9a:64:d5:bd:28:7d:19:e4:
6d:64:2a:9e:ef:90:b4:9a:cf:55:63:65:0e:ac:e4:9a:58:b8:
e8:87:70:32:25:6f:e2:a8:65:c8:fa:65:91:cf:ff:9f:54:3e:
60:50:4d:e0:22:50:e0:9c:6a:a1:58:8a:0c:7a:8c:60:99:99:
4a:cc:7f:35:39:27:87:e1:23:04:22:b2:40:96:95:bf:ae:bc:
17:b4:22:34:64:2e:6f:d5:a8:64:44:70:6c:b7:fb:cb:af:98:
e5:ab:86:0e:99:ad:7c:b8:da:ff:63:74:70:47:50:46:69:cc:
ce:f7:ea:4d:68:ec:bc:9b:5b:1b:fe:7c:fa:c1:a0:26:71:83:
62:6a:97:17:fd:32:c0:f5:00:d5:19:ff:91:bf:6d:ed:e1:32:
e4:32:cf:ed:c1:fc:d9:1d:18:29:b3:ed:37:32:cc:f4:3e:a6:
c4:67:e5:a0:83:57:24:37:b1:49:68:d7:b0:26:53:df:69:53:
3a:5c:0f:0c:f6:c2:4c:8b:e8:9e:29:5c:fd:e6:f4:3c:1a:5e:
ff:0e:96:dd:4e:69:f2:fa:7e:5a:0d:dd:c6:c1:47:8f:bd:30:
54:24:4b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUHh56wOcFmd/mv02/Rf5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZGY5MDJhODE2OTI4NWExZTA5Yzk3MDNjNjNhMGYzZDRh
ZGVlNDgwHhcNMjUxMTA1MDAwMDE5WhcNMjUxMTA2MDAwMDE5WjAzMTEwLwYDVQQD
EyhjMTY0N2RiZDk4MTFlNjExNjcxZTEwMzRlYzgzZTA4ODgwOWM4YzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tlkDuXHExoVuex/qYGKso/A+VVZ
yqmC2BDoxpJhBgMTc2SAUKEsbwXMXMU5Hb431/wRM0il4Yog0l9B0brFFxx+UU9B
triufE81nP9mEwwt2ZiEVzeXe3ZbWcqvj7zAZs93GH7NfJpW0E2EnYbUef+bwnEa
3r76YGc8G5EjYE3Ggkk9oNKeCv5yo8LEOvpY0fhxcXDxOv9gNqMYXaowL7EMC1QN
lwzhuznH1gGZhqCVm959FYB0w0TFkS/uuyrHnjZWfUqN+HkJBIXiKUj8wAuFWwsb
HBob33SNdl7sFvf+VuSY3MHzcWO8d1rYXAfM7vyp8zt+1rpvzrxRFT9XCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFkfb2YEeYRZx4QNOyD4IiAnIxfMB8GA1UdIwQY
MBaAFDDfkCqBaShaHgnJcDxjoPPUre5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU4tUUtvRnBLRm9lQ2Nsd1BHT2c4OVN0N2tnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iYTdhODAtNWQ1NC00ZTI0LTk5Zjkt
ZTI5OTQ1MzQ0OTVhLzEvTU4tUUtvRnBLRm9lQ2Nsd1BHT2c4OVN0N2tnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iYTdhODAtNWQ1NC00ZTI0LTk5ZjktZTI5OTQ1MzQ0OTVh
LzEvTU4tUUtvRnBLRm9lQ2Nsd1BHT2c4OVN0N2tnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1DJWKAp
0GIvwKP6GiJrCMjDx3+Y9dp+VOVfg5pk1b0ofRnkbWQqnu+QtJrPVWNlDqzkmli4
6IdwMiVv4qhlyPplkc//n1Q+YFBN4CJQ4JxqoViKDHqMYJmZSsx/NTknh+EjBCKy
QJaVv668F7QiNGQub9WoZERwbLf7y6+Y5auGDpmtfLja/2N0cEdQRmnMzvfqTWjs
vJtbG/58+sGgJnGDYmqXF/0ywPUA1Rn/kb9t7eEy5DLP7cH82R0YKbPtNzLM9D6m
xGfloINXJDexSWjXsCZT32lTOlwPDPbCTIvonilc/eb0PBpe/w6W3U5p8vp+Wg3d
xsFHj70wVCRL7Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:41 2025 by rpki-client