Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: GsOkgC5MI67z5FMbOjgFdQsx6h2CIXq/nxUyKgKn/IA=
Subject key identifier: 33:6D:A0:B3:8D:4F:2A:AF:FF:81:84:8D:63:01:DC:E1:81:6A:52:22
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019A4DE15579E2B7F6DD4FA019F3B44EDCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: z+3Ihxe86O7aSSaEKkXI5UpMvrX4S/cheyGp+Z//rT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:55:79:e2:b7:f6:dd:4f:a0:19:f3:b4:4e:dc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=336da0b38d4f2aafff81848d6301dce1816a5222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7e:1c:4a:23:1d:56:0a:50:f1:a7:b0:6d:8f:
d7:d0:9e:6a:d4:a9:17:94:b9:b3:01:6d:fc:d1:14:
13:68:9f:59:df:53:7b:54:f8:3b:9c:20:47:40:21:
e5:f4:02:1c:dd:5d:af:28:6e:32:2c:0b:68:25:e3:
47:b5:cb:b9:aa:96:90:2c:d9:a4:95:9d:d3:02:4c:
4e:f6:ca:74:a1:ae:66:55:01:bc:f9:52:86:cd:41:
16:e4:45:3c:e0:7e:11:86:e5:32:3b:1a:52:f0:39:
90:d7:a6:1d:4c:52:27:9b:67:5a:02:3d:c0:e4:7e:
93:ef:53:92:14:a1:1c:5e:b6:da:49:2c:5b:d4:9f:
bc:f7:36:35:92:0a:0a:61:e0:03:68:8f:b8:00:72:
e7:69:c8:69:4c:34:ec:e0:36:5b:3f:ce:ec:ed:82:
b3:63:c5:97:a1:d8:95:e2:fe:8d:98:e4:65:2f:1b:
67:cd:13:8d:bc:ba:ef:53:51:78:b4:84:da:bb:b7:
03:46:fa:2a:1e:b6:89:29:3a:d9:56:86:76:37:5f:
b0:02:5f:98:1e:de:21:60:d6:fa:27:f0:74:d4:19:
87:31:88:eb:53:b0:03:c1:e2:0c:95:af:be:8b:c7:
e4:00:5d:b3:d4:f6:a6:d4:4b:66:e4:ed:23:5f:02:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6D:A0:B3:8D:4F:2A:AF:FF:81:84:8D:63:01:DC:E1:81:6A:52:22
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1e:ef:9a:0a:1b:e5:99:64:f5:45:77:7b:b4:1a:9a:f8:ba:
29:9c:e0:94:00:ec:82:6e:f4:85:ec:9f:60:bf:81:4c:91:80:
8c:38:47:26:88:e1:eb:9d:3c:e0:da:30:4c:02:e1:89:16:55:
d4:3e:98:88:0b:4c:c5:1f:79:b4:c5:4f:1f:ca:01:42:f6:69:
68:27:62:65:48:6b:41:d8:35:e2:8b:2d:62:05:86:8a:c2:1f:
e2:f2:a1:0a:3c:5a:a6:80:96:34:a9:99:13:33:d9:09:0b:97:
88:f5:b3:41:41:ec:60:fd:dd:c2:77:e2:45:dd:62:c4:95:e4:
e9:93:1e:51:fa:61:78:62:5c:06:c7:ee:80:8a:b0:0d:56:10:
9d:d3:3b:9d:76:6d:cd:f4:8f:31:5c:92:06:96:92:98:cc:ce:
96:f6:bb:90:a5:8b:80:29:de:c6:52:40:44:ea:e4:d3:0f:bf:
38:e7:77:c0:f0:dd:45:16:27:6c:cd:c6:40:a1:b3:0a:92:bf:
d2:5b:47:af:a7:41:84:19:d9:88:62:36:28:7b:9a:85:7b:65:
d5:d8:33:29:f3:7a:d3:0e:9b:5f:fa:7c:8e:84:67:83:2c:87:
22:60:b1:09:1f:7b:e9:84:24:2e:2d:72:09:6e:b5:10:5c:84:
77:30:0b:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4VV54rf23U+gGfO0TtzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzhkMDI0MTEwOGIwMWY1ZWI3MDhmZThiYmI4NDdkNTNh
MzBmMTYwHhcNMjUxMTA0MDgwMDA0WhcNMjUxMTA1MDgwMDA0WjAzMTEwLwYDVQQD
EygzMzZkYTBiMzhkNGYyYWFmZmY4MTg0OGQ2MzAxZGNlMTgxNmE1MjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n4cSiMdVgpQ8aewbY/X0J5q1KkX
lLmzAW380RQTaJ9Z31N7VPg7nCBHQCHl9AIc3V2vKG4yLAtoJeNHtcu5qpaQLNmk
lZ3TAkxO9sp0oa5mVQG8+VKGzUEW5EU84H4RhuUyOxpS8DmQ16YdTFInm2daAj3A
5H6T71OSFKEcXrbaSSxb1J+89zY1kgoKYeADaI+4AHLnachpTDTs4DZbP87s7YKz
Y8WXodiV4v6NmORlLxtnzRONvLrvU1F4tITau7cDRvoqHraJKTrZVoZ2N1+wAl+Y
Ht4hYNb6J/B01BmHMYjrU7ADweIMla++i8fkAF2z1Pam1Etm5O0jXwJXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNtoLONTyqv/4GEjWMB3OGBalIiMB8GA1UdIwQY
MBaAFEHI0CQRCLAfXrcI/ou7hH1Tow8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjct
ZDU5NmVjMTRlZTJlLzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjctZDU5NmVjMTRlZTJl
LzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQh7vmgob
5Zlk9UV3e7Qamvi6KZzglADsgm70heyfYL+BTJGAjDhHJojh65084NowTALhiRZV
1D6YiAtMxR95tMVPH8oBQvZpaCdiZUhrQdg14ostYgWGisIf4vKhCjxapoCWNKmZ
EzPZCQuXiPWzQUHsYP3dwnfiRd1ixJXk6ZMeUfpheGJcBsfugIqwDVYQndM7nXZt
zfSPMVySBpaSmMzOlva7kKWLgCnexlJAROrk0w+/OOd3wPDdRRYnbM3GQKGzCpK/
0ltHr6dBhBnZiGI2KHuahXtl1dgzKfN60w6bX/p8joRngyyHImCxCR976YQkLi1y
CW61EFyEdzALtA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:41 2025 by rpki-client