Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: yKIaixAieclt4ABjruhQHugmJQzGPrHQCZaQ6UvJwHk=
Subject key identifier: 1B:4F:6C:29:89:18:42:58:9E:15:3A:DE:C4:3B:73:89:A5:A9:D3:36
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 019A4D3D05BE87FA8952B6BFA2DF11CB1D62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 05:00:35 +0000
Manifest this update: Tue 04 Nov 2025 05:00:35 +0000
Manifest next update: Wed 05 Nov 2025 05:00:35 +0000
Files and hashes: 1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: chr8szveCrSJO/em5UUEX6QS0oQNKL6QWVhQ12GDjHc=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:05:be:87:fa:89:52:b6:bf:a2:df:11:cb:1d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Nov 4 05:00:35 2025 GMT
Not After : Nov 5 05:00:35 2025 GMT
Subject: CN=1b4f6c29891842589e153adec43b7389a5a9d336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:91:1b:c1:48:45:16:53:e8:f7:05:1a:a9:
6f:05:a8:f9:b8:ee:09:8a:23:c0:e7:ea:66:35:06:
dd:ff:f3:79:27:99:78:e5:2d:b6:8f:5a:40:5e:b0:
a1:82:5f:f4:e3:e2:15:33:2b:fa:c5:9d:24:30:68:
23:7a:cd:1c:95:44:5a:31:4a:56:c7:d1:45:93:24:
c5:ef:47:d8:0e:74:86:2c:2f:6f:22:34:58:0f:b8:
1d:d7:ea:3e:cd:d3:39:a3:67:88:d1:db:96:84:f0:
26:8b:38:a5:04:27:17:11:b7:13:e9:80:e3:27:6f:
e7:2d:db:c5:d2:32:f2:2a:04:9d:1d:f7:f6:25:cd:
76:b9:e7:19:45:cd:c8:f2:f4:03:46:04:b1:7b:ed:
50:57:01:4a:37:25:7f:32:9c:92:ce:39:8d:27:27:
f1:48:3b:86:c5:31:c3:35:4d:56:76:97:2d:65:d1:
be:53:71:2d:b4:d7:7a:9c:68:fc:5a:09:e3:79:1d:
4b:3c:47:d3:01:a5:b8:a5:04:5d:93:23:85:98:46:
df:73:29:4b:db:eb:15:1d:3a:f6:b6:11:bc:4d:05:
08:eb:0b:ca:eb:5e:6e:9a:15:15:e2:73:26:1e:40:
40:3d:19:87:8a:3a:ef:3f:57:9d:a6:8c:d3:6f:c7:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4F:6C:29:89:18:42:58:9E:15:3A:DE:C4:3B:73:89:A5:A9:D3:36
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cd:56:9f:b7:03:76:52:0c:c4:1a:a6:e9:9d:81:cb:82:75:
f4:31:5b:69:18:fc:9d:5b:cc:85:a5:5d:8e:f2:ab:8d:2c:7d:
a2:16:fa:fb:0a:bc:e8:7f:aa:73:8e:b8:14:04:8e:5c:98:e2:
20:f4:2c:83:0d:5d:42:ca:97:df:db:97:80:ee:72:19:b8:4f:
85:8e:ee:01:39:81:ff:c1:7f:ac:5e:d7:54:b3:21:55:cb:fe:
28:fa:53:c4:a8:42:80:43:42:23:a6:f1:41:41:23:8c:f4:88:
cb:b3:89:d1:ea:5d:22:dd:73:48:35:fe:8b:9f:d2:f8:5c:29:
d0:62:ef:5b:32:52:3f:d8:7f:56:b9:d8:3d:45:f4:d8:1a:b8:
21:e9:f9:6f:4b:8c:81:28:0f:38:72:60:20:ba:9a:97:da:d1:
be:44:f6:ef:26:a4:36:9f:f2:3a:ac:89:ac:7b:ba:81:73:f6:
86:d2:2c:d3:df:64:e4:78:38:cb:72:00:c6:81:17:8e:69:9e:
f8:88:d1:27:4d:db:aa:a1:52:c1:7d:b0:40:8f:4f:a2:7f:27:
b2:28:92:d0:78:29:be:c3:7a:e2:9a:e4:59:c8:0a:b5:92:4d:
a5:13:48:dd:63:11:44:21:6c:f7:25:69:08:26:8f:d7:55:89:
01:cf:12:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPQW+h/qJUra/ot8Ryx1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTUzYjNkNTYxMjIzNGZlMjYwZmU2MGJjN2NlMDI4MDYy
MjI3YTMwHhcNMjUxMTA0MDUwMDM1WhcNMjUxMTA1MDUwMDM1WjAzMTEwLwYDVQQD
EygxYjRmNmMyOTg5MTg0MjU4OWUxNTNhZGVjNDNiNzM4OWE1YTlkMzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqryRG8FIRRZT6PcFGqlvBaj5uO4J
iiPA5+pmNQbd//N5J5l45S22j1pAXrChgl/04+IVMyv6xZ0kMGgjes0clURaMUpW
x9FFkyTF70fYDnSGLC9vIjRYD7gd1+o+zdM5o2eI0duWhPAmizilBCcXEbcT6YDj
J2/nLdvF0jLyKgSdHff2Jc12uecZRc3I8vQDRgSxe+1QVwFKNyV/MpySzjmNJyfx
SDuGxTHDNU1WdpctZdG+U3EttNd6nGj8WgnjeR1LPEfTAaW4pQRdkyOFmEbfcylL
2+sVHTr2thG8TQUI6wvK615umhUV4nMmHkBAPRmHijrvP1edpozTb8dtRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtPbCmJGEJYnhU63sQ7c4mlqdM2MB8GA1UdIwQY
MBaAFKgVOz1WEiNP4mD+YLx84CgGIiejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUt
OWFhN2NkNjUwNWU1LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUtOWFhN2NkNjUwNWU1
LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW81Wn7cD
dlIMxBqm6Z2By4J19DFbaRj8nVvMhaVdjvKrjSx9ohb6+wq86H+qc464FASOXJji
IPQsgw1dQsqX39uXgO5yGbhPhY7uATmB/8F/rF7XVLMhVcv+KPpTxKhCgENCI6bx
QUEjjPSIy7OJ0epdIt1zSDX+i5/S+Fwp0GLvWzJSP9h/VrnYPUX02Bq4Ien5b0uM
gSgPOHJgILqal9rRvkT27yakNp/yOqyJrHu6gXP2htIs099k5Hg4y3IAxoEXjmme
+IjRJ03bqqFSwX2wQI9Pon8nsiiS0HgpvsN64prkWcgKtZJNpRNI3WMRRCFs9yVp
CCaP11WJAc8SXw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:59 2025 by rpki-client