Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier: 2RltJHd5/1u3uDxpKcGYgFK4zLJeMDOK4oQPR3NxO3A=
Subject key identifier: 06:0B:B3:66:2A:63:91:49:82:A1:A7:86:03:19:BE:DA:2C:A5:09:82
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 019A4E4F50BB2A4EBF505A56EA469D0B945C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number: 09E6
Signing time: Tue 04 Nov 2025 10:00:12 +0000
Manifest this update: Tue 04 Nov 2025 10:00:12 +0000
Manifest next update: Wed 05 Nov 2025 10:00:12 +0000
Files and hashes: 1: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (hash: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=)
2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: MLcbESZ/VlsWqDLBRpwkLoMfdtYWRO4pOLUBgvtR/vY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:50:bb:2a:4e:bf:50:5a:56:ea:46:9d:0b:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Nov 4 10:00:12 2025 GMT
Not After : Nov 5 10:00:12 2025 GMT
Subject: CN=060bb3662a63914982a1a7860319beda2ca50982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:87:8f:f3:c6:9d:25:9a:b9:0a:6b:6e:89:
e6:a7:c7:10:e3:36:d7:bc:0d:87:a0:d8:52:ca:51:
f2:c6:90:b5:6b:db:53:73:ea:8b:7f:50:b4:df:fb:
0d:5b:b4:50:65:d1:22:98:38:16:19:ea:4e:67:06:
ee:e9:07:71:f9:9a:0c:b2:b2:cc:3e:07:5f:53:ed:
08:d1:7b:77:91:6e:0e:e2:a0:f5:51:99:1f:71:a6:
ce:27:d6:99:25:79:76:ea:dd:52:78:5f:ae:bf:28:
01:fe:1d:50:5e:b5:68:55:26:b1:13:95:f9:58:78:
82:db:19:4a:e6:79:e1:bb:ab:c6:09:62:6b:fc:d4:
46:5d:c1:9f:4b:d4:b9:37:1a:82:8d:f2:23:10:94:
92:85:17:5f:89:e7:b4:8b:8b:2a:2a:dd:76:fe:38:
f1:d0:d5:b2:ae:90:f7:3b:29:82:bb:d9:93:67:3f:
97:9f:68:f0:ad:b4:aa:cf:68:e7:3b:e0:95:3b:1c:
a3:60:21:19:ad:51:ac:27:78:b6:81:6d:8d:3a:7c:
6a:e5:13:99:df:76:98:11:e0:8e:3f:3e:c9:ee:48:
cf:5b:e7:60:e2:b8:06:a5:4c:ef:0d:af:61:5f:f3:
99:6a:60:2a:b8:b5:7a:da:00:c3:94:1e:f6:5d:f6:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:B3:66:2A:63:91:49:82:A1:A7:86:03:19:BE:DA:2C:A5:09:82
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b7:88:2d:21:8e:6e:22:22:fa:bc:fd:aa:e1:64:f2:a8:d0:
df:fa:60:36:65:a9:80:83:39:04:24:53:72:9c:61:09:00:89:
d5:fb:90:46:18:f7:ce:e2:8e:00:26:27:4d:93:0f:60:9e:ba:
b4:8b:c1:d4:20:cf:01:01:7f:47:4f:50:fb:72:92:f1:53:64:
41:f2:c6:a5:e6:e7:54:45:a2:92:bc:5d:93:a7:3b:d9:49:b2:
2a:a6:5e:cf:c3:e6:33:6d:08:a9:69:27:11:d5:b5:f3:bd:97:
99:ce:b4:41:b9:7c:b4:1f:58:e1:d8:f3:cb:b3:ed:7c:bc:cd:
e4:51:17:42:a1:0f:01:ad:bd:9f:c5:cf:99:b3:92:f6:8e:e0:
15:10:c3:bf:46:44:1f:77:c9:ff:6b:07:8d:50:01:64:98:db:
54:b4:11:f2:88:c3:7b:95:24:d7:3a:ad:5a:4d:cf:94:50:28:
72:98:e1:8b:26:55:75:b9:24:bd:01:a1:33:45:59:f1:4b:16:
6a:dd:83:e1:d2:a6:92:85:59:1d:72:04:10:3a:cb:68:61:a4:
22:64:b3:29:e5:7b:1f:ba:ed:4b:1f:77:29:97:f2:35:fd:5c:
e7:c6:86:03:cc:f2:17:01:78:b4:48:b0:17:fc:c0:63:2e:51:
8a:68:68:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT1C7Kk6/UFpW6kadC5RcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzFlZTUxMmMxYTU2MmFiOWU5NDEwYTgzMWY3MmZkNDMx
ODg5MmUwHhcNMjUxMTA0MTAwMDEyWhcNMjUxMTA1MTAwMDEyWjAzMTEwLwYDVQQD
EygwNjBiYjM2NjJhNjM5MTQ5ODJhMWE3ODYwMzE5YmVkYTJjYTUwOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBmHj/PGnSWauQprbonmp8cQ4zbX
vA2HoNhSylHyxpC1a9tTc+qLf1C03/sNW7RQZdEimDgWGepOZwbu6Qdx+ZoMsrLM
PgdfU+0I0Xt3kW4O4qD1UZkfcabOJ9aZJXl26t1SeF+uvygB/h1QXrVoVSaxE5X5
WHiC2xlK5nnhu6vGCWJr/NRGXcGfS9S5NxqCjfIjEJSShRdfiee0i4sqKt12/jjx
0NWyrpD3OymCu9mTZz+Xn2jwrbSqz2jnO+CVOxyjYCEZrVGsJ3i2gW2NOnxq5ROZ
33aYEeCOPz7J7kjPW+dg4rgGpUzvDa9hX/OZamAquLV62gDDlB72XfYsQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYLs2YqY5FJgqGnhgMZvtospQmCMB8GA1UdIwQY
MBaAFKox7lEsGlYquelBCoMfcv1DGIkuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2VmNTQtYmRiMC00NTBhLTg2NDYt
ZWUwODE0NmUzNzEzLzEvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lN2VmNTQtYmRiMC00NTBhLTg2NDYtZWUwODE0NmUzNzEz
LzEvcWpIdVVTd2FWaXE1NlVFS2d4OXlfVU1ZaVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw7eILSGO
biIi+rz9quFk8qjQ3/pgNmWpgIM5BCRTcpxhCQCJ1fuQRhj3zuKOACYnTZMPYJ66
tIvB1CDPAQF/R09Q+3KS8VNkQfLGpebnVEWikrxdk6c72UmyKqZez8PmM20IqWkn
EdW1872Xmc60Qbl8tB9Y4djzy7PtfLzN5FEXQqEPAa29n8XPmbOS9o7gFRDDv0ZE
H3fJ/2sHjVABZJjbVLQR8ojDe5Uk1zqtWk3PlFAocpjhiyZVdbkkvQGhM0VZ8UsW
at2D4dKmkoVZHXIEEDrLaGGkImSzKeV7H7rtSx93KZfyNf1c58aGA8zyFwF4tEiw
F/zAYy5RimhoFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:53 2025 by rpki-client