Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier: QcT392QVEE9LKmHtzcVGrhdT6txpkrzZ114R3QHyQRU=
Subject key identifier: 27:9A:3A:42:ED:FC:FD:47:FD:34:7C:41:0B:E9:94:86:5F:EB:50:46
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 019A4D7404298849C184A9FDE74B1088F4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:40 +0000
Manifest this update: Tue 04 Nov 2025 06:00:40 +0000
Manifest next update: Wed 05 Nov 2025 06:00:40 +0000
Files and hashes: 1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=)
2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: hGGg+4DC81ISNxkTuSpszVRPN0pyW2/786DZjAN3hEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:04:29:88:49:c1:84:a9:fd:e7:4b:10:88:f4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Nov 4 06:00:40 2025 GMT
Not After : Nov 5 06:00:40 2025 GMT
Subject: CN=279a3a42edfcfd47fd347c410be994865feb5046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:bc:ca:91:1c:59:d1:d3:97:2c:49:29:81:
1b:97:08:7a:e1:5f:f7:cc:4f:e1:d5:73:b7:ef:24:
a6:ed:c8:7f:ef:33:3c:08:70:06:65:71:19:79:59:
6d:fb:11:1a:f9:c8:e8:7c:eb:98:9f:ef:fe:0e:d7:
a8:95:0b:f8:29:76:ff:78:43:19:85:a8:95:fa:95:
5f:d9:5b:57:8e:d5:61:59:f0:0c:a8:b4:e5:3c:b9:
1c:6f:00:75:22:12:b5:a1:33:eb:aa:f8:62:06:c2:
68:14:80:63:92:20:ee:fa:2b:f9:6b:62:57:52:e0:
a7:cc:61:05:89:0a:54:98:de:5a:44:a8:ca:70:2d:
3b:31:d0:87:c3:c7:14:cd:95:de:1d:0a:fa:5a:9f:
e5:aa:2d:10:a5:c2:7c:0f:c0:b4:92:df:78:d3:a7:
cc:22:62:af:50:45:86:2f:da:89:75:95:d5:30:e7:
5c:1b:d3:cd:16:21:0f:f3:37:55:3c:09:bb:e0:3f:
c8:ca:a0:56:c8:be:64:fa:e1:d3:b2:fb:39:ee:50:
5e:a4:af:b9:d1:be:c1:d6:da:e5:17:ef:21:d9:c1:
81:bc:e9:91:48:85:98:ed:58:4f:8b:47:f3:cd:cf:
3f:37:96:8c:22:f4:20:2f:fa:51:4f:92:0b:92:67:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9A:3A:42:ED:FC:FD:47:FD:34:7C:41:0B:E9:94:86:5F:EB:50:46
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:90:70:a1:d9:dd:a2:19:32:af:e7:ca:e2:87:32:51:54:
bd:76:7b:3f:3e:4e:21:f7:b5:4b:a1:93:84:57:a9:00:db:c1:
a3:fd:45:e4:70:fa:48:b1:a3:70:e1:44:dc:7d:51:4a:9b:4a:
9e:53:c0:7e:9e:f4:35:71:44:3e:f4:9b:ff:eb:b1:04:bd:0d:
fa:78:c4:a9:c8:6d:dc:b9:03:eb:c3:03:63:8e:94:dd:dc:d4:
54:4c:02:05:6c:f7:3c:3d:ff:03:8b:21:b6:23:a6:68:53:1c:
33:dd:94:86:26:71:27:58:3f:80:f0:20:fd:f3:94:5d:10:62:
cf:d9:62:c9:3b:6c:47:7e:be:84:47:0d:1a:2e:c4:d1:93:ef:
64:62:cb:2a:16:7a:8a:ea:b9:b0:22:8f:72:1b:0c:37:b0:e9:
ca:67:a3:49:70:5d:94:53:d3:16:2c:32:06:de:18:26:c4:be:
d5:99:46:80:55:e8:60:dc:30:26:6a:53:1f:d7:59:c2:a6:df:
eb:12:19:69:48:e4:58:7d:de:34:0d:d3:f7:e7:11:70:e0:86:
57:de:49:ee:52:f1:75:d5:50:32:8e:4d:e5:ac:00:09:c3:c5:
fc:b7:21:c8:7e:30:fb:18:8a:0e:7f:dc:7f:c4:59:b5:a8:c4:
2b:92:a9:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdAQpiEnBhKn950sQiPTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZWJmZDg5MTdiNThmMDY4NmQ5M2ViNDhkZTQyMWVjMDEz
NzBhYzkwHhcNMjUxMTA0MDYwMDQwWhcNMjUxMTA1MDYwMDQwWjAzMTEwLwYDVQQD
EygyNzlhM2E0MmVkZmNmZDQ3ZmQzNDdjNDEwYmU5OTQ4NjVmZWI1MDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmm8ypEcWdHTlyxJKYEblwh64V/3
zE/h1XO37ySm7ch/7zM8CHAGZXEZeVlt+xEa+cjofOuYn+/+DteolQv4KXb/eEMZ
haiV+pVf2VtXjtVhWfAMqLTlPLkcbwB1IhK1oTPrqvhiBsJoFIBjkiDu+iv5a2JX
UuCnzGEFiQpUmN5aRKjKcC07MdCHw8cUzZXeHQr6Wp/lqi0QpcJ8D8C0kt9406fM
ImKvUEWGL9qJdZXVMOdcG9PNFiEP8zdVPAm74D/IyqBWyL5k+uHTsvs57lBepK+5
0b7B1trlF+8h2cGBvOmRSIWY7VhPi0fzzc8/N5aMIvQgL/pRT5ILkmeIRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeaOkLt/P1H/TR8QQvplIZf61BGMB8GA1UdIwQY
MBaAFELr/YkXtY8Ghtk+tI3kIewBNwrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNDI4MWUtZTFlYS00ZjY5LWI1M2Qt
N2YwMzM4ZTQ5ZWUxLzEvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNDI4MWUtZTFlYS00ZjY5LWI1M2QtN2YwMzM4ZTQ5ZWUx
LzEvUXV2OWlSZTFqd2FHMlQ2MGplUWg3QUUzQ3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCWQcKHZ
3aIZMq/nyuKHMlFUvXZ7Pz5OIfe1S6GThFepANvBo/1F5HD6SLGjcOFE3H1RSptK
nlPAfp70NXFEPvSb/+uxBL0N+njEqcht3LkD68MDY46U3dzUVEwCBWz3PD3/A4sh
tiOmaFMcM92UhiZxJ1g/gPAg/fOUXRBiz9liyTtsR36+hEcNGi7E0ZPvZGLLKhZ6
iuq5sCKPchsMN7DpymejSXBdlFPTFiwyBt4YJsS+1ZlGgFXoYNwwJmpTH9dZwqbf
6xIZaUjkWH3eNA3T9+cRcOCGV95J7lLxddVQMo5N5awACcPF/LchyH4w+xiKDn/c
f8RZtajEK5KpQQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:56 2025 by rpki-client