Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: oxpD9XqHkXoNb7Ob86TBGkKZEDLuLk43s7F30RdjJJg=
Subject key identifier: 47:52:FD:73:42:70:DD:16:66:B6:9F:DD:7D:9D:4E:59:3C:7D:B4:64
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019A4DAB081A27D87F72DCCDB3768FCE220F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 08D1
Signing time: Tue 04 Nov 2025 07:00:45 +0000
Manifest this update: Tue 04 Nov 2025 07:00:45 +0000
Manifest next update: Wed 05 Nov 2025 07:00:45 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: bpTKnr8/5XCZrQDrPk0TDvKDLwOS5FePsx8TMmiRvgk=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:08:1a:27:d8:7f:72:dc:cd:b3:76:8f:ce:22:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Nov 4 07:00:45 2025 GMT
Not After : Nov 5 07:00:45 2025 GMT
Subject: CN=4752fd734270dd1666b69fdd7d9d4e593c7db464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:d0:85:28:26:bd:af:3d:eb:86:b9:37:53:
b9:3e:95:20:fd:3f:39:85:23:6e:a3:44:00:3e:4e:
0c:58:48:62:d3:55:41:5c:cd:10:e7:64:00:df:21:
b0:0b:c9:de:8d:ec:39:8f:19:5e:e1:bf:3c:38:9a:
dc:a7:f4:ed:be:eb:e9:4d:62:47:9b:98:3b:27:13:
f3:bf:36:f9:78:31:3d:5b:9c:78:48:4e:87:ba:0f:
7d:2a:c1:46:2f:55:ee:fa:6a:17:17:d3:fb:fc:59:
46:cb:16:4d:d5:ec:2f:e4:b8:72:87:d1:5a:01:c2:
3a:15:58:ea:a5:7f:0a:e7:12:e4:62:00:53:75:63:
6d:3d:5c:81:7c:b0:8f:ff:d5:4c:ee:d1:6f:d1:b5:
69:d1:9d:05:79:dc:d6:85:8b:62:35:ff:2e:28:8b:
b6:ea:c9:8f:b8:e4:a7:26:7e:65:75:b0:d9:c6:5b:
ee:41:00:2d:7a:2b:05:bc:86:a9:66:57:b3:44:9d:
1a:a4:a6:13:78:9e:70:1a:dc:4e:bd:29:9d:4c:a8:
2f:ac:d5:b2:8d:b3:3a:b2:93:e7:c8:9f:f3:b9:47:
01:5a:2d:cc:ee:ad:e4:44:ba:32:5a:01:fe:10:9c:
ec:35:cc:c1:46:a3:49:dc:8c:0b:11:c8:ab:74:3f:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:52:FD:73:42:70:DD:16:66:B6:9F:DD:7D:9D:4E:59:3C:7D:B4:64
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:07:20:65:a0:90:3a:5d:5d:12:a5:f6:e7:52:8e:49:1a:79:
88:e7:6e:96:79:cf:6a:fe:bf:b9:1c:60:3a:50:af:da:5d:ee:
f3:15:20:a8:b6:fb:cb:fe:6b:14:ca:c2:1a:78:00:3a:27:03:
8f:e1:15:2e:00:ee:ab:b3:c0:9a:a4:be:ef:b1:86:31:32:0c:
9a:bc:08:5d:52:17:dd:0c:03:c2:8f:d3:50:62:ff:73:39:f4:
a6:22:bd:0d:a9:51:08:37:39:fc:3a:c7:99:59:7d:79:56:66:
9e:99:d1:1b:a7:ce:6c:21:f0:9d:07:15:6a:99:74:05:fb:f7:
87:86:7b:c7:7f:85:d4:f5:6a:4b:d4:8c:08:1b:20:87:0e:6d:
78:60:60:cf:71:6b:87:fd:65:5f:9d:a6:c9:71:b5:9e:7a:55:
a5:3a:67:5d:ff:4d:f2:b8:46:0e:09:96:a0:4e:af:52:4f:cf:
65:03:ff:78:96:61:a6:5b:86:0b:a1:05:5b:86:2b:23:a4:cf:
1a:d1:ae:31:6b:f2:5b:7d:4d:7e:5a:20:1c:e4:d2:f4:34:7b:
97:8e:53:33:40:34:01:42:5f:4d:07:0d:10:45:04:fb:94:20:
52:4e:73:da:b8:09:0f:49:58:f5:30:bc:57:ba:8f:c4:08:85:
86:79:52:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqwgaJ9h/ctzNs3aPziIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNmIyZDc0NDBmYjc4ODQ0Y2YwMTM1ZWM1MTgyYjNmNmY3
ODNhODYwHhcNMjUxMTA0MDcwMDQ1WhcNMjUxMTA1MDcwMDQ1WjAzMTEwLwYDVQQD
Eyg0NzUyZmQ3MzQyNzBkZDE2NjZiNjlmZGQ3ZDlkNGU1OTNjN2RiNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYfQhSgmva8964a5N1O5PpUg/T85
hSNuo0QAPk4MWEhi01VBXM0Q52QA3yGwC8nejew5jxle4b88OJrcp/TtvuvpTWJH
m5g7JxPzvzb5eDE9W5x4SE6Hug99KsFGL1Xu+moXF9P7/FlGyxZN1ewv5Lhyh9Fa
AcI6FVjqpX8K5xLkYgBTdWNtPVyBfLCP/9VM7tFv0bVp0Z0FedzWhYtiNf8uKIu2
6smPuOSnJn5ldbDZxlvuQQAteisFvIapZlezRJ0apKYTeJ5wGtxOvSmdTKgvrNWy
jbM6spPnyJ/zuUcBWi3M7q3kRLoyWgH+EJzsNczBRqNJ3IwLEcirdD+tawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdS/XNCcN0WZraf3X2dTlk8fbRkMB8GA1UdIwQY
MBaAFEJrLXRA+3iETPATXsUYKz9veDqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMt
MjU5MmExZWE2MTM4LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMtMjU5MmExZWE2MTM4
LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgcgZaCQ
Ol1dEqX251KOSRp5iOdulnnPav6/uRxgOlCv2l3u8xUgqLb7y/5rFMrCGngAOicD
j+EVLgDuq7PAmqS+77GGMTIMmrwIXVIX3QwDwo/TUGL/czn0piK9DalRCDc5/DrH
mVl9eVZmnpnRG6fObCHwnQcVapl0Bfv3h4Z7x3+F1PVqS9SMCBsghw5teGBgz3Fr
h/1lX52myXG1nnpVpTpnXf9N8rhGDgmWoE6vUk/PZQP/eJZhpluGC6EFW4YrI6TP
GtGuMWvyW31NflogHOTS9DR7l45TM0A0AUJfTQcNEEUE+5QgUk5z2rgJD0lY9TC8
V7qPxAiFhnlS9g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:17 2025 by rpki-client