Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
File: q_CoT_j1BX-Ukd775q1V7q6YzAY.mft (raw, json)
Hash identifier: mSRTc34mWahO5OcPoJMW0aKJ5hKhVe+gW3I82yxOrIk=
Subject key identifier: FE:D3:F0:5F:2A:98:31:29:BA:77:9D:AF:C3:D2:B2:02:A9:D5:FD:B3
Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Certificate serial: 019A4EF525172CECE8EF7951D5B51D7B09A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
Manifest number: 1106
Signing time: Tue 04 Nov 2025 13:01:19 +0000
Manifest this update: Tue 04 Nov 2025 13:01:19 +0000
Manifest next update: Wed 05 Nov 2025 13:01:19 +0000
Files and hashes: 1: MjzHW04MNpWP93ktfKv3g1wY_yY.roa (hash: sTUqFaDMKCqi+ntmnIAR8vXErg/0YN5V/YZHZNxvcNw=)
2: q_CoT_j1BX-Ukd775q1V7q6YzAY.crl (hash: 7w1ND4ujeKhYpp6sghPD6cIdJde6Z1n1cob3dzQN4ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:25:17:2c:ec:e8:ef:79:51:d5:b5:1d:7b:09:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Validity
Not Before: Nov 4 13:01:19 2025 GMT
Not After : Nov 5 13:01:19 2025 GMT
Subject: CN=fed3f05f2a983129ba779dafc3d2b202a9d5fdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:06:66:db:c2:82:be:b2:26:a4:85:3e:81:
d8:21:47:ec:5d:e2:06:da:03:ce:de:41:19:41:75:
58:3a:de:83:53:0f:cb:22:29:31:de:7d:94:7f:0e:
18:6f:31:c0:d8:30:c6:0d:38:df:d3:6c:8c:0a:ab:
e7:9c:2e:48:78:e9:5b:de:03:8b:3e:2a:9a:d4:c7:
f3:7c:0f:f2:81:cc:34:2a:13:36:c6:a3:7f:6a:ac:
27:3a:d9:80:19:d0:b2:af:a6:02:2e:f2:2e:7a:ec:
3c:f5:44:0d:af:59:47:12:2b:72:48:b0:cf:56:78:
87:d9:c5:6d:5c:7e:f6:5f:ea:82:05:d8:87:16:80:
a6:63:0c:60:71:b9:65:41:c8:b1:cd:f7:98:d5:7e:
8d:1e:81:da:28:46:23:98:24:09:b7:a5:01:69:35:
dc:94:3b:bd:18:2e:1c:5a:dc:d1:ca:8c:b6:78:c6:
89:e7:fa:60:3c:40:ad:fc:e6:f1:ab:1e:39:e7:e6:
b9:e9:1d:76:ec:9b:8e:8d:55:a6:e3:a6:10:d9:ee:
39:b8:ca:4e:cf:02:46:06:e5:ed:d6:70:66:7e:9e:
f0:23:86:f6:26:58:3a:a8:70:39:cb:5d:f0:f0:74:
c9:1f:f4:f2:c2:38:1c:69:69:b4:c5:6f:f6:90:a5:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D3:F0:5F:2A:98:31:29:BA:77:9D:AF:C3:D2:B2:02:A9:D5:FD:B3
X509v3 Authority Key Identifier:
keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f2:f6:05:84:ed:37:1f:e6:ad:a9:00:d0:ab:51:28:f2:30:
46:79:ff:33:32:f5:67:04:9c:04:c7:fb:fe:78:bf:dc:25:42:
85:6d:ca:66:e5:bf:e7:c1:7e:66:e6:1f:be:d6:50:73:e8:52:
38:bc:95:6c:2c:92:95:93:54:3b:d5:d7:f8:4c:94:50:eb:d9:
bb:35:03:9c:86:0c:92:6f:44:69:32:a8:30:e2:6f:a9:1e:25:
fa:56:ad:de:a6:25:ed:a8:99:cf:84:9d:24:43:d6:75:43:1a:
99:95:b3:f2:e1:87:2e:a0:37:76:a6:72:de:ca:ca:9f:36:e4:
b2:1e:55:a1:25:d3:3a:58:ba:8b:16:75:33:37:65:0c:bc:20:
85:ad:b0:fa:fa:99:31:7e:3d:df:83:72:f3:6a:97:9b:c3:e2:
82:fd:f2:e7:8e:e5:cb:e1:b6:5c:83:bd:47:9d:42:ab:04:20:
c5:ee:51:5c:eb:20:68:c3:98:75:17:b8:90:59:71:8f:d2:51:
47:fe:a1:6a:17:73:ea:fc:98:6f:89:fa:ac:13:9c:91:ad:26:
05:61:96:4a:1f:d1:8a:44:af:b2:ff:46:35:93:c4:34:99:b9:
2e:2d:6f:fe:6c:4c:95:f1:39:8f:29:20:24:bd:38:a3:bf:f3:
da:74:fd:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9SUXLOzo73lR1bUdewmhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZjBhODRmZjhmNTA1N2Y5NDkxZGVmYmU2YWQ1NWVlYWU5
OGNjMDYwHhcNMjUxMTA0MTMwMTE5WhcNMjUxMTA1MTMwMTE5WjAzMTEwLwYDVQQD
EyhmZWQzZjA1ZjJhOTgzMTI5YmE3NzlkYWZjM2QyYjIwMmE5ZDVmZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLcGZtvCgr6yJqSFPoHYIUfsXeIG
2gPO3kEZQXVYOt6DUw/LIikx3n2Ufw4YbzHA2DDGDTjf02yMCqvnnC5IeOlb3gOL
Piqa1MfzfA/ygcw0KhM2xqN/aqwnOtmAGdCyr6YCLvIueuw89UQNr1lHEitySLDP
VniH2cVtXH72X+qCBdiHFoCmYwxgcbllQcixzfeY1X6NHoHaKEYjmCQJt6UBaTXc
lDu9GC4cWtzRyoy2eMaJ5/pgPECt/Obxqx455+a56R127JuOjVWm46YQ2e45uMpO
zwJGBuXt1nBmfp7wI4b2Jlg6qHA5y13w8HTJH/TywjgcaWm0xW/2kKU95QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7T8F8qmDEpunedr8PSsgKp1f2zMB8GA1UdIwQY
MBaAFKvwqE/49QV/lJHe++atVe6umMwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mOThiZDQtZGUwNy00MmNkLTk4NDgt
OTQ0Y2ExYTgwYjE4LzEvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mOThiZDQtZGUwNy00MmNkLTk4NDgtOTQ0Y2ExYTgwYjE4
LzEvcV9Db1RfajFCWC1Va2Q3NzVxMVY3cTZZekFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfL2BYTt
Nx/mrakA0KtRKPIwRnn/MzL1ZwScBMf7/ni/3CVChW3KZuW/58F+ZuYfvtZQc+hS
OLyVbCySlZNUO9XX+EyUUOvZuzUDnIYMkm9EaTKoMOJvqR4l+lat3qYl7aiZz4Sd
JEPWdUMamZWz8uGHLqA3dqZy3srKnzbksh5VoSXTOli6ixZ1MzdlDLwgha2w+vqZ
MX4934Ny82qXm8Pigv3y547ly+G2XIO9R51CqwQgxe5RXOsgaMOYdRe4kFlxj9JR
R/6hahdz6vyYb4n6rBOcka0mBWGWSh/RikSvsv9GNZPENJm5Li1v/mxMlfE5jykg
JL04o7/z2nT9dQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:31 2025 by rpki-client