Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json)
Hash identifier: tWpI4JUfFaZJQSACh8wMxM6qBANrDXH5pTl7bG7w0c8=
Subject key identifier: C6:12:B0:6E:47:F6:84:02:08:89:7E:A7:0E:27:A6:7A:32:DC:D2:A7
Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Certificate serial: 019A515114E84B9D8EC16CD59B397EFAB450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 00:00:59 +0000
Manifest this update: Wed 05 Nov 2025 00:00:59 +0000
Manifest next update: Thu 06 Nov 2025 00:00:59 +0000
Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: rZFq0D2CeKz962eedd21ocyAWUT2vyxmBySoG6t9XtI=)
2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=)
3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:14:e8:4b:9d:8e:c1:6c:d5:9b:39:7e:fa:b4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403
Validity
Not Before: Nov 5 00:00:59 2025 GMT
Not After : Nov 6 00:00:59 2025 GMT
Subject: CN=c612b06e47f6840208897ea70e27a67a32dcd2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:b3:5b:84:ab:f0:f5:3a:d5:76:e8:a1:d6:
f7:68:45:52:02:90:b1:9e:75:ba:f8:34:32:dd:7a:
60:35:96:df:4f:98:7b:07:f1:cc:20:21:f0:03:f2:
af:c8:7f:62:7a:26:36:30:84:ba:e8:20:de:cd:46:
97:64:08:83:50:28:15:d1:a0:ae:25:67:fe:f1:6e:
3f:cf:e5:66:89:09:e8:a9:6f:88:e9:5e:79:13:03:
98:77:bc:6c:b1:31:43:0c:ea:24:f6:d2:81:b1:4e:
59:b5:ad:55:1f:9e:7c:f2:7e:00:b8:d1:82:b9:8e:
05:07:b9:ea:7d:47:ec:87:32:45:e2:12:67:a8:f3:
dc:76:6f:40:7b:17:4d:18:9f:ce:3f:92:84:40:48:
98:5b:3a:38:e2:aa:57:66:cc:a6:1d:bb:da:ef:5c:
ab:c8:3b:f5:a8:39:b7:f8:8a:bc:61:a7:4e:f9:d7:
10:2c:df:ce:5c:c9:92:c3:17:05:00:ca:f2:ec:ee:
01:ae:c4:e7:d6:bf:20:8e:11:7d:10:78:3d:61:df:
39:25:ac:e1:42:fd:6b:7b:65:ce:8c:fa:0c:84:40:
6e:47:96:18:c9:7b:3c:24:62:1d:43:3b:c6:12:c5:
18:4f:8a:ba:91:e8:a7:e8:86:23:c5:49:08:d9:0a:
11:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:B0:6E:47:F6:84:02:08:89:7E:A7:0E:27:A6:7A:32:DC:D2:A7
X509v3 Authority Key Identifier:
keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3f:30:1f:7e:5b:27:6d:f3:63:0f:b3:58:2a:2e:eb:51:d6:
1b:17:1f:0c:31:26:4d:be:f9:8e:74:05:54:1d:3f:27:63:b2:
ff:ce:2d:3f:d7:bb:8f:b7:8e:0e:19:f7:ad:59:e1:fe:0b:fe:
30:db:7b:dd:37:ba:10:33:53:d5:42:40:cc:e8:23:66:78:ea:
92:9f:a8:f4:82:cc:42:c8:32:57:d8:e0:15:d3:aa:a5:55:6f:
6a:fc:0a:6d:74:b1:f5:83:36:01:56:1a:00:f6:74:10:85:41:
b9:17:ba:51:d9:31:8f:4d:a7:0b:12:e6:18:5a:bd:23:c5:3a:
05:1e:e6:b2:8f:a7:a3:9a:74:a5:47:66:b4:56:1e:d0:0a:95:
63:fd:97:82:9b:38:45:5d:83:57:31:c2:88:84:a4:08:21:aa:
68:15:0b:e1:4c:fe:c0:63:51:ee:5d:70:66:3a:ad:32:f4:47:
32:c0:d2:dc:fe:78:2b:c6:27:81:7b:39:e8:19:dd:ac:82:50:
2b:61:98:52:77:d3:03:1a:cb:a7:4b:4d:f2:5c:e7:25:0f:ab:
74:45:4a:8e:eb:07:4f:b7:b4:d5:66:c2:86:93:63:d8:7e:17:
6c:d1:69:d9:c4:0c:02:63:c8:b0:9c:41:01:81:b6:35:af:0b:
ed:b1:f2:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRURToS52OwWzVmzl++rRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMDEwZGEzNTc2MjQyMzI0Y2VmYjJjODFjMTMzOWE2YzBl
M2I0MDMwHhcNMjUxMTA1MDAwMDU5WhcNMjUxMTA2MDAwMDU5WjAzMTEwLwYDVQQD
EyhjNjEyYjA2ZTQ3ZjY4NDAyMDg4OTdlYTcwZTI3YTY3YTMyZGNkMmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPyzW4Sr8PU61Xboodb3aEVSApCx
nnW6+DQy3XpgNZbfT5h7B/HMICHwA/KvyH9ieiY2MIS66CDezUaXZAiDUCgV0aCu
JWf+8W4/z+VmiQnoqW+I6V55EwOYd7xssTFDDOok9tKBsU5Zta1VH5588n4AuNGC
uY4FB7nqfUfshzJF4hJnqPPcdm9AexdNGJ/OP5KEQEiYWzo44qpXZsymHbva71yr
yDv1qDm3+Iq8YadO+dcQLN/OXMmSwxcFAMry7O4BrsTn1r8gjhF9EHg9Yd85Jazh
Qv1re2XOjPoMhEBuR5YYyXs8JGIdQzvGEsUYT4q6kein6IYjxUkI2QoRlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYSsG5H9oQCCIl+pw4npnoy3NKnMB8GA1UdIwQY
MBaAFNEBDaNXYkIyTO+yyBwTOabA47QDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAt
YTcwNDEyZmJjODMyLzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAtYTcwNDEyZmJjODMy
LzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj8wH35b
J23zYw+zWCou61HWGxcfDDEmTb75jnQFVB0/J2Oy/84tP9e7j7eODhn3rVnh/gv+
MNt73Te6EDNT1UJAzOgjZnjqkp+o9ILMQsgyV9jgFdOqpVVvavwKbXSx9YM2AVYa
APZ0EIVBuRe6Udkxj02nCxLmGFq9I8U6BR7mso+no5p0pUdmtFYe0AqVY/2Xgps4
RV2DVzHCiISkCCGqaBUL4Uz+wGNR7l1wZjqtMvRHMsDS3P54K8YngXs56BndrIJQ
K2GYUnfTAxrLp0tN8lznJQ+rdEVKjusHT7e01WbChpNj2H4XbNFp2cQMAmPIsJxB
AYG2Na8L7bHyHw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:31:15 2025 by rpki-client