Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: QWfcxCLGN3kG7bIalXnwujRclXvdRDlAhf7km/jMv1c=
Subject key identifier: 3E:79:D9:78:DB:B2:32:B9:15:82:42:38:A4:71:88:30:5C:C2:A5:BA
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 019A4D73D00B24EEE8391F8F0F9D5E833441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 08BD
Signing time: Tue 04 Nov 2025 06:00:26 +0000
Manifest this update: Tue 04 Nov 2025 06:00:26 +0000
Manifest next update: Wed 05 Nov 2025 06:00:26 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: Qs5wwZcLzV6dHuRT8QJ/IvDaNpNPOdWnDVr3TufamUg=)
2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=)
3: YiC719RdgSFZ3ft_dlKu9o3i3pA.roa (hash: Yo7K99mDy+e+tmI8kgteWK6dTlsGJMqoxxHo0QV2Flg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d0:0b:24:ee:e8:39:1f:8f:0f:9d:5e:83:34:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Nov 4 06:00:26 2025 GMT
Not After : Nov 5 06:00:26 2025 GMT
Subject: CN=3e79d978dbb232b915824238a47188305cc2a5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:b9:75:6b:c8:75:2c:d0:a2:43:f2:7a:7b:
f2:06:ad:01:3b:81:62:fd:cf:6e:85:c9:6a:9b:44:
f5:d6:39:4c:66:a2:48:9f:c9:b6:50:c0:92:38:61:
c9:38:66:4d:38:3e:99:04:9b:67:e4:b3:20:1f:86:
28:cd:ea:35:54:ed:d7:54:9d:f5:18:3f:7c:c9:9a:
6a:c5:15:ac:7e:90:ed:62:11:a6:eb:80:9c:6b:97:
b1:ea:2b:2e:31:0e:c8:f8:04:14:3c:97:fc:4b:69:
4e:64:94:0d:2d:3a:3c:2d:d3:ca:85:5f:9c:5d:0a:
e8:84:d5:68:5f:7c:fb:86:7c:68:f3:49:a6:a4:2b:
1c:ea:04:93:8b:11:8b:8b:61:f5:0c:b9:74:09:54:
41:b5:07:eb:b6:8c:6e:cb:a1:b7:6f:1b:9e:ce:45:
7f:10:33:15:29:bf:98:e8:d7:62:8d:b4:21:f4:b0:
84:77:bf:4f:f2:48:87:b4:f4:2c:5d:10:51:c0:e9:
29:81:99:8d:eb:95:b2:68:78:18:b2:e2:bb:87:1c:
04:74:16:3c:b6:83:2c:27:7d:b1:4b:3b:51:da:cf:
f3:9c:c5:1c:8c:a7:7f:42:d9:ee:36:fb:76:b5:77:
18:5a:24:13:b8:37:c3:d0:b2:7c:a3:39:b7:98:f3:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:D9:78:DB:B2:32:B9:15:82:42:38:A4:71:88:30:5C:C2:A5:BA
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cf:ef:75:ec:f7:bd:69:e9:ce:e2:b5:1b:d0:ff:e8:c4:c2:
b4:8d:3a:29:fa:6d:b4:c6:27:d2:5e:ea:21:eb:37:b3:6e:31:
7e:dc:6f:26:61:05:24:ed:2c:9d:7d:ef:06:e9:9e:2c:50:38:
e9:5a:b6:ce:08:8b:c0:f3:e1:ee:16:32:c2:a4:3a:13:79:19:
df:6b:d8:90:0e:98:cd:c4:92:88:08:59:71:46:ba:22:1a:fc:
d4:c3:ff:37:a8:2c:b3:c9:e6:e2:e1:ef:9e:bd:1d:1d:4c:66:
b2:4b:2d:ec:40:77:e8:df:4e:d7:6e:20:57:cd:16:d2:7d:23:
bc:35:ff:1d:8b:b0:4e:e4:04:c7:06:00:0a:4b:8e:dc:a1:49:
66:d8:81:ba:04:22:48:72:d7:da:35:e8:ee:62:d2:4c:6c:e4:
73:09:24:95:a1:10:ad:58:0c:45:29:89:e7:b9:62:32:ec:2f:
30:ed:1e:a2:ea:fd:19:3e:a9:fb:d1:7b:16:53:9d:2a:f7:6c:
c6:60:4c:b3:99:fd:3a:d0:e2:95:0b:08:1a:ab:34:bd:5a:f7:
1a:0a:40:15:24:90:c5:7c:7e:c2:26:11:ec:9a:20:41:30:56:
1d:28:ac:1c:62:d7:96:af:67:c7:94:fa:f8:4f:a7:93:3d:eb:
1a:81:11:90
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpNc9ALJO7oOR+PD51egzRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTZlNWU4NjAyM2M5YjMxNGVlNjUxMjkxZmFmZThjNmRk
NjlhODMwHhcNMjUxMTA0MDYwMDI2WhcNMjUxMTA1MDYwMDI2WjAzMTEwLwYDVQQD
EygzZTc5ZDk3OGRiYjIzMmI5MTU4MjQyMzhhNDcxODgzMDVjYzJhNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAa5dWvIdSzQokPyenvyBq0BO4Fi
/c9uhclqm0T11jlMZqJIn8m2UMCSOGHJOGZNOD6ZBJtn5LMgH4Yozeo1VO3XVJ31
GD98yZpqxRWsfpDtYhGm64Cca5ex6isuMQ7I+AQUPJf8S2lOZJQNLTo8LdPKhV+c
XQrohNVoX3z7hnxo80mmpCsc6gSTixGLi2H1DLl0CVRBtQfrtoxuy6G3bxuezkV/
EDMVKb+Y6NdijbQh9LCEd79P8kiHtPQsXRBRwOkpgZmN65WyaHgYsuK7hxwEdBY8
toMsJ32xSztR2s/znMUcjKd/QtnuNvt2tXcYWiQTuDfD0LJ8ozm3mPNhVQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD552XjbsjK5FYJCOKRxiDBcwqW6MB8GA1UdIwQY
MBaAFPqm5ehgI8mzFO5lEpH6/oxt1pqDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xYmw2R0FqeWJNVTdtVVNrZnItakczV21vTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMw
LTA4Mjc5NDU1Zjk0MS8xLzEtcWJsNkdBanliTVU3bVVTa2ZyLWpHM1dtb00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzAwL2MwNGQ5OS1kZTQ0LTQwYWItYTJjMC0wODI3OTQ1NWY5
NDEvMS8xLXFibDZHQWp5Yk1VN21VU2tmci1qRzNXbW9NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZM/v
dez3vWnpzuK1G9D/6MTCtI06KfpttMYn0l7qIes3s24xftxvJmEFJO0snX3vBume
LFA46Vq2zgiLwPPh7hYywqQ6E3kZ32vYkA6YzcSSiAhZcUa6Ihr81MP/N6gss8nm
4uHvnr0dHUxmskst7EB36N9O124gV80W0n0jvDX/HYuwTuQExwYACkuO3KFJZtiB
ugQiSHLX2jXo7mLSTGzkcwkklaEQrVgMRSmJ57liMuwvMO0eour9GT6p+9F7FlOd
KvdsxmBMs5n9OtDilQsIGqs0vVr3GgpAFSSQxXx+wiYR7JogQTBWHSisHGLXlq9n
x5T6+E+nkz3rGoERkA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 13:58:15 2025 by rpki-client