Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: nwuMWI2P5YSyBr+HyjMxRABDhZ7stFjUBUgZjVRTgNE=
Subject key identifier: 00:D1:ED:E9:D8:C2:BA:E4:A0:48:57:42:54:58:6C:D7:AD:66:FB:CF
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 019A2553FA8C616A72B68DC49B8D93C8CAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 11D1
Signing time: Mon 27 Oct 2025 11:00:51 +0000
Manifest this update: Mon 27 Oct 2025 11:00:51 +0000
Manifest next update: Tue 28 Oct 2025 11:00:51 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: YLLgfmPhKSWzsJRnWbn4OQrOrY3I5xTC5/mu97N7nPU=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:53:fa:8c:61:6a:72:b6:8d:c4:9b:8d:93:c8:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Oct 27 11:00:51 2025 GMT
Not After : Oct 28 11:00:51 2025 GMT
Subject: CN=00d1ede9d8c2bae4a048574254586cd7ad66fbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:a7:a1:1a:9d:19:08:59:28:40:37:d6:d5:
ef:e7:b7:5e:46:f4:3a:65:7a:29:96:62:4b:c2:7c:
73:75:62:b0:f7:04:2a:20:f3:2c:81:b6:c8:4a:31:
e5:46:d6:e9:9b:36:41:50:de:2a:32:6b:c1:19:3c:
cd:41:a8:d5:92:84:6b:13:ef:11:68:88:94:54:2c:
2e:1c:67:26:08:79:72:0e:76:a6:91:38:63:b2:62:
24:af:79:67:57:af:72:be:a4:28:c5:e4:09:7c:0c:
c6:1c:32:cb:10:e3:4b:30:46:03:17:95:7c:37:98:
71:35:e4:60:f8:04:c2:86:65:06:53:06:93:29:84:
c4:e9:3c:2a:53:fb:64:67:ab:9c:05:0a:47:f0:bd:
8c:4d:20:b0:33:d0:3c:3a:da:9a:ca:cd:9f:b2:a1:
cd:cd:ac:b9:70:94:ab:14:84:80:29:6d:87:f6:64:
d8:4f:64:d6:7a:bd:77:64:e6:86:0b:6b:fa:f1:1b:
7c:bf:7c:64:06:8d:e4:aa:d7:a6:ef:34:0a:d2:83:
d9:b3:13:0b:30:97:74:1f:c0:fd:cd:ac:dd:67:c6:
79:5d:a7:2c:e9:de:f4:8e:42:98:4e:b9:d3:49:ad:
4b:a3:47:e0:76:b9:37:55:b8:0e:81:1d:88:6f:35:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D1:ED:E9:D8:C2:BA:E4:A0:48:57:42:54:58:6C:D7:AD:66:FB:CF
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:16:95:d7:ad:23:b2:fe:f6:9c:29:ad:aa:ac:f8:dc:75:f9:
b6:62:f7:84:44:3b:da:4e:d4:66:b3:dd:d6:dc:81:54:28:c9:
c8:45:c8:01:e0:b1:71:60:b7:1f:ee:24:f2:72:9f:f4:c5:16:
b1:48:fa:b9:d7:05:d3:70:ab:55:3f:2c:b4:fb:b0:3e:bd:55:
07:f7:c2:bd:a4:09:7a:31:89:91:c7:e5:8d:fa:ad:78:77:62:
b3:9f:e6:1d:b3:39:48:c9:64:10:0f:9d:b6:7c:78:d6:1e:6b:
f6:5b:cd:70:6e:78:02:ba:b9:43:c1:e7:22:42:de:cb:7d:34:
10:72:ff:35:6e:62:96:21:b3:4d:4a:f0:94:d2:7e:b1:d0:6a:
c5:89:97:5d:ea:32:22:67:7a:5f:74:56:e9:9f:b9:0d:7a:ed:
e6:5e:55:97:7d:33:b6:6c:ce:ec:b4:40:26:13:35:cb:ce:6a:
49:3d:f0:0d:b7:91:52:02:ba:54:44:eb:da:4e:55:1a:73:8e:
21:bb:75:ca:96:a4:c3:ac:08:7b:44:95:fe:d6:17:61:08:3b:
ea:ca:db:ad:f1:85:cd:78:75:b4:54:c1:88:38:6a:38:ff:a7:
ae:42:9f:b9:c6:d3:2b:8c:f5:aa:41:9c:b8:e9:02:0f:65:ac:
de:42:17:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolU/qMYWpyto3Em42TyMrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi
MjRhYmQwHhcNMjUxMDI3MTEwMDUxWhcNMjUxMDI4MTEwMDUxWjAzMTEwLwYDVQQD
EygwMGQxZWRlOWQ4YzJiYWU0YTA0ODU3NDI1NDU4NmNkN2FkNjZmYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGOnoRqdGQhZKEA31tXv57deRvQ6
ZXoplmJLwnxzdWKw9wQqIPMsgbbISjHlRtbpmzZBUN4qMmvBGTzNQajVkoRrE+8R
aIiUVCwuHGcmCHlyDnamkThjsmIkr3lnV69yvqQoxeQJfAzGHDLLEONLMEYDF5V8
N5hxNeRg+ATChmUGUwaTKYTE6TwqU/tkZ6ucBQpH8L2MTSCwM9A8Otqays2fsqHN
zay5cJSrFISAKW2H9mTYT2TWer13ZOaGC2v68Rt8v3xkBo3kqtem7zQK0oPZsxML
MJd0H8D9zazdZ8Z5Xacs6d70jkKYTrnTSa1Lo0fgdrk3VbgOgR2IbzVzFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADR7enYwrrkoEhXQlRYbNetZvvPMB8GA1UdIwQY
MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt
NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz
LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhaV160j
sv72nCmtqqz43HX5tmL3hEQ72k7UZrPd1tyBVCjJyEXIAeCxcWC3H+4k8nKf9MUW
sUj6udcF03CrVT8stPuwPr1VB/fCvaQJejGJkcfljfqteHdis5/mHbM5SMlkEA+d
tnx41h5r9lvNcG54Arq5Q8HnIkLey300EHL/NW5iliGzTUrwlNJ+sdBqxYmXXeoy
Imd6X3RW6Z+5DXrt5l5Vl30ztmzO7LRAJhM1y85qST3wDbeRUgK6VETr2k5VGnOO
Ibt1ypakw6wIe0SV/tYXYQg76srbrfGFzXh1tFTBiDhqOP+nrkKfucbTK4z1qkGc
uOkCD2Ws3kIXfw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:33 2025 by rpki-client