Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: gOJjA3cNd8sqkJuZc0J6gqjXKS8650g/JWkdWrIEbZs=
Subject key identifier: D3:BA:B8:72:54:33:CD:C7:F2:B6:35:C2:F1:50:2A:CE:D1:0B:24:0F
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 019A2C314DD6E06DE0035C34913AD76148D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 16FF
Signing time: Tue 28 Oct 2025 19:00:19 +0000
Manifest this update: Tue 28 Oct 2025 19:00:19 +0000
Manifest next update: Wed 29 Oct 2025 19:00:19 +0000
Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: Ww/YAQZn8VUvqoHKGjp5L2P2mWPVKjvH6m4DBSpAiys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:4d:d6:e0:6d:e0:03:5c:34:91:3a:d7:61:48:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Oct 28 19:00:19 2025 GMT
Not After : Oct 29 19:00:19 2025 GMT
Subject: CN=d3bab8725433cdc7f2b635c2f1502aced10b240f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:98:12:51:0c:25:60:e3:bb:a8:89:41:8e:
42:84:d1:e3:70:2a:c2:4c:71:3b:d6:22:64:28:a7:
16:ba:92:df:a5:2e:35:9a:72:28:6c:c0:34:76:d3:
9c:ff:fc:5f:91:5d:19:77:11:37:e8:ac:eb:ff:92:
43:ad:1a:b2:6e:35:58:08:64:e8:69:26:74:41:4d:
35:30:84:94:d7:b5:3c:25:ff:7d:25:23:d1:05:fa:
8e:85:7d:dd:f4:68:1a:31:11:8d:c3:91:b9:bb:cb:
7b:86:e5:ef:c5:3f:01:2b:63:c2:62:59:73:25:d1:
e6:23:41:36:59:93:82:af:ca:ee:50:ad:4c:06:ab:
a8:9d:6e:cd:77:8a:33:bd:2d:dd:cd:17:3a:4d:d2:
13:ed:26:f7:e4:7b:40:e1:fc:3a:21:a0:f9:23:98:
15:f4:8a:28:a9:1c:67:3f:18:7b:6e:25:63:e7:ba:
d8:7c:18:2e:0e:6a:9e:65:31:16:7d:ae:8a:a8:b0:
66:1f:5e:c6:ab:48:81:f3:f2:c3:90:38:a4:86:e4:
7b:87:a0:dd:e0:0b:6e:18:62:0f:47:d9:7d:34:f3:
62:eb:96:22:3b:ba:a4:ad:0f:7f:d1:9e:7b:a1:d7:
7b:ba:16:0d:82:3a:4f:33:f5:3c:a8:d7:99:44:fc:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BA:B8:72:54:33:CD:C7:F2:B6:35:C2:F1:50:2A:CE:D1:0B:24:0F
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:5c:eb:7b:d3:08:df:5a:84:65:93:95:b7:08:9a:87:f0:49:
0c:18:9f:ff:17:78:6a:36:5c:96:45:22:f1:a1:83:20:26:02:
63:71:ca:c2:38:64:8e:bb:79:da:63:9a:fe:3b:10:0d:a9:93:
12:65:d7:de:93:46:d6:4c:4c:3a:c3:6b:28:95:10:9c:ad:78:
28:34:87:7f:cc:96:73:a7:f0:42:52:52:2f:db:94:e1:a5:e2:
0f:c6:44:cd:9a:06:a6:5b:5f:af:7c:88:b1:19:ea:c4:c5:d2:
ca:c6:88:f4:27:8d:bb:1f:0c:b3:e9:62:da:e7:37:28:b0:0b:
dd:21:c1:4c:a5:d8:1e:c5:93:ab:8b:ee:71:88:d8:72:a2:5f:
b3:b5:df:64:2b:8e:8d:17:40:b9:dc:4b:a5:c8:f5:7a:c4:c5:
26:14:b0:1d:e3:a4:56:7b:86:4b:33:65:b8:ae:f6:25:16:1b:
8c:b3:7f:d9:8c:ae:a3:e5:12:0e:bf:58:b5:34:7d:31:db:36:
62:84:f4:c8:9c:80:e0:9f:05:f3:89:58:05:7c:3a:e7:16:f2:
8e:19:73:2b:2d:d0:c3:6e:ef:ad:5c:71:5e:41:bd:42:24:8b:
0d:1b:f0:d9:32:4c:7e:5d:ce:50:cc:e2:af:a8:46:b6:db:8d:
16:76:d0:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosMU3W4G3gA1w0kTrXYUjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzZhZjBjMjliZWJjN2M0ODVjZjgwMDFkYTlmMTk5MzBh
Y2U0NWQwHhcNMjUxMDI4MTkwMDE5WhcNMjUxMDI5MTkwMDE5WjAzMTEwLwYDVQQD
EyhkM2JhYjg3MjU0MzNjZGM3ZjJiNjM1YzJmMTUwMmFjZWQxMGIyNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KyYElEMJWDju6iJQY5ChNHjcCrC
THE71iJkKKcWupLfpS41mnIobMA0dtOc//xfkV0ZdxE36Kzr/5JDrRqybjVYCGTo
aSZ0QU01MISU17U8Jf99JSPRBfqOhX3d9GgaMRGNw5G5u8t7huXvxT8BK2PCYllz
JdHmI0E2WZOCr8ruUK1MBquonW7Nd4ozvS3dzRc6TdIT7Sb35HtA4fw6IaD5I5gV
9IooqRxnPxh7biVj57rYfBguDmqeZTEWfa6KqLBmH17Gq0iB8/LDkDikhuR7h6Dd
4AtuGGIPR9l9NPNi65YiO7qkrQ9/0Z57odd7uhYNgjpPM/U8qNeZRPwqNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO6uHJUM83H8rY1wvFQKs7RCyQPMB8GA1UdIwQY
MBaAFKrGrwwpvrx8SFz4AB2p8ZkwrORdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMt
OTM0NzU5MTkxMGE4LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9mOGM0NDUtMGFhYi00MDg3LWEwZDMtOTM0NzU5MTkxMGE4
LzEvcXNhdkRDbS12SHhJWFBnQUhhbnhtVENzNUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplzre9MI
31qEZZOVtwiah/BJDBif/xd4ajZclkUi8aGDICYCY3HKwjhkjrt52mOa/jsQDamT
EmXX3pNG1kxMOsNrKJUQnK14KDSHf8yWc6fwQlJSL9uU4aXiD8ZEzZoGpltfr3yI
sRnqxMXSysaI9CeNux8Ms+li2uc3KLAL3SHBTKXYHsWTq4vucYjYcqJfs7XfZCuO
jRdAudxLpcj1esTFJhSwHeOkVnuGSzNluK72JRYbjLN/2Yyuo+USDr9YtTR9Mds2
YoT0yJyA4J8F84lYBXw65xbyjhlzKy3Qw27vrVxxXkG9QiSLDRvw2TJMfl3OUMzi
r6hGttuNFnbQUA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 03:02:50 2025 by rpki-client