Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: BDgbCkcSFduR+VCTkzNDO+z4PyVEkEuKnKRN26Bd7DI=
Subject key identifier: CF:D5:4A:67:5B:D5:91:15:2B:C9:C7:DD:AB:D8:C2:40:94:94:1A:FB
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 019A71EEEC562A2BAAE3C0D8AC3CACDC7737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 0970
Signing time: Tue 11 Nov 2025 08:01:14 +0000
Manifest this update: Tue 11 Nov 2025 08:01:14 +0000
Manifest next update: Wed 12 Nov 2025 08:01:14 +0000
Files and hashes: 1: f7H4NvJn5XG9ZEVLvo3rzyryem0.roa (hash: FIvnUTIH/WyzVRn7SNngTErOpdYKzvrkMjSyoAbXEio=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: /zWigW6nBlLwRy/AFtalL1OQVwH6rPKxKEgx1CjaAQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ec:56:2a:2b:aa:e3:c0:d8:ac:3c:ac:dc:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Nov 11 08:01:14 2025 GMT
Not After : Nov 12 08:01:14 2025 GMT
Subject: CN=cfd54a675bd591152bc9c7ddabd8c24094941afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ff:64:bf:30:e5:07:48:aa:13:54:ba:7f:72:
cf:3e:d4:3a:0b:6e:35:1a:5f:59:32:ed:ae:38:c9:
bc:f4:9c:81:e4:f1:22:29:2c:ba:3d:02:86:9b:0b:
a1:65:b1:7d:2c:96:73:82:8c:bc:9f:fe:f0:e6:f2:
ce:e8:27:da:25:e1:01:0a:d3:56:07:8e:55:0a:0e:
fe:24:35:c2:cf:1d:b6:8c:64:06:04:99:8f:3a:43:
be:af:45:7a:da:8c:b8:4e:15:5a:5a:a4:f2:94:b0:
a8:5f:a6:ba:bd:cd:38:67:58:b9:80:7c:6d:de:7b:
af:2a:8f:04:d0:05:a1:d9:d3:66:cb:9c:a1:e8:ce:
02:30:3a:20:e9:53:f3:e8:81:33:e4:54:4a:f6:62:
59:0b:be:bb:47:ce:0b:6f:9d:e4:b9:73:73:9a:93:
83:a0:b2:d3:67:5e:b9:6e:37:d8:e2:22:90:91:25:
96:a9:20:ee:47:3e:fd:e8:f1:f1:e1:bb:16:ce:39:
eb:20:21:09:a2:cf:4a:0d:44:4e:63:78:d7:82:80:
d8:6c:4c:50:02:0c:f3:32:1c:96:75:e0:aa:24:66:
2e:44:4d:66:11:75:00:d3:8f:90:78:0f:81:e9:67:
6a:04:90:d6:a4:13:4c:24:67:17:75:8c:97:81:92:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D5:4A:67:5B:D5:91:15:2B:C9:C7:DD:AB:D8:C2:40:94:94:1A:FB
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ad:e6:10:63:bd:43:a7:f5:34:d8:14:51:37:ca:91:b7:c7:
d3:65:11:f2:a8:c6:9d:5e:7a:4e:ce:4f:6a:fb:a6:b2:0d:f9:
c8:e6:be:88:2f:33:12:dd:18:4d:c6:3f:1e:0b:df:aa:60:0f:
28:81:f0:34:0b:1d:61:72:96:93:93:a1:42:75:a0:23:af:9e:
71:97:33:e1:84:83:ed:ba:fa:94:f0:26:77:cd:eb:c8:48:27:
c5:88:cd:50:6f:bd:f4:60:90:72:63:6b:b4:25:24:69:9c:15:
02:64:c4:e2:7a:cb:71:9c:83:49:00:6f:80:47:c2:2a:6f:0f:
b3:5c:ca:c1:11:06:21:97:3d:58:4c:63:e1:8f:72:7b:9a:9d:
b1:86:ea:a0:4d:c2:b0:fa:e7:70:44:c7:75:9f:bb:bc:5f:81:
ad:43:ec:40:ea:04:9b:8a:7a:2f:0e:a0:0b:69:a2:23:4d:25:
e5:45:67:19:43:9f:53:3b:5f:2e:84:1c:c4:4a:39:16:52:bf:
2a:e7:e2:5b:15:dc:03:3f:f6:74:21:03:fd:14:26:aa:83:c2:
68:51:f0:69:bd:2a:8f:b2:c3:b4:18:7b:0b:43:e8:d3:12:84:
78:7a:89:0d:77:c9:68:c7:f2:fd:2d:a8:36:e3:39:d3:62:50:
9a:40:48:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uxWKiuq48DYrDys3Hc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzIyM2ZiMTk0MjExNWU0OGE5NzU0MjA3MjkyZDAwYTA4
MmVjZGYwHhcNMjUxMTExMDgwMTE0WhcNMjUxMTEyMDgwMTE0WjAzMTEwLwYDVQQD
EyhjZmQ1NGE2NzViZDU5MTE1MmJjOWM3ZGRhYmQ4YzI0MDk0OTQxYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8v9kvzDlB0iqE1S6f3LPPtQ6C241
Gl9ZMu2uOMm89JyB5PEiKSy6PQKGmwuhZbF9LJZzgoy8n/7w5vLO6CfaJeEBCtNW
B45VCg7+JDXCzx22jGQGBJmPOkO+r0V62oy4ThVaWqTylLCoX6a6vc04Z1i5gHxt
3nuvKo8E0AWh2dNmy5yh6M4CMDog6VPz6IEz5FRK9mJZC767R84Lb53kuXNzmpOD
oLLTZ165bjfY4iKQkSWWqSDuRz796PHx4bsWzjnrICEJos9KDUROY3jXgoDYbExQ
AgzzMhyWdeCqJGYuRE1mEXUA04+QeA+B6WdqBJDWpBNMJGcXdYyXgZJN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/VSmdb1ZEVK8nH3avYwkCUlBr7MB8GA1UdIwQY
MBaAFKrCI/sZQhFeSKl1QgcpLQCgguzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82MGViNDgtMjc5ZC00YWZlLThkOGEt
MWRhYTk1MWM3MWI3LzEvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82MGViNDgtMjc5ZC00YWZlLThkOGEtMWRhYTk1MWM3MWI3
LzEvcXNJai14bENFVjVJcVhWQ0J5a3RBS0NDN044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYq3mEGO9
Q6f1NNgUUTfKkbfH02UR8qjGnV56Ts5Pavumsg35yOa+iC8zEt0YTcY/HgvfqmAP
KIHwNAsdYXKWk5OhQnWgI6+ecZcz4YSD7br6lPAmd83ryEgnxYjNUG+99GCQcmNr
tCUkaZwVAmTE4nrLcZyDSQBvgEfCKm8Ps1zKwREGIZc9WExj4Y9ye5qdsYbqoE3C
sPrncETHdZ+7vF+BrUPsQOoEm4p6Lw6gC2miI00l5UVnGUOfUztfLoQcxEo5FlK/
KufiWxXcAz/2dCED/RQmqoPCaFHwab0qj7LDtBh7C0Po0xKEeHqJDXfJaMfy/S2o
NuM502JQmkBIAg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:33 2025 by rpki-client