Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File: qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier: RHryJFdb25NcoDOm6gqlxhImcKXBQRvHT+LL3IJ0kcw=
Subject key identifier: C7:8F:E4:8B:70:EA:4E:D7:59:33:FE:0A:33:71:38:8C:90:08:4B:08
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer: /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial: 019A725C938A3E939FD10CF478480C78C7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number: 05AE
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: 1Y6gi13nVAhafd9eg2B6Mo5dBMrFDvbpTgm+YCdHuqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:93:8a:3e:93:9f:d1:0c:f4:78:48:0c:78:c7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=c78fe48b70ea4ed75933fe0a3371388c90084b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:cb:41:75:49:70:98:d0:79:62:ab:0a:2b:
5e:fa:cc:39:3e:35:45:0b:87:f4:63:96:89:99:be:
74:2d:f7:4a:47:ad:79:ac:f3:0a:14:b3:2e:b9:0d:
8f:fc:91:a0:bb:ed:38:a2:dd:c2:97:fc:8f:5d:39:
9e:28:56:bb:8e:5b:c9:60:c3:56:14:6d:4c:74:99:
8a:17:b3:fe:56:b5:fe:7a:a4:b6:91:47:31:32:58:
d3:0e:7e:39:76:8c:07:ec:71:35:5a:24:26:93:64:
e6:81:cd:13:a2:d7:57:3e:2a:ea:98:ce:5f:2e:29:
c4:60:45:06:84:4f:53:f4:bb:d7:3b:9a:0d:35:90:
8c:77:b6:99:10:7c:79:c7:4d:62:11:de:5a:a3:c7:
0c:67:ba:68:12:7e:b0:85:0c:05:b9:a5:07:bf:0c:
39:6b:60:df:ad:44:3f:6e:be:1a:11:04:67:98:5f:
69:d4:00:5e:22:27:79:c1:e8:aa:21:f5:f3:3a:43:
7c:f3:ad:06:6f:22:f4:1e:62:e6:ef:5c:90:f2:c1:
83:0f:58:49:9f:99:24:49:aa:ca:9b:cc:81:91:0d:
05:4b:0a:d8:d1:0a:f2:f1:6e:46:a7:df:60:84:b8:
59:2c:f4:83:7f:1a:44:92:e9:19:03:0c:d0:8d:77:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8F:E4:8B:70:EA:4E:D7:59:33:FE:0A:33:71:38:8C:90:08:4B:08
X509v3 Authority Key Identifier:
keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:28:60:63:74:e7:59:88:f9:83:d9:a3:1e:b5:02:4c:f2:83:
19:fe:fb:90:64:e4:02:00:c7:f0:f0:f3:ea:f6:6a:df:bf:94:
7c:aa:68:6b:56:6d:8d:f5:e9:12:d0:c8:f6:ed:6c:08:28:fd:
c8:f7:31:d5:74:8c:6b:84:e3:6d:ec:b5:59:30:83:2c:92:e9:
cc:f8:c5:3e:ba:48:78:68:f7:2e:07:8b:9e:51:32:e8:87:86:
9d:0a:f6:c1:21:20:8e:84:7b:cb:0e:16:ba:31:03:c6:a9:70:
0f:88:2d:b1:16:de:66:b0:1f:94:ea:8b:df:2d:7c:62:87:68:
5a:28:d7:89:b2:db:e9:a3:52:19:81:e0:c4:98:21:81:6d:43:
78:73:71:a9:5c:71:4c:8b:c7:79:71:e3:5c:44:e2:f6:e5:7f:
e4:e3:45:b3:65:38:49:51:a1:6f:ff:92:43:02:b8:25:5b:c4:
66:94:ec:13:3a:80:c9:86:4e:8c:04:5f:48:28:50:5a:0b:de:
f5:07:bf:e9:88:9c:61:49:2b:9b:b9:e8:6d:7c:88:62:9a:ea:
89:75:3c:dd:1f:3d:83:86:e0:d5:12:74:30:99:14:4f:dc:93:
07:ea:f3:c8:bb:f3:d8:74:ed:54:79:c6:56:b8:97:97:e1:56:
dc:45:37:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJOKPpOf0Qz0eEgMeMfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjA5MDJjN2IzMGZlYzNlMGRjZjVmMjNiZmVkZjUwMTgy
MzQyOWIwHhcNMjUxMTExMTAwMTAwWhcNMjUxMTEyMTAwMTAwWjAzMTEwLwYDVQQD
EyhjNzhmZTQ4YjcwZWE0ZWQ3NTkzM2ZlMGEzMzcxMzg4YzkwMDg0YjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YHLQXVJcJjQeWKrCite+sw5PjVF
C4f0Y5aJmb50LfdKR615rPMKFLMuuQ2P/JGgu+04ot3Cl/yPXTmeKFa7jlvJYMNW
FG1MdJmKF7P+VrX+eqS2kUcxMljTDn45dowH7HE1WiQmk2Tmgc0TotdXPirqmM5f
LinEYEUGhE9T9LvXO5oNNZCMd7aZEHx5x01iEd5ao8cMZ7poEn6whQwFuaUHvww5
a2DfrUQ/br4aEQRnmF9p1ABeIid5weiqIfXzOkN8860GbyL0HmLm71yQ8sGDD1hJ
n5kkSarKm8yBkQ0FSwrY0Qry8W5Gp99ghLhZLPSDfxpEkukZAwzQjXfSCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMeP5Itw6k7XWTP+CjNxOIyQCEsIMB8GA1UdIwQY
MBaAFKnwkCx7MP7D4Nz18jv+31AYI0KbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kNjZmZjMtYjYwNy00NzZlLThkNWUt
ODk2ODU2NWRmNjNhLzEvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kNjZmZjMtYjYwNy00NzZlLThkNWUtODk2ODU2NWRmNjNh
LzEvcWZDUUxIc3dfc1BnM1BYeU9fN2ZVQmdqUXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfChgY3Tn
WYj5g9mjHrUCTPKDGf77kGTkAgDH8PDz6vZq37+UfKpoa1ZtjfXpEtDI9u1sCCj9
yPcx1XSMa4Tjbey1WTCDLJLpzPjFPrpIeGj3LgeLnlEy6IeGnQr2wSEgjoR7yw4W
ujEDxqlwD4gtsRbeZrAflOqL3y18YodoWijXibLb6aNSGYHgxJghgW1DeHNxqVxx
TIvHeXHjXETi9uV/5ONFs2U4SVGhb/+SQwK4JVvEZpTsEzqAyYZOjARfSChQWgve
9Qe/6YicYUkrm7nobXyIYprqiXU83R89g4bg1RJ0MJkUT9yTB+rzyLvz2HTtVHnG
VriXl+FW3EU3kA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:27 2025 by rpki-client