Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: Cz2WCJsa49nEcLjhYrCnb0BSJ4MvjJi5aEwhgwyYnUI=
Subject key identifier: 4A:0D:42:4B:35:5F:CC:F3:81:7C:C4:67:A8:4A:FC:20:A5:78:73:BF
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 019A714A0E79C251A3B86B5A1F6422817456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: 0iYXvOgH8Ztn3XPHDPorL2XroWo49/V2zOk3KvVr0+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0e:79:c2:51:a3:b8:6b:5a:1f:64:22:81:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=4a0d424b355fccf3817cc467a84afc20a57873bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:ae:a9:e9:14:8c:07:a4:c2:6e:d2:de:a3:
f2:76:84:c8:6a:92:25:a2:a6:47:21:82:4a:a2:c5:
ba:2e:f8:ca:8a:50:eb:23:78:a3:be:a2:a2:4a:63:
84:2c:05:65:53:25:bd:11:35:81:c9:9c:b1:72:99:
0e:35:56:1e:ac:38:2e:98:5c:1e:5c:16:19:55:c8:
00:35:95:2f:c4:11:68:8c:1a:29:8a:1b:44:32:20:
2e:9d:36:31:5d:07:fd:6a:a0:54:6f:1c:ef:09:ab:
2d:4e:78:8f:ae:cd:32:51:c5:85:fd:e6:85:22:f2:
f5:e3:98:d3:1b:1b:24:14:22:6d:86:49:02:88:2d:
c5:f1:74:d3:7d:ff:81:8c:1a:38:53:a0:a8:5e:ba:
14:6f:22:c5:c5:f4:95:92:f6:fb:34:ad:ca:09:c0:
e8:af:49:57:b6:c8:0e:e8:a1:4c:a0:e4:54:90:36:
b0:9a:fd:61:75:cf:78:12:42:81:ad:4e:11:fd:cd:
72:2f:4d:99:23:b6:25:67:27:fd:a0:d4:12:4c:9b:
6a:ab:07:6d:1c:c7:04:65:0e:56:6b:16:3f:b9:52:
4a:5f:98:3e:fe:f4:5f:d3:18:89:bc:bc:78:e7:d9:
5c:c1:69:27:da:0e:bc:dd:b5:93:36:bf:d2:37:e8:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0D:42:4B:35:5F:CC:F3:81:7C:C4:67:A8:4A:FC:20:A5:78:73:BF
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a1:87:18:1b:51:62:2c:68:c0:64:38:ef:84:cd:6f:09:77:
72:0a:21:cb:42:9d:c8:cb:ec:4b:bf:4e:ab:22:16:09:1f:91:
19:8f:93:fa:33:bc:72:55:d5:b9:1b:b9:82:bc:8c:bf:4d:31:
8a:0f:b4:a2:db:91:95:ee:34:f6:07:16:0e:94:3d:0d:4c:e9:
bc:8f:ab:7d:50:c7:ca:79:ac:b8:1e:a6:c0:79:14:9f:c3:f7:
55:93:43:80:69:67:e6:59:3f:7f:27:3a:7e:77:4e:ef:83:41:
ba:bd:b3:20:6a:2a:3d:e5:98:10:3a:2b:98:f8:aa:26:51:a4:
a4:da:d1:a2:53:b8:23:5e:a6:da:74:db:e7:4d:21:8b:f2:8e:
ee:06:2e:a5:22:d4:75:44:5a:aa:d3:20:95:4b:7e:82:c8:2b:
83:00:2d:d9:92:4b:ea:b3:70:9b:43:a8:7f:d8:fe:df:5a:c0:
97:68:aa:2f:7a:2f:58:a3:d8:a8:d9:65:3b:77:ca:f7:83:2f:
55:e3:59:17:cf:eb:24:2b:9f:f9:39:76:99:d1:10:42:7b:44:
96:28:45:37:b3:09:bd:9d:02:d8:5e:ea:6a:bb:3d:06:d8:e0:
11:77:96:1d:a7:68:80:e3:10:5d:18:9b:71:85:97:e7:bc:30:
fa:25:fe:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSg55wlGjuGtaH2QigXRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZTM1ODFhZGRkNmI5OWRkODc0NGI5ZTI4ODZmYmIwMmFl
OTE4ZTMwHhcNMjUxMTExMDUwMTA5WhcNMjUxMTEyMDUwMTA5WjAzMTEwLwYDVQQD
Eyg0YTBkNDI0YjM1NWZjY2YzODE3Y2M0NjdhODRhZmMyMGE1Nzg3M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58muqekUjAekwm7S3qPydoTIapIl
oqZHIYJKosW6LvjKilDrI3ijvqKiSmOELAVlUyW9ETWByZyxcpkONVYerDgumFwe
XBYZVcgANZUvxBFojBopihtEMiAunTYxXQf9aqBUbxzvCastTniPrs0yUcWF/eaF
IvL145jTGxskFCJthkkCiC3F8XTTff+BjBo4U6CoXroUbyLFxfSVkvb7NK3KCcDo
r0lXtsgO6KFMoORUkDawmv1hdc94EkKBrU4R/c1yL02ZI7YlZyf9oNQSTJtqqwdt
HMcEZQ5WaxY/uVJKX5g+/vRf0xiJvLx459lcwWkn2g683bWTNr/SN+jF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoNQks1X8zzgXzEZ6hK/CCleHO/MB8GA1UdIwQY
MBaAFEDjWBrd1rmd2HRLniiG+7Aq6RjjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYt
ZmM1OWRlZGIxZDJiLzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny81NTE1MjItN2FmYy00ODg2LWJhZTYtZmM1OWRlZGIxZDJi
LzEvUU9OWUd0M1d1WjNZZEV1ZUtJYjdzQ3JwR09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqGHGBtR
YixowGQ474TNbwl3cgohy0KdyMvsS79OqyIWCR+RGY+T+jO8clXVuRu5gryMv00x
ig+0otuRle409gcWDpQ9DUzpvI+rfVDHynmsuB6mwHkUn8P3VZNDgGln5lk/fyc6
fndO74NBur2zIGoqPeWYEDormPiqJlGkpNrRolO4I16m2nTb500hi/KO7gYupSLU
dURaqtMglUt+gsgrgwAt2ZJL6rNwm0Oof9j+31rAl2iqL3ovWKPYqNllO3fK94Mv
VeNZF8/rJCuf+Tl2mdEQQntElihFN7MJvZ0C2F7qars9BtjgEXeWHadogOMQXRib
cYWX57ww+iX+mA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:02 2025 by rpki-client