Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: RxspWveRl+oFFHJc7LM1IjfFFhVISndn085QXAOyCHg=
Subject key identifier: 90:25:0A:12:71:FB:D6:92:D1:00:25:6B:94:6F:B0:CE:19:56:26:0F
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 019A7225B18AFD5C0DEDD74908FAA4C64178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0B0A
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: lOE6ZRCb5tmZK/K+fnw8efDiSk0AtZFYvCx+XsHujQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b1:8a:fd:5c:0d:ed:d7:49:08:fa:a4:c6:41:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=90250a1271fbd692d100256b946fb0ce1956260f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:26:af:07:72:64:89:94:f2:31:9f:20:8a:
5c:81:b3:8a:a3:cf:4b:da:85:31:7e:cc:97:1a:d3:
40:db:b8:fd:12:46:c4:b8:2c:9f:ea:00:19:e0:e7:
78:5e:e5:b3:1c:82:30:40:a9:9f:86:0f:07:bf:0c:
5f:d1:cc:cb:8b:9b:f7:cb:ea:60:67:4c:0c:7d:65:
31:69:57:73:9c:30:18:62:a3:3d:93:71:0f:24:a8:
0c:99:7d:60:08:6b:87:f0:5d:4a:e0:10:9e:97:62:
b7:2a:ac:ee:67:18:f2:44:25:ea:88:9e:b1:af:27:
ee:0d:d7:f1:9a:d1:60:d2:82:e5:0c:bd:a3:e0:be:
2a:13:d7:a2:0b:e4:14:10:a9:43:15:ed:62:dc:88:
2b:72:67:5d:64:8e:08:fa:88:e0:f5:0d:a0:3c:d2:
d2:4f:df:8f:53:46:be:14:03:ac:03:6e:da:63:fc:
e7:10:f4:3a:57:7d:6d:f3:e8:95:14:1f:5a:cb:5f:
6e:db:94:65:4e:86:53:65:7f:1e:c1:0b:a6:d4:76:
aa:3f:24:d5:93:49:3c:f5:87:a4:c4:f7:c3:53:21:
a5:c1:d3:5c:7d:60:1f:8a:78:5b:4c:9b:5f:28:d7:
40:da:7d:36:89:41:db:34:a1:12:15:9f:c2:f1:fd:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:25:0A:12:71:FB:D6:92:D1:00:25:6B:94:6F:B0:CE:19:56:26:0F
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:60:b0:51:06:ed:29:9b:f8:b0:ac:47:e1:4e:71:93:7c:ed:
ac:cc:e8:e8:30:87:19:c0:86:b6:b1:62:7c:f1:42:33:33:ab:
ea:f3:70:e2:79:1b:c6:d8:81:6e:83:06:d7:b6:27:ba:40:b0:
5d:da:9a:60:48:f4:71:e6:24:36:cd:a1:83:ab:4f:b9:06:53:
ec:43:d7:40:8a:e3:08:9a:b9:83:b1:9c:44:9e:97:b1:26:1a:
7c:03:60:51:23:19:93:71:67:88:82:64:e2:31:a8:22:83:fe:
67:f9:cc:d2:3d:88:24:b1:fa:d1:d8:e8:d3:56:f1:ad:4a:fa:
63:d3:9a:a2:c3:87:b5:8f:fb:63:81:8c:7f:e0:26:c2:fa:37:
ce:cb:6a:3e:62:41:b7:48:a5:6a:09:e0:0e:28:f8:59:05:a8:
fc:e6:17:dd:a0:1e:f3:a4:d8:59:83:f3:f4:47:d9:0e:d6:c6:
02:a6:d7:a6:38:c6:48:69:fa:03:e3:eb:81:8d:2f:03:e5:9e:
60:00:55:c9:79:cf:44:13:b4:45:78:2e:8a:c6:14:58:f6:33:
51:69:f5:15:1f:1f:f3:08:37:0f:32:36:5e:0c:35:23:f9:2b:
fb:90:57:c8:61:52:bd:52:55:e6:2b:8f:b3:3a:35:f8:ec:66:
34:13:c6:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJbGK/VwN7ddJCPqkxkF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWMyOWM5NWQyNDhjYmZmYTc0NGFiMzRlNDdlYWNjYTcz
NTUwZDEwHhcNMjUxMTExMDkwMTA0WhcNMjUxMTEyMDkwMTA0WjAzMTEwLwYDVQQD
Eyg5MDI1MGExMjcxZmJkNjkyZDEwMDI1NmI5NDZmYjBjZTE5NTYyNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7kmrwdyZImU8jGfIIpcgbOKo89L
2oUxfsyXGtNA27j9EkbEuCyf6gAZ4Od4XuWzHIIwQKmfhg8Hvwxf0czLi5v3y+pg
Z0wMfWUxaVdznDAYYqM9k3EPJKgMmX1gCGuH8F1K4BCel2K3KqzuZxjyRCXqiJ6x
ryfuDdfxmtFg0oLlDL2j4L4qE9eiC+QUEKlDFe1i3IgrcmddZI4I+ojg9Q2gPNLS
T9+PU0a+FAOsA27aY/znEPQ6V31t8+iVFB9ay19u25RlToZTZX8ewQum1HaqPyTV
k0k89YekxPfDUyGlwdNcfWAfinhbTJtfKNdA2n02iUHbNKESFZ/C8f1MCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAlChJx+9aS0QAla5RvsM4ZViYPMB8GA1UdIwQY
MBaAFKscKcldJIy/+nRKs05H6synNVDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQt
ZWE2Njg0NDE0OWVlLzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My85YWVhOGMtMjE5OS00ZDQ2LTkxZWQtZWE2Njg0NDE0OWVl
LzEvcXh3cHlWMGtqTF82ZEVxelRrZnF6S2MxVU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2CwUQbt
KZv4sKxH4U5xk3ztrMzo6DCHGcCGtrFifPFCMzOr6vNw4nkbxtiBboMG17YnukCw
XdqaYEj0ceYkNs2hg6tPuQZT7EPXQIrjCJq5g7GcRJ6XsSYafANgUSMZk3FniIJk
4jGoIoP+Z/nM0j2IJLH60djo01bxrUr6Y9OaosOHtY/7Y4GMf+Amwvo3zstqPmJB
t0ilagngDij4WQWo/OYX3aAe86TYWYPz9EfZDtbGAqbXpjjGSGn6A+PrgY0vA+We
YABVyXnPRBO0RXguisYUWPYzUWn1FR8f8wg3DzI2Xgw1I/kr+5BXyGFSvVJV5iuP
szo1+OxmNBPGeA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:03 2025 by rpki-client