Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier: TjcgUUKELbM+Bw0MxoXSpK32C0m9TAZ0deCSMmZm2bE=
Subject key identifier: A7:7E:F2:24:BC:5D:DD:28:D1:88:D5:13:0E:64:9C:D5:5F:75:2C:7D
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 019A0E949BCD43377F6FFDA51534F956CBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number: 0201
Signing time: Thu 23 Oct 2025 01:00:11 +0000
Manifest this update: Thu 23 Oct 2025 01:00:11 +0000
Manifest next update: Fri 24 Oct 2025 01:00:11 +0000
Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: YReEMYYuBa208XXz5W7bag6KGVawYgQD76lUz/1haws=)
2: WibstNWW6k-lvYl4Qh5sNtmSYhw.roa (hash: E/2K/0j7Ly/9Z6jM3FsBVp9MBphb1aZ9lSBmqs0GOgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:94:9b:cd:43:37:7f:6f:fd:a5:15:34:f9:56:cb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: Oct 23 01:00:11 2025 GMT
Not After : Oct 24 01:00:11 2025 GMT
Subject: CN=a77ef224bc5ddd28d188d5130e649cd55f752c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a2:37:7b:22:fb:f5:e1:6e:6b:87:f3:53:71:
e4:d5:f1:59:79:2c:88:50:d2:37:9d:dd:b7:45:cd:
d2:da:65:0e:ea:4c:84:9f:68:40:ab:8e:08:cd:b4:
31:92:20:c3:f8:6b:71:d9:a6:87:09:bc:1a:8c:eb:
55:d9:63:a3:2d:1a:d4:1c:21:67:64:8e:fe:e5:7b:
c1:4f:b1:a1:05:90:d6:1d:4d:24:09:7f:96:23:22:
19:8c:87:6a:cf:e4:c5:21:b9:ad:c3:99:73:1c:86:
37:21:97:cf:08:83:76:03:c8:86:6f:92:32:27:97:
8f:84:2d:1a:97:d3:17:8e:d6:5c:79:6f:33:de:25:
5f:2f:80:55:90:b1:48:67:df:5a:a1:aa:48:b8:4d:
58:59:1a:85:9c:c0:dc:8f:73:0f:96:83:04:77:cc:
4d:ef:2d:db:26:5e:30:62:ec:2c:01:b5:ff:58:58:
a6:10:17:9e:0c:61:c6:c1:18:7e:45:fd:47:83:6f:
c9:ca:86:4d:fc:48:81:79:d6:d0:d3:ec:db:55:81:
08:ce:e0:15:21:ff:23:b4:ff:14:f8:2e:03:d0:ff:
76:8f:0f:37:33:68:a1:78:ff:0b:3e:ce:ea:b3:30:
d3:64:7f:7b:81:3b:cc:59:e8:2e:da:3d:c2:2a:9c:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:F2:24:BC:5D:DD:28:D1:88:D5:13:0E:64:9C:D5:5F:75:2C:7D
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a1:4a:ee:54:ed:29:d3:6f:b4:43:13:54:c0:69:a1:61:47:
a4:8d:f3:67:6c:6c:61:82:22:4e:b1:b7:a9:78:ab:4e:cc:6b:
78:fd:f3:5a:8a:d2:a7:4d:24:78:fe:4e:1d:c9:5e:48:cb:41:
08:4a:93:51:02:96:e0:3d:3b:5b:d1:72:3b:23:5b:ba:b5:b2:
b9:ec:fc:e5:b2:78:83:4a:98:73:d5:85:79:1c:f6:da:4a:9d:
ea:10:6b:b0:f2:44:52:6a:86:b5:38:0e:19:48:9b:af:67:c2:
c8:fb:5c:65:49:c6:1f:c1:e8:64:2a:f5:5f:9b:f7:79:f0:d5:
f9:99:d3:fc:0e:c0:28:f1:c3:bf:db:18:cd:97:5d:7b:19:09:
2c:f6:53:b9:72:44:2d:bf:55:6f:69:d3:79:bd:93:66:b5:7e:
49:3c:9b:10:f5:7f:2f:cf:c2:e9:af:1b:4c:0d:91:9f:f9:88:
4a:1a:90:b5:39:25:75:e2:6b:47:b8:0a:22:e0:4d:55:24:f3:
63:93:25:be:5e:09:cd:d3:c7:7f:f1:1d:db:8c:8e:89:9b:80:
26:0d:5b:e1:e1:65:eb:1f:fb:4e:14:a4:f4:47:43:9b:12:9d:
a1:23:9c:f5:14:b5:7f:d6:69:68:dc:13:78:25:00:23:05:8e:
c2:84:06:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoOlJvNQzd/b/2lFTT5VsvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdhZjA4ZjE5YWExNWJlZDNmNDFiZTYyYjM2MzAzZGNj
N2RjZjQwHhcNMjUxMDIzMDEwMDExWhcNMjUxMDI0MDEwMDExWjAzMTEwLwYDVQQD
EyhhNzdlZjIyNGJjNWRkZDI4ZDE4OGQ1MTMwZTY0OWNkNTVmNzUyYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KI3eyL79eFua4fzU3Hk1fFZeSyI
UNI3nd23Rc3S2mUO6kyEn2hAq44IzbQxkiDD+Gtx2aaHCbwajOtV2WOjLRrUHCFn
ZI7+5XvBT7GhBZDWHU0kCX+WIyIZjIdqz+TFIbmtw5lzHIY3IZfPCIN2A8iGb5Iy
J5ePhC0al9MXjtZceW8z3iVfL4BVkLFIZ99aoapIuE1YWRqFnMDcj3MPloMEd8xN
7y3bJl4wYuwsAbX/WFimEBeeDGHGwRh+Rf1Hg2/JyoZN/EiBedbQ0+zbVYEIzuAV
If8jtP8U+C4D0P92jw83M2iheP8LPs7qszDTZH97gTvMWegu2j3CKpzpHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKd+8iS8Xd0o0YjVEw5knNVfdSx9MB8GA1UdIwQY
MBaAFEE3rwjxmqFb7T9BvmKzYwPcx9z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTkt
N2Y1ZWMyNzVjYWE0LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTktN2Y1ZWMyNzVjYWE0
LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6FK7lTt
KdNvtEMTVMBpoWFHpI3zZ2xsYYIiTrG3qXirTsxreP3zWorSp00keP5OHcleSMtB
CEqTUQKW4D07W9FyOyNburWyuez85bJ4g0qYc9WFeRz22kqd6hBrsPJEUmqGtTgO
GUibr2fCyPtcZUnGH8HoZCr1X5v3efDV+ZnT/A7AKPHDv9sYzZddexkJLPZTuXJE
Lb9Vb2nTeb2TZrV+STybEPV/L8/C6a8bTA2Rn/mIShqQtTkldeJrR7gKIuBNVSTz
Y5Mlvl4JzdPHf/Ed24yOiZuAJg1b4eFl6x/7ThSk9EdDmxKdoSOc9RS1f9ZpaNwT
eCUAIwWOwoQGHA==
-----END CERTIFICATE-----
Generated at Thu Oct 23 06:43:38 2025 by rpki-client