Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier: 6D7U0rijznzEC8QNHuEIRCjkIK8ItSkHe3NlDWvmVpk=
Subject key identifier: 08:08:64:F6:A8:11:14:C3:C4:37:6B:11:17:B6:F9:52:57:C5:07:A6
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 019A7149C1EE544DD78A4B7F9DB36E783481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:50 +0000
Manifest this update: Tue 11 Nov 2025 05:00:50 +0000
Manifest next update: Wed 12 Nov 2025 05:00:50 +0000
Files and hashes: 1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=)
2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: i/7ewZpEhW0IbF6pE0uZvXxGQLirtEv18H/85Pk9I24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c1:ee:54:4d:d7:8a:4b:7f:9d:b3:6e:78:34:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Nov 11 05:00:50 2025 GMT
Not After : Nov 12 05:00:50 2025 GMT
Subject: CN=080864f6a81114c3c4376b1117b6f95257c507a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:e9:4e:a7:33:5a:4b:2b:15:4d:32:84:ea:
f7:e0:29:f1:1e:b1:c9:c3:aa:e4:dc:b5:68:c2:f9:
ed:f5:8e:2d:92:9d:4a:3c:dd:c9:26:6a:d2:f7:6e:
e4:4f:ac:f6:9b:0f:a3:0d:22:14:3a:57:92:c2:97:
d4:fe:6b:e2:f4:a4:f7:8e:ec:52:5d:a9:0f:b3:33:
47:7d:98:eb:47:7c:fc:2f:4a:88:98:29:92:25:c3:
8c:50:e9:75:2d:8d:6b:da:0d:e7:39:86:48:20:12:
c7:f9:eb:6c:d4:22:e1:5e:e9:79:63:94:44:8c:a6:
7f:e9:fb:34:dd:b6:0b:ee:43:d4:bc:a8:b1:42:63:
ca:3a:da:fb:ed:80:d0:0f:da:88:d5:ea:8e:0d:cb:
60:78:8c:08:d6:24:78:a5:fb:d0:53:08:51:17:2a:
fb:bf:6f:8f:30:db:d8:bc:ea:4e:fe:9e:d7:21:4c:
86:43:37:ba:74:2c:5e:89:79:bf:3f:96:42:86:1f:
4c:05:9e:10:f3:26:6f:70:59:6e:83:a9:6a:83:40:
5f:a5:82:e8:0e:08:ff:d5:6a:f9:30:34:9c:c4:bf:
fd:db:80:45:f0:7d:64:ad:dd:43:21:55:fb:22:e6:
77:b2:12:6f:b2:24:5d:93:05:cf:0a:3c:20:bb:43:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:08:64:F6:A8:11:14:C3:C4:37:6B:11:17:B6:F9:52:57:C5:07:A6
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:24:75:f7:89:8f:cb:bd:22:c8:f8:43:cf:69:85:41:c3:8c:
c6:e8:9a:a9:94:4c:a8:a7:ee:2a:c4:d5:e5:19:63:37:0a:61:
ed:11:2c:9e:bc:32:59:21:c2:24:ae:4e:88:83:2a:21:31:0d:
7d:b6:3c:49:8e:35:6e:5e:88:f5:1e:3a:70:e5:4b:16:a0:d8:
e1:8e:4b:ca:6f:e7:11:30:e6:da:73:94:21:4c:b8:61:d4:97:
55:50:d6:1a:38:f7:5d:67:c9:ae:12:bf:26:42:d1:64:20:67:
76:6c:aa:d9:55:ca:41:c3:bd:de:15:be:f0:0c:6d:66:2e:59:
89:de:5f:b8:d9:c3:bc:2e:f8:1a:6b:00:fa:60:9b:30:9f:42:
e7:3e:70:32:9a:f0:88:74:b4:21:d9:3a:71:f5:66:36:68:04:
98:b5:24:f8:9f:40:1f:ed:21:4d:dc:2c:27:b8:05:d6:e6:f5:
3d:82:50:ca:af:3f:f7:c1:e2:e7:4b:0a:e2:7c:6d:e1:cc:09:
bb:31:a3:fb:31:6c:af:14:73:01:6e:a8:5f:12:6f:f9:ee:22:
db:21:60:33:52:ab:98:6a:21:72:63:d5:f8:23:b9:18:63:6d:
bc:c3:0f:38:ab:66:04:46:5f:45:c1:ea:12:a6:cc:c3:d2:a1:
49:cc:21:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxScHuVE3Xikt/nbNueDSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjcyOTY0MmQyZTM1MzdkOWFiN2M0NWM1MWZlMjZkZWE0
NjhiODIwHhcNMjUxMTExMDUwMDUwWhcNMjUxMTEyMDUwMDUwWjAzMTEwLwYDVQQD
EygwODA4NjRmNmE4MTExNGMzYzQzNzZiMTExN2I2Zjk1MjU3YzUwN2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5vpTqczWksrFU0yhOr34CnxHrHJ
w6rk3LVowvnt9Y4tkp1KPN3JJmrS927kT6z2mw+jDSIUOleSwpfU/mvi9KT3juxS
XakPszNHfZjrR3z8L0qImCmSJcOMUOl1LY1r2g3nOYZIIBLH+ets1CLhXul5Y5RE
jKZ/6fs03bYL7kPUvKixQmPKOtr77YDQD9qI1eqODctgeIwI1iR4pfvQUwhRFyr7
v2+PMNvYvOpO/p7XIUyGQze6dCxeiXm/P5ZChh9MBZ4Q8yZvcFlug6lqg0BfpYLo
Dgj/1Wr5MDScxL/924BF8H1krd1DIVX7IuZ3shJvsiRdkwXPCjwgu0MjiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgIZPaoERTDxDdrERe2+VJXxQemMB8GA1UdIwQY
MBaAFKsnKWQtLjU32at8RcUf4m3qRouCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZDgwZGUtMTM2MS00MjNmLTkxYWYt
NWQwZTYyMGY1MjVkLzEvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lZDgwZGUtMTM2MS00MjNmLTkxYWYtNWQwZTYyMGY1MjVk
LzEvcXljcFpDMHVOVGZacTN4RnhSX2liZXBHaTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyR194mP
y70iyPhDz2mFQcOMxuiaqZRMqKfuKsTV5RljNwph7REsnrwyWSHCJK5OiIMqITEN
fbY8SY41bl6I9R46cOVLFqDY4Y5Lym/nETDm2nOUIUy4YdSXVVDWGjj3XWfJrhK/
JkLRZCBndmyq2VXKQcO93hW+8AxtZi5Zid5fuNnDvC74GmsA+mCbMJ9C5z5wMprw
iHS0Idk6cfVmNmgEmLUk+J9AH+0hTdwsJ7gF1ub1PYJQyq8/98Hi50sK4nxt4cwJ
uzGj+zFsrxRzAW6oXxJv+e4i2yFgM1KrmGohcmPV+CO5GGNtvMMPOKtmBEZfRcHq
EqbMw9KhScwhUA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:43 2025 by rpki-client