Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: zyLtid4aabLjmQNTfN9tBKhL68dxJOPczHXt6Kh8ihU=
Subject key identifier: FD:51:E8:15:53:BB:EC:BE:17:C2:B5:D2:5D:18:8B:07:80:E1:0E:F4
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 019A24E59D2F5571F755172676251C1801D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 4B
Signing time: Mon 27 Oct 2025 09:00:19 +0000
Manifest this update: Mon 27 Oct 2025 09:00:19 +0000
Manifest next update: Tue 28 Oct 2025 09:00:19 +0000
Files and hashes: 1: CxgM5umcJQIKAphd4HGRMxjPCiQ.roa (hash: A0nE+ddeI2g2MvTBC556Td71a5D11i+c62doMFlZiC8=)
2: JknyP3Ybin2U1sEXva4KCDR1c1I.roa (hash: O0vUT6Dy38kn7d3i/5/I+631QCA6tRSEMUbIaeBWKKg=)
3: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: O9cbR6FkE2aAdY+Uj9xTHpCXzpX8ejN//KCe0AWZCrU=)
4: hraQuSPXm_BKduHB1VDVz3ZUcQY.roa (hash: WS2hCjy7E85ll6h/ANkIKpGGT1mve9bfebhKK3l26Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:9d:2f:55:71:f7:55:17:26:76:25:1c:18:01:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Oct 27 09:00:19 2025 GMT
Not After : Oct 28 09:00:19 2025 GMT
Subject: CN=fd51e81553bbecbe17c2b5d25d188b0780e10ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:55:38:f1:75:23:b1:3b:61:ca:20:13:37:
a3:ed:1b:da:d9:c6:a8:96:56:04:62:1f:a6:0b:05:
39:a3:48:b8:9e:33:ba:bc:9c:9f:41:f4:bd:ee:cc:
17:3b:ee:f9:f9:ee:6b:85:dc:dd:69:95:86:b0:17:
41:46:64:8f:6a:a3:ac:e3:ad:fb:57:26:93:69:40:
88:eb:94:eb:07:0c:36:1a:9a:b6:f8:d9:24:60:e1:
52:09:34:42:65:a4:52:be:32:a2:81:9e:ac:3a:20:
d3:60:3c:8b:1e:16:d2:d1:1c:45:7b:10:1f:21:3e:
0c:5e:0e:4c:ad:54:b9:d7:ec:b2:12:48:fa:fe:e0:
92:8f:e0:45:db:46:66:5b:20:e3:58:af:70:c9:81:
1a:5f:da:49:f8:0d:b8:df:e7:80:ea:3d:44:67:00:
f6:f1:f9:01:5d:b0:72:36:6a:8f:6d:b8:e4:26:43:
5d:4b:75:9d:a0:dd:41:18:1c:9a:fc:da:a7:3f:f4:
0c:d0:10:9f:14:d9:82:20:8f:20:1a:bb:74:fc:fc:
70:56:87:e4:03:dd:86:73:09:1c:3b:c3:db:dc:92:
ff:d2:63:2b:96:41:29:8f:70:65:3c:a7:c8:47:98:
c6:eb:1a:d6:5c:b7:3d:1b:c4:ea:5b:ec:72:21:df:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:51:E8:15:53:BB:EC:BE:17:C2:B5:D2:5D:18:8B:07:80:E1:0E:F4
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6e:f2:46:43:fe:c7:02:37:2a:62:63:67:63:b8:c5:31:ae:
2d:10:60:1c:56:be:b4:38:37:12:88:09:1d:8a:77:b7:c5:2f:
35:f8:07:dc:7b:89:d6:3a:9b:6d:fa:79:c7:25:7b:ec:22:f9:
63:33:3b:0b:6e:c9:51:7a:ed:17:b1:fd:ee:f5:6f:fa:8f:ef:
23:d9:57:c2:f3:b5:e2:5e:cd:15:58:fa:c4:4d:0e:0e:49:26:
0a:b1:ca:a9:de:f3:28:ca:62:1a:6c:f0:9b:57:e9:c6:48:eb:
c4:20:b7:90:8f:41:8e:77:e3:bc:07:1d:22:fd:9d:cf:8d:f5:
77:bb:1f:91:51:ed:fa:6f:27:44:00:90:0a:75:dd:e7:c2:d4:
f2:d2:f7:3e:9d:49:8d:65:e2:28:5a:98:eb:d3:ca:7f:d5:c5:
6f:6a:6a:0b:65:3e:59:9c:b0:6e:9e:37:48:6a:da:72:f3:a9:
77:84:35:af:f7:9c:b6:6b:99:27:ab:f6:22:2c:90:d1:03:d6:
08:2f:1c:b9:bc:b7:d5:28:aa:43:65:f0:27:46:47:b5:cd:e2:
bd:55:0e:0a:3a:b1:09:40:4f:36:cb:55:1b:cb:66:b1:fc:9c:
1c:a3:cd:d6:de:d4:56:b4:57:af:f3:09:6c:2f:4d:7d:8a:32:
f7:43:fc:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5Z0vVXH3VRcmdiUcGAHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZjA2YzM2OTg3MjRiMzdmZTFhMTcxMTQxN2RiZDg4ZWJi
ZjBhOTEwHhcNMjUxMDI3MDkwMDE5WhcNMjUxMDI4MDkwMDE5WjAzMTEwLwYDVQQD
EyhmZDUxZTgxNTUzYmJlY2JlMTdjMmI1ZDI1ZDE4OGIwNzgwZTEwZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd5VOPF1I7E7YcogEzej7Rva2cao
llYEYh+mCwU5o0i4njO6vJyfQfS97swXO+75+e5rhdzdaZWGsBdBRmSPaqOs4637
VyaTaUCI65TrBww2Gpq2+NkkYOFSCTRCZaRSvjKigZ6sOiDTYDyLHhbS0RxFexAf
IT4MXg5MrVS51+yyEkj6/uCSj+BF20ZmWyDjWK9wyYEaX9pJ+A243+eA6j1EZwD2
8fkBXbByNmqPbbjkJkNdS3WdoN1BGBya/NqnP/QM0BCfFNmCII8gGrt0/PxwVofk
A92GcwkcO8Pb3JL/0mMrlkEpj3BlPKfIR5jG6xrWXLc9G8TqW+xyId/WIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1R6BVTu+y+F8K10l0YiweA4Q70MB8GA1UdIwQY
MBaAFEPwbDaYcks3/hoXEUF9vYjrvwqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjct
MGUxZWZkNWEzNzQ2LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83ZGFiNmEtOTQ3Yi00YTEyLThhMjctMGUxZWZkNWEzNzQ2
LzEvUV9Cc05waHlTemYtR2hjUlFYMjlpT3VfQ3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFG7yRkP+
xwI3KmJjZ2O4xTGuLRBgHFa+tDg3EogJHYp3t8UvNfgH3HuJ1jqbbfp5xyV77CL5
YzM7C27JUXrtF7H97vVv+o/vI9lXwvO14l7NFVj6xE0ODkkmCrHKqd7zKMpiGmzw
m1fpxkjrxCC3kI9BjnfjvAcdIv2dz431d7sfkVHt+m8nRACQCnXd58LU8tL3Pp1J
jWXiKFqY69PKf9XFb2pqC2U+WZywbp43SGracvOpd4Q1r/ectmuZJ6v2IiyQ0QPW
CC8cuby31SiqQ2XwJ0ZHtc3ivVUOCjqxCUBPNstVG8tmsfycHKPN1t7UVrRXr/MJ
bC9NfYoy90P8GQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 15:42:40 2025 by rpki-client