Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: HI4g3FvdAp9TQOeO44QNLV2nfSb347LlxAWsCTyCu88=
Subject key identifier: E9:C4:94:66:0D:B4:F0:CA:55:B5:6E:B2:96:7D:E0:72:96:EB:2D:03
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 019A228A3C64E9EB71D89DD8818139DC4A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 05E5
Signing time: Sun 26 Oct 2025 22:01:16 +0000
Manifest this update: Sun 26 Oct 2025 22:01:16 +0000
Manifest next update: Mon 27 Oct 2025 22:01:16 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: nlvXu1FPExS8OOadBJxzUByw2WUn3UmPt9FWZBhMMWQ=)
2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:3c:64:e9:eb:71:d8:9d:d8:81:81:39:dc:4a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Oct 26 22:01:16 2025 GMT
Not After : Oct 27 22:01:16 2025 GMT
Subject: CN=e9c494660db4f0ca55b56eb2967de07296eb2d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:ef:d8:50:c7:0f:7c:4d:4f:05:50:c5:d3:
95:97:52:63:9a:a0:56:72:93:13:f8:a4:8f:2a:40:
6f:fb:37:fb:ae:37:3c:1c:e4:65:23:bd:40:ec:56:
38:ba:d6:c4:43:89:19:16:d6:a2:39:e4:bc:c0:33:
d4:bd:b2:de:7f:22:b2:0d:fb:84:d6:15:fa:5f:92:
ec:b9:61:62:42:de:c1:9a:c9:36:be:0b:58:89:d2:
ed:ac:6f:33:d8:af:ab:22:8e:56:a9:34:c1:b4:72:
bf:88:fa:9b:4d:29:1d:f4:f4:2c:65:2a:74:e7:4b:
11:5a:3a:c8:31:f3:59:6d:b9:b3:ea:ae:65:7e:4d:
9c:ce:51:68:01:16:2b:25:8d:65:9b:80:d2:20:2a:
59:94:53:00:d1:78:9d:b9:fe:3b:92:37:2d:18:1a:
f4:a9:b7:3d:06:70:07:6f:8a:9b:f9:ea:d3:ad:c0:
c6:69:ed:0d:b1:e5:f3:61:15:08:5e:0d:de:fd:3c:
5c:06:a7:f9:3b:58:61:60:cc:ad:8e:40:b1:36:cd:
30:3c:d6:aa:36:bb:8e:62:ee:2b:c7:c3:d6:22:92:
00:7d:32:46:e3:44:dd:a0:fd:c1:c9:03:23:57:9c:
be:26:55:e5:c6:8b:7a:c3:ab:c1:40:2c:b7:a5:0f:
66:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:94:66:0D:B4:F0:CA:55:B5:6E:B2:96:7D:E0:72:96:EB:2D:03
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ae:7e:c7:74:5a:03:99:e7:c0:b7:8a:61:b8:15:35:6b:7b:
3a:9b:48:bf:e6:49:60:dc:28:e7:4a:51:35:40:bd:8a:52:22:
b5:b4:15:80:70:a7:24:e5:aa:78:ff:21:39:a2:64:51:b7:f3:
85:4b:e6:03:52:d1:b4:63:01:18:14:82:56:59:b5:8f:1a:7e:
f8:77:4f:10:7b:45:e0:39:b2:eb:6c:14:4b:94:0f:8e:f3:57:
18:a0:9e:ca:03:7f:3d:2b:78:d5:ac:50:4b:98:a2:28:3b:85:
22:fa:33:22:f5:53:65:1d:00:e4:fd:ee:74:1b:6f:04:5b:d9:
29:da:3a:eb:d9:34:e1:92:21:ae:10:de:ac:3e:41:84:c1:88:
8d:32:b3:c3:cb:fd:15:b8:3b:4c:00:f1:5a:b3:05:26:89:0f:
fe:ba:81:db:6a:8b:1a:71:fb:6a:b4:e6:30:45:e0:39:ac:63:
10:e3:27:d5:04:4d:5a:52:08:cd:e3:ef:8e:2e:e2:be:2a:08:
62:31:fe:2b:80:3e:da:11:38:22:c0:7e:32:e1:4f:e2:d3:b2:
46:ea:cb:55:56:91:c0:4e:23:f7:e3:9d:dd:ac:ff:0d:ef:0f:
28:1f:b1:ba:bd:d5:02:a8:c7:21:6a:f6:e6:84:c8:e8:70:96:
64:9f:33:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiijxk6etx2J3YgYE53EqSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzgzZGNmYzlkMzk5ZjAzOTdhODgxYTRiNmE2ZWU2YWUx
NjE4MjIwHhcNMjUxMDI2MjIwMTE2WhcNMjUxMDI3MjIwMTE2WjAzMTEwLwYDVQQD
EyhlOWM0OTQ2NjBkYjRmMGNhNTViNTZlYjI5NjdkZTA3Mjk2ZWIyZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lbv2FDHD3xNTwVQxdOVl1JjmqBW
cpMT+KSPKkBv+zf7rjc8HORlI71A7FY4utbEQ4kZFtaiOeS8wDPUvbLefyKyDfuE
1hX6X5LsuWFiQt7Bmsk2vgtYidLtrG8z2K+rIo5WqTTBtHK/iPqbTSkd9PQsZSp0
50sRWjrIMfNZbbmz6q5lfk2czlFoARYrJY1lm4DSICpZlFMA0Xiduf47kjctGBr0
qbc9BnAHb4qb+erTrcDGae0NseXzYRUIXg3e/TxcBqf5O1hhYMytjkCxNs0wPNaq
NruOYu4rx8PWIpIAfTJG40TdoP3ByQMjV5y+JlXlxot6w6vBQCy3pQ9mfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnElGYNtPDKVbVuspZ94HKW6y0DMB8GA1UdIwQY
MBaAFEI4Pc/J05nwOXqIGktqbuauFhgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEt
Zjg4MGQwY2FlMDkwLzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82YWI0MGUtNTlhMC00ODQzLWFkMzEtZjg4MGQwY2FlMDkw
LzEvUWpnOXo4blRtZkE1ZW9nYVMycHU1cTRXR0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfq5+x3Ra
A5nnwLeKYbgVNWt7OptIv+ZJYNwo50pRNUC9ilIitbQVgHCnJOWqeP8hOaJkUbfz
hUvmA1LRtGMBGBSCVlm1jxp++HdPEHtF4Dmy62wUS5QPjvNXGKCeygN/PSt41axQ
S5iiKDuFIvozIvVTZR0A5P3udBtvBFvZKdo669k04ZIhrhDerD5BhMGIjTKzw8v9
Fbg7TADxWrMFJokP/rqB22qLGnH7arTmMEXgOaxjEOMn1QRNWlIIzePvji7ivioI
YjH+K4A+2hE4IsB+MuFP4tOyRurLVVaRwE4j9+Od3az/De8PKB+xur3VAqjHIWr2
5oTI6HCWZJ8z1Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:38:21 2025 by rpki-client