Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json)
Hash identifier: omaeqcDWMuf0oVMUtyg/LKOAhGpyfrwxoRq2wPsMl2g=
Subject key identifier: C3:47:57:08:A9:EF:37:9F:97:5E:C6:D3:76:65:D5:63:DC:0C:34:4E
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 019A714A1C800F87398409429FFF25C383FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
Manifest number: 06
Signing time: Tue 11 Nov 2025 05:01:13 +0000
Manifest this update: Tue 11 Nov 2025 05:01:13 +0000
Manifest next update: Wed 12 Nov 2025 05:01:13 +0000
Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: trvSrV8OxsL03WkNWR228u8USdMJ5amnCAeIfs/tavY=)
2: wlrDNqUnqUmmTYGmXbzC14oo_bE.roa (hash: l0cPMm9AaYNzGdZ4Sbd7mhVrwvyb06PQKB3ZfkcvkmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1c:80:0f:87:39:84:09:42:9f:ff:25:c3:83:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Nov 11 05:01:13 2025 GMT
Not After : Nov 12 05:01:13 2025 GMT
Subject: CN=c3475708a9ef379f975ec6d37665d563dc0c344e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:12:13:18:e0:dc:34:2d:dd:80:08:55:0f:
3b:d2:25:ab:08:9b:ae:43:2a:ac:e3:fe:1b:c9:9d:
72:ba:22:16:8d:bd:98:68:7f:bb:99:62:bc:a7:93:
9f:8c:e4:c0:c3:7c:90:5d:99:1e:6b:a0:22:f2:07:
06:6b:72:ee:cb:5a:32:62:a6:74:02:a3:bf:2d:59:
b9:cf:bc:14:30:1c:71:cb:ef:2e:f2:61:45:90:54:
31:5d:f8:d5:b3:20:12:ea:3f:a7:69:59:d9:e6:12:
70:9b:05:01:e1:5a:a3:74:92:92:3c:77:b9:27:02:
38:14:e4:b2:2a:57:0f:89:e2:49:cf:19:09:9b:7f:
b4:da:a2:5d:07:22:7a:d4:a0:40:eb:06:69:1b:57:
9c:86:09:8a:4f:87:27:cd:02:87:8d:fd:4a:fb:37:
84:60:2e:88:cd:1d:e1:6c:7a:2d:c1:0d:b2:55:f0:
29:b8:80:36:5d:3e:d8:56:08:50:a0:8f:69:d7:84:
23:b2:2d:bf:82:62:55:0c:65:24:05:16:8a:e4:c9:
ed:45:5c:f7:cc:8b:ef:94:1d:8a:dd:9f:e1:97:96:
9a:41:43:ae:e7:41:36:0f:0c:10:56:49:05:7a:46:
d1:59:70:86:7a:3c:60:d4:91:e3:94:f4:6c:82:37:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:47:57:08:A9:EF:37:9F:97:5E:C6:D3:76:65:D5:63:DC:0C:34:4E
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6f:a7:4f:3a:39:21:d0:ec:9d:b7:9b:00:75:71:f2:09:ea:
fc:3f:c6:ee:fd:ec:d1:36:b0:f4:79:2d:56:0f:ae:3d:ee:34:
da:5d:cb:5b:ed:39:7b:81:b7:64:87:25:ad:c6:3a:6f:13:cf:
b0:36:a8:e3:ba:dd:9a:de:0f:5e:17:9d:05:53:a3:38:78:60:
c4:dc:4e:54:70:ec:13:76:16:40:8e:2f:f1:de:58:3a:82:b5:
89:4e:45:dd:21:ab:81:2e:60:33:58:be:3b:7b:05:99:0a:f5:
30:cc:3b:9b:f1:ce:5f:21:2d:fa:ee:a7:5c:2e:fb:fc:f2:3f:
d7:75:50:07:f3:8e:c0:d1:47:f9:55:0f:1e:46:00:61:e8:54:
82:39:03:26:a1:44:e8:0f:8b:6e:5d:24:7d:1d:ab:51:b6:71:
06:e2:b8:6f:61:9d:f2:59:4b:9b:71:77:35:f7:4c:e4:66:4b:
28:6b:69:dd:a1:8d:f6:2e:15:21:fb:2b:0f:e8:24:38:e7:e1:
b3:75:b9:d3:ff:85:ba:ce:45:4a:34:fa:d9:e9:bd:df:24:7d:
75:bd:00:6a:ec:6b:19:5d:8e:47:02:7a:02:bc:f5:a0:cd:34:
2c:8a:93:de:5e:d1:49:ed:72:4f:2a:4e:88:e9:54:ef:ab:da:
c6:d3:81:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxShyAD4c5hAlCn/8lw4P7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMjA2YzNlNTY4ZGI3OGE3NmNiYWIxNDJlMGU1YmY0ZjY4
MmVmZTYwHhcNMjUxMTExMDUwMTEzWhcNMjUxMTEyMDUwMTEzWjAzMTEwLwYDVQQD
EyhjMzQ3NTcwOGE5ZWYzNzlmOTc1ZWM2ZDM3NjY1ZDU2M2RjMGMzNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgESExjg3DQt3YAIVQ870iWrCJuu
Qyqs4/4byZ1yuiIWjb2YaH+7mWK8p5OfjOTAw3yQXZkea6Ai8gcGa3Luy1oyYqZ0
AqO/LVm5z7wUMBxxy+8u8mFFkFQxXfjVsyAS6j+naVnZ5hJwmwUB4VqjdJKSPHe5
JwI4FOSyKlcPieJJzxkJm3+02qJdByJ61KBA6wZpG1echgmKT4cnzQKHjf1K+zeE
YC6IzR3hbHotwQ2yVfApuIA2XT7YVghQoI9p14Qjsi2/gmJVDGUkBRaK5MntRVz3
zIvvlB2K3Z/hl5aaQUOu50E2DwwQVkkFekbRWXCGejxg1JHjlPRsgjdTKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNHVwip7zefl17G03Zl1WPcDDROMB8GA1UdIwQY
MBaAFEMgbD5WjbeKdsurFC4OW/T2gu/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQt
YjMyZmRiYTE4ZTFjLzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQtYjMyZmRiYTE4ZTFj
LzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJG+nTzo5
IdDsnbebAHVx8gnq/D/G7v3s0Taw9HktVg+uPe402l3LW+05e4G3ZIclrcY6bxPP
sDao47rdmt4PXhedBVOjOHhgxNxOVHDsE3YWQI4v8d5YOoK1iU5F3SGrgS5gM1i+
O3sFmQr1MMw7m/HOXyEt+u6nXC77/PI/13VQB/OOwNFH+VUPHkYAYehUgjkDJqFE
6A+Lbl0kfR2rUbZxBuK4b2Gd8llLm3F3NfdM5GZLKGtp3aGN9i4VIfsrD+gkOOfh
s3W50/+Fus5FSjT62em93yR9db0AauxrGV2ORwJ6Arz1oM00LIqT3l7RSe1yTypO
iOlU76vaxtOBQw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:38 2025 by rpki-client