Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File: qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier: wLP1TZr/BCLRCrMpzQIEAUdkx+lg9wiP81Fo8h7we3I=
Subject key identifier: CD:6A:24:DA:9E:FB:B0:02:D6:7F:BD:EA:7E:3A:2E:5B:47:DC:F5:67
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer: /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial: 019A22F79378C79EC6F9E79E19DE2404E790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number: 09C4
Signing time: Mon 27 Oct 2025 00:00:41 +0000
Manifest this update: Mon 27 Oct 2025 00:00:41 +0000
Manifest next update: Tue 28 Oct 2025 00:00:41 +0000
Files and hashes: 1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=)
2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: Vr15WXXn/G4bBPR+NNuo6JwstEccvsEAuIsy6vmW/ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:93:78:c7:9e:c6:f9:e7:9e:19:de:24:04:e7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
Validity
Not Before: Oct 27 00:00:41 2025 GMT
Not After : Oct 28 00:00:41 2025 GMT
Subject: CN=cd6a24da9efbb002d67fbdea7e3a2e5b47dcf567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:00:f0:d2:5e:da:b1:a0:d0:a9:4d:7a:aa:
1c:84:4f:68:37:5e:2a:97:6c:a0:85:9f:49:29:27:
b9:b0:4d:87:07:32:10:7c:df:45:be:34:fc:89:62:
6e:56:f3:c7:97:8c:9a:7d:35:bc:7b:3a:4b:5e:da:
ae:03:06:f0:31:60:2c:31:29:b5:21:08:4b:c4:af:
46:ab:de:84:6f:99:88:03:ce:b0:5b:15:7d:c9:7f:
28:12:8b:9d:07:4b:e8:c6:10:3d:12:0d:4d:83:d4:
c9:81:94:9c:fe:a1:ae:54:ef:67:d6:df:ac:03:37:
cc:07:6e:4d:01:67:1c:d5:db:2d:72:43:24:8b:18:
b8:6f:55:c9:3e:31:88:10:c9:90:40:2d:69:d6:97:
01:b7:64:52:42:97:c2:b5:e3:f6:63:11:df:fb:f0:
45:c6:65:b5:ab:13:ba:20:ca:c1:3c:38:ab:04:b7:
ac:3c:2c:eb:c5:ba:fd:16:22:bc:a2:9c:f6:0e:3c:
70:10:79:a4:32:03:0c:9f:75:c3:39:46:f6:7c:9e:
aa:f1:76:23:ac:45:fa:ee:6d:be:84:37:b1:6b:43:
25:11:90:6f:11:0f:f6:07:4c:6f:6e:96:9e:c2:3d:
a5:2e:34:1c:f3:7b:85:d0:4e:1a:1a:2b:b9:a3:80:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6A:24:DA:9E:FB:B0:02:D6:7F:BD:EA:7E:3A:2E:5B:47:DC:F5:67
X509v3 Authority Key Identifier:
keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:59:01:f6:a5:85:b6:b7:78:6e:87:48:71:2d:46:1b:9b:
8c:ee:2f:21:28:34:9f:4b:f8:f7:40:2c:be:b8:9e:4a:32:59:
b8:25:ea:19:66:b3:2d:b5:c4:10:38:5e:97:44:7b:12:fc:08:
3a:0b:ad:55:31:0a:07:94:70:df:6a:9a:b8:67:be:b8:8c:15:
f9:5c:7e:22:ac:0d:65:87:6c:e6:1c:d2:f2:3e:d6:97:37:4f:
32:4b:93:c6:ee:04:11:cd:39:00:58:d5:c7:b5:16:e8:34:4a:
aa:1a:84:bf:4d:e2:83:31:dd:28:d7:08:15:c7:02:69:15:94:
a1:18:4a:ea:31:87:59:46:38:bc:1b:19:4d:45:57:cd:ef:8d:
38:37:84:00:9e:80:89:f0:7e:65:8e:48:d9:e4:19:9f:c8:cd:
f0:2f:d8:d0:15:5b:db:7f:f3:a7:73:85:e0:e1:6b:35:4f:65:
91:2f:68:9e:67:81:36:62:b8:60:72:35:12:79:19:bf:59:93:
ef:01:da:6c:26:af:f9:37:38:46:85:ef:3c:fe:77:75:9a:c0:
4c:d5:81:9a:09:0e:ab:b2:9d:69:83:77:df:a4:08:8d:eb:1f:
18:97:1e:80:f1:7f:cc:90:8e:e2:3b:19:6e:aa:aa:cd:69:2d:
88:23:1b:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi95N4x57G+eeeGd4kBOeQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOTA3YWUxOTc3YzIzNTI3YWFkNjY1NmExNDhjNzAzNzJl
OWIyNTYwHhcNMjUxMDI3MDAwMDQxWhcNMjUxMDI4MDAwMDQxWjAzMTEwLwYDVQQD
EyhjZDZhMjRkYTllZmJiMDAyZDY3ZmJkZWE3ZTNhMmU1YjQ3ZGNmNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFwA8NJe2rGg0KlNeqochE9oN14q
l2yghZ9JKSe5sE2HBzIQfN9FvjT8iWJuVvPHl4yafTW8ezpLXtquAwbwMWAsMSm1
IQhLxK9Gq96Eb5mIA86wWxV9yX8oEoudB0voxhA9Eg1Ng9TJgZSc/qGuVO9n1t+s
AzfMB25NAWcc1dstckMkixi4b1XJPjGIEMmQQC1p1pcBt2RSQpfCteP2YxHf+/BF
xmW1qxO6IMrBPDirBLesPCzrxbr9FiK8opz2DjxwEHmkMgMMn3XDOUb2fJ6q8XYj
rEX67m2+hDexa0MlEZBvEQ/2B0xvbpaewj2lLjQc83uF0E4aGiu5o4CsMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1qJNqe+7AC1n+96n46LltH3PVnMB8GA1UdIwQY
MBaAFKqQeuGXfCNSeq1mVqFIxwNy6bJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXBCNjRaZDhJMUo2cldaV29VakhBM0xwc2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2It
OGY1ZjcxM2IzN2FhLzEvcXBCNjRaZDhJMUo2cldaV29VakhBM0xwc2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yYTUzZTgtZjIzNi00MjQyLWExM2ItOGY1ZjcxM2IzN2Fh
LzEvcXBCNjRaZDhJMUo2cldaV29VakhBM0xwc2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8xZAfal
hba3eG6HSHEtRhubjO4vISg0n0v490AsvrieSjJZuCXqGWazLbXEEDhel0R7EvwI
OgutVTEKB5Rw32qauGe+uIwV+Vx+IqwNZYds5hzS8j7WlzdPMkuTxu4EEc05AFjV
x7UW6DRKqhqEv03igzHdKNcIFccCaRWUoRhK6jGHWUY4vBsZTUVXze+NODeEAJ6A
ifB+ZY5I2eQZn8jN8C/Y0BVb23/zp3OF4OFrNU9lkS9onmeBNmK4YHI1EnkZv1mT
7wHabCav+Tc4RoXvPP53dZrATNWBmgkOq7KdaYN336QIjesfGJcegPF/zJCO4jsZ
bqqqzWktiCMbdA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:13 2025 by rpki-client