Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: zFVoMrCiBZ4wDsEM5a0xIvJsWrx6ML2dRlLQMmPSbHM=
Subject key identifier: 9C:DB:C1:43:1C:10:4D:01:7E:04:C7:1F:20:DB:44:E0:92:2B:CD:CE
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 019A0E5E08161AD461989E4999A00BD28271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 16EB
Signing time: Thu 23 Oct 2025 00:00:34 +0000
Manifest this update: Thu 23 Oct 2025 00:00:34 +0000
Manifest next update: Fri 24 Oct 2025 00:00:34 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: uvl/Vurf773vzKOb8Tffsz8X4yw3QpGSniIX/+am674=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:5e:08:16:1a:d4:61:98:9e:49:99:a0:0b:d2:82:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Oct 23 00:00:34 2025 GMT
Not After : Oct 24 00:00:34 2025 GMT
Subject: CN=9cdbc1431c104d017e04c71f20db44e0922bcdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:aa:84:3a:b2:a8:19:18:4c:c5:2d:ca:9b:
52:45:ac:79:b3:51:37:fa:b1:c8:53:3d:e9:3e:44:
c5:6a:30:37:f1:e5:82:7c:ba:b6:a4:0e:c5:8f:ae:
73:af:06:12:39:28:11:9f:47:0d:92:65:2b:95:ae:
c2:fc:1f:26:3f:ae:18:29:1f:c7:b4:e6:66:5d:17:
eb:47:84:28:b7:26:9f:97:3e:5b:d6:e3:33:f6:57:
98:8c:15:26:7d:91:e4:d6:e1:e5:80:d6:74:15:f5:
b5:ad:d1:2b:1f:81:68:d7:bf:76:d4:35:20:6c:24:
f3:74:35:11:40:fc:52:71:b0:57:7a:0e:0a:3c:f9:
b8:ae:fb:b4:6e:0a:5a:cb:11:f9:aa:ff:87:6e:d5:
4d:77:d3:0d:0a:ef:10:f6:af:9f:49:96:ee:2e:a3:
82:70:98:05:92:60:6e:52:92:67:96:f0:c8:e0:5b:
bb:41:fc:f0:22:e2:a1:5d:15:6b:41:a4:b4:de:6b:
bd:fd:4c:fc:1d:52:05:3d:11:fa:68:c4:b9:1b:f1:
ef:d3:eb:8d:73:f2:9e:2f:77:e3:f7:62:70:b2:77:
0b:31:a4:6e:0f:6d:64:ea:40:e7:c6:a7:5e:74:a0:
94:a4:68:1c:3b:f9:38:2f:c3:0e:4c:0e:83:e6:9d:
7b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DB:C1:43:1C:10:4D:01:7E:04:C7:1F:20:DB:44:E0:92:2B:CD:CE
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3f:71:de:8c:66:51:38:d8:8f:56:8d:e1:ec:82:ce:16:f6:
56:a5:ad:62:db:d7:ba:4d:94:b1:8d:97:aa:85:95:3d:fb:9d:
9c:1c:79:e2:2e:78:e6:52:1c:4d:af:90:6f:6a:15:eb:41:be:
04:d9:94:52:a4:69:4a:22:8b:7a:e3:3f:cc:bf:1d:20:ff:51:
e3:72:a3:3d:52:6f:11:74:a4:bf:32:bd:5f:47:8b:9d:30:04:
a0:4f:61:f5:45:f0:73:7b:bf:19:d8:55:cd:b6:38:6b:35:8b:
cd:a4:0f:e4:62:11:cf:d3:63:25:8f:79:fe:26:dd:96:93:f9:
fa:79:ac:75:d3:2d:d2:6a:34:b9:a8:e1:65:56:19:71:20:91:
2c:18:08:45:b9:33:53:c6:6d:a1:65:9d:4a:0f:be:fc:30:ea:
7f:58:2e:40:dd:d6:6d:87:73:11:b7:b1:fe:c2:48:12:9a:41:
db:54:bb:e0:be:e0:3c:b1:80:45:48:07:25:e0:ad:10:cf:7d:
55:31:d6:2b:84:08:f4:5d:11:22:2d:80:11:68:e8:5a:3f:6e:
f4:6e:65:99:b1:95:75:06:51:e1:18:c0:18:33:da:4e:cd:fb:
4b:a2:ec:ff:e0:d7:bd:8f:8b:9d:32:71:33:ba:9a:2f:2e:02:
c3:f7:2e:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoOXggWGtRhmJ5JmaAL0oJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODc3MzQzNjhkODgzMTVmMTFiMzI5Mzg2Y2M1ZWYyYmI4
NzU4NTgwHhcNMjUxMDIzMDAwMDM0WhcNMjUxMDI0MDAwMDM0WjAzMTEwLwYDVQQD
Eyg5Y2RiYzE0MzFjMTA0ZDAxN2UwNGM3MWYyMGRiNDRlMDkyMmJjZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmeqhDqyqBkYTMUtyptSRax5s1E3
+rHIUz3pPkTFajA38eWCfLq2pA7Fj65zrwYSOSgRn0cNkmUrla7C/B8mP64YKR/H
tOZmXRfrR4Qotyaflz5b1uMz9leYjBUmfZHk1uHlgNZ0FfW1rdErH4Fo17921DUg
bCTzdDURQPxScbBXeg4KPPm4rvu0bgpayxH5qv+HbtVNd9MNCu8Q9q+fSZbuLqOC
cJgFkmBuUpJnlvDI4Fu7QfzwIuKhXRVrQaS03mu9/Uz8HVIFPRH6aMS5G/Hv0+uN
c/KeL3fj92JwsncLMaRuD21k6kDnxqdedKCUpGgcO/k4L8MOTA6D5p17jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzbwUMcEE0BfgTHHyDbROCSK83OMB8GA1UdIwQY
MBaAFKuHc0No2IMV8Rsyk4bMXvK7h1hYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81NjI1NDgtN2IzZC00MGIzLTljMDUt
MTg1ODVlZDk0YTk4LzEvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS81NjI1NDgtN2IzZC00MGIzLTljMDUtMTg1ODVlZDk0YTk4
LzEvcTRkelEyallneFh4R3pLVGhzeGU4cnVIV0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdz9x3oxm
UTjYj1aN4eyCzhb2VqWtYtvXuk2UsY2XqoWVPfudnBx54i545lIcTa+Qb2oV60G+
BNmUUqRpSiKLeuM/zL8dIP9R43KjPVJvEXSkvzK9X0eLnTAEoE9h9UXwc3u/GdhV
zbY4azWLzaQP5GIRz9NjJY95/ibdlpP5+nmsddMt0mo0uajhZVYZcSCRLBgIRbkz
U8ZtoWWdSg++/DDqf1guQN3WbYdzEbex/sJIEppB21S74L7gPLGARUgHJeCtEM99
VTHWK4QI9F0RIi2AEWjoWj9u9G5lmbGVdQZR4RjAGDPaTs37S6Ls/+DXvY+LnTJx
M7qaLy4Cw/cuKw==
-----END CERTIFICATE-----
Generated at Thu Oct 23 06:17:40 2025 by rpki-client