Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: wX7mFsR9xPDNZ0SPqx5/yu5Yjxqk9wLW3ZtBy4ZEzgA=
Subject key identifier: 41:98:4E:9F:FA:0B:68:E8:E8:F0:C7:2A:52:D3:D2:06:D6:23:ED:C2
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 019A28C2B4A2E004F5BB36A50D46D0E1038B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 03:00:40 +0000
Manifest this update: Tue 28 Oct 2025 03:00:40 +0000
Manifest next update: Wed 29 Oct 2025 03:00:40 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: BTEvhmilJWeHN4h428HEOJaXSX9uBvUcoRWufMudq48=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:b4:a2:e0:04:f5:bb:36:a5:0d:46:d0:e1:03:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Oct 28 03:00:40 2025 GMT
Not After : Oct 29 03:00:40 2025 GMT
Subject: CN=41984e9ffa0b68e8e8f0c72a52d3d206d623edc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:2f:2f:40:4e:b5:58:42:99:01:56:77:3e:
e6:ec:8c:f4:1f:30:bc:70:99:44:cb:84:98:f2:e6:
dd:ac:54:37:88:1c:17:2b:dc:de:0c:4d:ed:73:68:
38:c5:a7:0f:12:0c:5e:97:0c:04:7b:2e:9d:c2:b8:
50:25:03:68:e7:50:93:37:82:a4:b5:10:43:e5:b4:
b2:42:ca:d1:d3:22:6e:9b:18:32:5c:31:f2:cf:e3:
66:4e:ab:71:0c:06:06:92:00:9d:f3:74:4f:1a:15:
5d:d2:cc:df:54:4d:c2:ee:f0:06:53:b1:21:0f:a7:
92:93:4d:18:cd:34:c8:17:18:30:7f:be:b6:41:d6:
79:04:d2:ca:94:0e:88:6a:bf:27:4e:e9:01:c5:7a:
15:67:35:a7:56:22:cd:f3:51:ce:c4:ac:ea:ef:f6:
a1:e7:ca:eb:b2:42:f1:3e:ec:18:99:28:6c:55:77:
5d:61:cb:0f:83:9a:65:c0:1a:9e:df:aa:0e:b4:a7:
c8:bf:29:c0:c9:06:22:ee:94:e3:ea:92:da:f2:69:
88:84:f7:09:57:4b:72:d1:7e:72:75:54:78:33:6a:
e6:e3:91:5d:36:46:7a:f0:43:cb:2b:2a:34:f8:e4:
4e:ed:ba:2d:05:04:9e:6e:74:ad:64:31:5c:16:a6:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:4E:9F:FA:0B:68:E8:E8:F0:C7:2A:52:D3:D2:06:D6:23:ED:C2
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:61:d7:2b:bf:15:d0:d0:68:a2:e2:52:3e:9a:cc:a3:82:e5:
5e:e8:d7:74:df:d4:30:85:54:e1:07:09:c6:5b:9f:00:68:9a:
d3:d4:01:19:f7:5d:d4:a6:47:5f:65:3a:6d:15:84:62:fe:67:
78:4e:6a:7c:86:eb:a2:15:b3:2a:b1:f0:2e:e1:d9:77:95:9d:
12:c3:22:b3:fb:bd:e3:f5:e7:b8:76:6f:f8:38:dc:46:8b:dc:
c6:79:d3:c2:a9:27:fc:ef:35:1f:c0:25:d6:a2:9a:38:81:5f:
70:3e:f4:73:41:e7:15:d8:24:2b:de:98:93:bf:86:85:63:9d:
b5:57:40:db:5c:54:9e:30:5b:7d:5c:bd:de:d4:62:87:5e:a2:
a9:e1:02:67:be:08:1e:44:fb:d4:d8:da:5b:55:4d:88:b9:27:
a4:5c:cb:ba:88:82:71:4f:5b:ba:7d:e1:b3:d5:60:39:5f:13:
60:7c:62:ec:23:73:52:f8:bb:cd:0b:fc:f2:7b:cc:0d:c1:5a:
a7:01:dc:e9:45:e8:a6:74:e9:23:11:52:4a:1f:91:3e:a8:e7:
19:83:73:11:91:6a:80:15:45:50:21:1f:1c:3b:b9:22:79:31:
d9:12:9c:ed:fc:eb:f6:d1:9d:4e:05:ba:a6:c2:8d:3c:f9:76:
c7:2a:a9:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoowrSi4AT1uzalDUbQ4QOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTFmOTZmOTFjNGEwOWY5NzljNWIxODVjMjZjYjAwYWUw
Zjg2YmYwHhcNMjUxMDI4MDMwMDQwWhcNMjUxMDI5MDMwMDQwWjAzMTEwLwYDVQQD
Eyg0MTk4NGU5ZmZhMGI2OGU4ZThmMGM3MmE1MmQzZDIwNmQ2MjNlZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsokvL0BOtVhCmQFWdz7m7Iz0HzC8
cJlEy4SY8ubdrFQ3iBwXK9zeDE3tc2g4xacPEgxelwwEey6dwrhQJQNo51CTN4Kk
tRBD5bSyQsrR0yJumxgyXDHyz+NmTqtxDAYGkgCd83RPGhVd0szfVE3C7vAGU7Eh
D6eSk00YzTTIFxgwf762QdZ5BNLKlA6Iar8nTukBxXoVZzWnViLN81HOxKzq7/ah
58rrskLxPuwYmShsVXddYcsPg5plwBqe36oOtKfIvynAyQYi7pTj6pLa8mmIhPcJ
V0ty0X5ydVR4M2rm45FdNkZ68EPLKyo0+ORO7botBQSebnStZDFcFqbqXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGYTp/6C2jo6PDHKlLT0gbWI+3CMB8GA1UdIwQY
MBaAFEKh+W+RxKCfl5xbGFwmywCuD4a/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUt
MWUwZWQ5ZjM0NGZjLzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS80NWY2MGYtMGZhYy00MGVmLWEzMGUtMWUwZWQ5ZjM0NGZj
LzEvUXFINWI1SEVvSi1YbkZzWVhDYkxBSzRQaHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmHXK78V
0NBoouJSPprMo4LlXujXdN/UMIVU4QcJxlufAGia09QBGfdd1KZHX2U6bRWEYv5n
eE5qfIbrohWzKrHwLuHZd5WdEsMis/u94/XnuHZv+DjcRovcxnnTwqkn/O81H8Al
1qKaOIFfcD70c0HnFdgkK96Yk7+GhWOdtVdA21xUnjBbfVy93tRih16iqeECZ74I
HkT71NjaW1VNiLknpFzLuoiCcU9bun3hs9VgOV8TYHxi7CNzUvi7zQv88nvMDcFa
pwHc6UXopnTpIxFSSh+RPqjnGYNzEZFqgBVFUCEfHDu5Inkx2RKc7fzr9tGdTgW6
psKNPPl2xyqppg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:11:00 2025 by rpki-client