Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: f8LQPI42rADlXPzrVKHGEMzqVUjsAk5x6Oghj+HHPoc=
Subject key identifier: FB:89:D5:07:10:0F:B2:B6:BC:9E:2B:91:D5:8B:2D:D6:69:C7:48:66
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 019A0D4BD1E5492641C0478D25D755A09D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0AD3
Signing time: Wed 22 Oct 2025 19:01:03 +0000
Manifest this update: Wed 22 Oct 2025 19:01:03 +0000
Manifest next update: Thu 23 Oct 2025 19:01:03 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: HdFtP8AS89PVv1uK9y/SRcJEL6ZMb0wpjlzQVR7+4rg=)
2: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (hash: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=)
3: nRHvC3S6H6OF9LLq0ogOX8Zl4yo.roa (hash: tS76E2lzZsDNXN+CpTO/PY5u/Eonx622qRvZjqr5TcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:d1:e5:49:26:41:c0:47:8d:25:d7:55:a0:9d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Oct 22 19:01:03 2025 GMT
Not After : Oct 23 19:01:03 2025 GMT
Subject: CN=fb89d507100fb2b6bc9e2b91d58b2dd669c74866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:33:13:69:a7:9a:23:f5:79:bc:34:d5:76:
26:ab:f1:16:54:76:c1:df:8f:39:68:de:fa:1d:bb:
6e:0b:b2:ba:c9:d7:84:b4:d3:66:83:24:f5:2a:1a:
04:5e:c1:be:f2:36:87:a4:f7:aa:5e:ce:65:fa:51:
eb:73:6a:1c:d1:a5:6b:9a:8e:60:3e:4e:fd:4f:66:
53:32:bb:a0:6b:24:ea:34:ab:ba:c0:ea:ad:b6:3e:
87:aa:23:b8:2b:79:2c:9d:06:fd:01:7b:00:7b:3f:
ee:5c:17:3f:02:a3:f3:07:0d:c4:d0:a8:71:6b:e2:
01:23:58:8b:97:d8:9c:1d:03:97:46:ed:e3:99:5f:
59:21:f2:39:cc:8d:a0:94:cc:34:83:d1:0c:17:b6:
22:54:72:25:03:6b:b4:f2:a1:b8:c6:0b:d5:5e:0a:
53:f9:a5:45:b2:31:0e:84:19:7e:36:61:5d:16:fd:
47:a7:b3:ba:88:ec:ee:eb:36:bb:f4:4f:2d:d3:67:
65:5a:42:a7:f8:37:dc:08:2e:b0:22:23:5f:98:14:
fc:30:d1:ac:f4:ad:bc:31:75:5f:77:d7:0f:70:94:
85:65:93:cf:9c:a5:4e:52:7b:d3:6b:69:7e:e7:a4:
3d:9f:ca:57:f0:ce:a3:d5:21:3c:ee:e2:d8:d0:ee:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:89:D5:07:10:0F:B2:B6:BC:9E:2B:91:D5:8B:2D:D6:69:C7:48:66
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:61:ef:8d:20:df:64:27:70:cd:7d:d6:7c:a4:8a:ee:e2:ab:
f9:9d:da:93:15:c5:a3:38:4f:a3:e2:31:af:8c:fe:44:d6:1e:
2d:3d:63:49:39:44:36:e7:fc:14:dd:0b:db:dc:db:07:9c:6e:
79:30:af:18:83:48:88:29:3b:55:d3:61:af:9f:74:ce:85:e3:
26:43:ba:37:d9:1f:bf:4b:7c:1d:80:39:41:6d:7b:fb:62:99:
28:e5:77:c4:96:69:3c:34:92:02:b2:2a:24:80:14:8d:f3:6b:
5b:17:44:fc:ee:59:dd:cb:79:d5:ff:65:f7:ec:42:f3:62:c8:
9a:b2:df:3c:8e:78:d5:3d:2a:a2:64:59:22:9a:df:02:e9:fc:
51:ad:71:6d:64:e0:10:d2:8b:09:db:08:ad:03:b1:58:36:95:
db:4d:58:af:bb:f6:97:fa:6d:90:7e:69:d7:ce:b1:ea:b7:28:
3d:01:ec:a9:5a:41:16:21:4b:7c:77:ef:1d:1a:c8:e7:1c:45:
5e:58:7a:34:1f:a9:33:87:9a:11:28:3e:75:c7:7d:51:ba:11:
d0:96:63:38:64:ad:73:4f:35:ae:27:4b:7d:77:49:f1:4a:c3:
aa:5f:e5:a1:5f:96:5b:06:dd:15:04:8d:ac:b3:fe:af:35:4a:
68:85:b2:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoNS9HlSSZBwEeNJddVoJ1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNWQ2NDU3NDEyMTU2NzdiNzc0OGQxZmRlZmQ0MTYyMDdh
ZGIxMmQwHhcNMjUxMDIyMTkwMTAzWhcNMjUxMDIzMTkwMTAzWjAzMTEwLwYDVQQD
EyhmYjg5ZDUwNzEwMGZiMmI2YmM5ZTJiOTFkNThiMmRkNjY5Yzc0ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiQzE2mnmiP1ebw01XYmq/EWVHbB
3485aN76HbtuC7K6ydeEtNNmgyT1KhoEXsG+8jaHpPeqXs5l+lHrc2oc0aVrmo5g
Pk79T2ZTMrugayTqNKu6wOqttj6HqiO4K3ksnQb9AXsAez/uXBc/AqPzBw3E0Khx
a+IBI1iLl9icHQOXRu3jmV9ZIfI5zI2glMw0g9EMF7YiVHIlA2u08qG4xgvVXgpT
+aVFsjEOhBl+NmFdFv1Hp7O6iOzu6za79E8t02dlWkKn+DfcCC6wIiNfmBT8MNGs
9K28MXVfd9cPcJSFZZPPnKVOUnvTa2l+56Q9n8pX8M6j1SE87uLY0O7k7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuJ1QcQD7K2vJ4rkdWLLdZpx0hmMB8GA1UdIwQY
MBaAFEBdZFdBIVZ3t3SNH979QWIHrbEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDkt
NDQwZGQwMTJiMTQxLzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDktNDQwZGQwMTJiMTQx
LzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmHvjSDf
ZCdwzX3WfKSK7uKr+Z3akxXFozhPo+Ixr4z+RNYeLT1jSTlENuf8FN0L29zbB5xu
eTCvGINIiCk7VdNhr590zoXjJkO6N9kfv0t8HYA5QW17+2KZKOV3xJZpPDSSArIq
JIAUjfNrWxdE/O5Z3ct51f9l9+xC82LImrLfPI541T0qomRZIprfAun8Ua1xbWTg
ENKLCdsIrQOxWDaV201Yr7v2l/ptkH5p186x6rcoPQHsqVpBFiFLfHfvHRrI5xxF
Xlh6NB+pM4eaESg+dcd9UboR0JZjOGStc081ridLfXdJ8UrDql/loV+WWwbdFQSN
rLP+rzVKaIWyIw==
-----END CERTIFICATE-----
Generated at Thu Oct 23 02:54:45 2025 by rpki-client