Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: ucVNI57DFKihhW9Z+z5VAHW8Cy3b7mdPnd7drrT8WYY=
Subject key identifier: 54:6D:0A:30:BF:BA:6A:BC:1F:76:C2:6C:5B:07:6D:F8:1F:88:CB:AC
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 019A2C683BDAC3FF75708A9027F0BF7F800D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 0712
Signing time: Tue 28 Oct 2025 20:00:19 +0000
Manifest this update: Tue 28 Oct 2025 20:00:19 +0000
Manifest next update: Wed 29 Oct 2025 20:00:19 +0000
Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: KE4Q2gdhPybncDdhukUCNzgmUaYDaPobWrN7DZmTbNo=)
2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:68:3b:da:c3:ff:75:70:8a:90:27:f0:bf:7f:80:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Oct 28 20:00:19 2025 GMT
Not After : Oct 29 20:00:19 2025 GMT
Subject: CN=546d0a30bfba6abc1f76c26c5b076df81f88cbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:1f:39:a4:d8:12:0b:f8:98:1c:25:5f:23:
e3:bd:23:e6:ed:e1:ed:c7:82:57:ce:98:d5:f8:b4:
3d:db:f5:b7:c6:d3:79:df:d5:ff:3b:2b:f4:e8:aa:
06:56:6a:b7:b4:80:ea:d1:f0:4a:47:59:68:0c:81:
2c:69:0a:c4:2e:d0:4d:22:a8:41:ae:ca:af:64:8c:
9c:2a:5d:1d:9c:50:b2:57:94:98:df:6b:55:a1:5a:
df:17:01:f0:de:ce:bc:6e:8d:2d:9e:0b:15:0b:a5:
df:bb:06:bf:ca:86:e6:ba:fb:ae:a2:f6:8d:17:7e:
4e:5a:c2:78:d8:79:8a:39:9d:02:7f:dc:73:5a:a7:
ec:ca:a2:5a:6b:d9:1f:15:b4:ff:6d:f5:67:4b:47:
b3:b5:69:b9:48:67:ef:6c:0d:49:5e:a8:da:f5:e7:
50:68:98:a2:e2:27:f0:e8:0d:34:b0:02:6a:2b:e0:
38:2f:2c:c2:34:b4:92:6d:82:f9:cd:9a:77:31:37:
0d:8e:8c:8d:48:0e:b3:b1:02:8a:ff:85:e2:9e:2f:
35:10:12:eb:bc:29:84:a5:16:da:c2:6c:e4:91:67:
76:39:ad:69:49:af:fb:79:e7:0f:b9:25:bb:ca:2d:
6a:96:a8:c6:02:05:0d:3c:7c:fa:8c:7c:70:51:3a:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6D:0A:30:BF:BA:6A:BC:1F:76:C2:6C:5B:07:6D:F8:1F:88:CB:AC
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:15:ee:2c:e2:4d:0f:06:2b:6c:d0:00:27:63:71:3f:37:e2:
3e:82:80:ff:9e:01:e2:0a:cf:74:bb:d4:b9:82:7b:21:b1:7d:
76:8b:c1:f2:19:b9:ce:a3:8b:13:d4:be:6d:c2:23:f2:9c:ca:
02:ba:8c:46:34:e8:31:7f:ae:09:25:f2:8c:1b:f0:c7:43:60:
3b:94:a5:e5:b2:9f:85:a7:1a:ed:8d:a1:c9:b8:e5:1c:fd:1d:
41:07:d5:83:40:16:82:f5:a5:01:84:24:7b:32:67:ea:36:41:
a7:63:1a:91:8c:02:c8:6e:e4:92:7f:50:f5:f8:f4:79:a7:2d:
be:c2:a4:b1:fd:c9:fc:fd:15:ff:22:18:8b:d6:d0:5f:42:51:
1c:ec:fd:95:f5:29:eb:90:9e:77:71:f7:4f:76:22:e1:ff:f9:
6b:af:7e:89:31:06:08:1a:f7:a8:1e:61:40:b1:c4:b5:84:20:
ac:e0:ce:ae:31:ec:95:77:25:06:b4:c9:82:49:e2:55:ed:ff:
57:cd:cc:9e:5b:5c:c9:aa:19:0a:a4:01:c6:4d:cf:96:73:5e:
f7:e0:29:34:44:4c:13:0e:c1:a4:09:24:f5:7b:c4:d1:64:0d:
2d:a7:06:03:b9:12:2f:24:00:1d:a0:9a:87:28:b2:7a:7e:99:
96:91:2c:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZosaDvaw/91cIqQJ/C/f4ANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MDJlYjIyYWU1YzBiNGRjZDM5YTBmOTY0MWEyNTcwNjM0
NDcxZjkwHhcNMjUxMDI4MjAwMDE5WhcNMjUxMDI5MjAwMDE5WjAzMTEwLwYDVQQD
Eyg1NDZkMGEzMGJmYmE2YWJjMWY3NmMyNmM1YjA3NmRmODFmODhjYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzykfOaTYEgv4mBwlXyPjvSPm7eHt
x4JXzpjV+LQ92/W3xtN539X/Oyv06KoGVmq3tIDq0fBKR1loDIEsaQrELtBNIqhB
rsqvZIycKl0dnFCyV5SY32tVoVrfFwHw3s68bo0tngsVC6Xfuwa/yobmuvuuovaN
F35OWsJ42HmKOZ0Cf9xzWqfsyqJaa9kfFbT/bfVnS0eztWm5SGfvbA1JXqja9edQ
aJii4ifw6A00sAJqK+A4LyzCNLSSbYL5zZp3MTcNjoyNSA6zsQKK/4Xini81EBLr
vCmEpRbawmzkkWd2Oa1pSa/7eecPuSW7yi1qlqjGAgUNPHz6jHxwUTqJGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRtCjC/umq8H3bCbFsHbfgfiMusMB8GA1UdIwQY
MBaAFEUC6yKuXAtNzTmg+WQaJXBjRHH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgt
OTNmNDI1NWYyYjgyLzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NTY1OWItMjRkNy00MjIwLWExMTgtOTNmNDI1NWYyYjgy
LzEvUlFMcklxNWNDMDNOT2FENVpCb2xjR05FY2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwhXuLOJN
DwYrbNAAJ2NxPzfiPoKA/54B4grPdLvUuYJ7IbF9dovB8hm5zqOLE9S+bcIj8pzK
ArqMRjToMX+uCSXyjBvwx0NgO5Sl5bKfhaca7Y2hybjlHP0dQQfVg0AWgvWlAYQk
ezJn6jZBp2MakYwCyG7kkn9Q9fj0eactvsKksf3J/P0V/yIYi9bQX0JRHOz9lfUp
65Ced3H3T3Yi4f/5a69+iTEGCBr3qB5hQLHEtYQgrODOrjHslXclBrTJgkniVe3/
V83MnltcyaoZCqQBxk3PlnNe9+ApNERMEw7BpAkk9XvE0WQNLacGA7kSLyQAHaCa
hyiyen6ZlpEsfQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 21:30:05 2025 by rpki-client