Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: N2c61KopHp/3xtTvsHgBZvGqg08QfeGYoTfpSbdC+Wc=
Subject key identifier: 86:AC:68:B1:63:09:13:6A:AA:55:FD:38:3D:E9:98:72:08:BE:0F:9C
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 019A70A54A4B20CCF8EB75D85B6E4D0B1BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 16B5
Signing time: Tue 11 Nov 2025 02:01:11 +0000
Manifest this update: Tue 11 Nov 2025 02:01:11 +0000
Manifest next update: Wed 12 Nov 2025 02:01:11 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: cr8JuCo9uf+04Ahl87zzSshNsHUZDaTpLW5/iXcXzJQ=)
2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=)
3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4a:4b:20:cc:f8:eb:75:d8:5b:6e:4d:0b:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Nov 11 02:01:11 2025 GMT
Not After : Nov 12 02:01:11 2025 GMT
Subject: CN=86ac68b16309136aaa55fd383de9987208be0f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:77:b3:1b:73:ab:e5:74:67:05:05:a6:8f:
4a:46:9e:02:72:9c:62:89:6e:84:3e:69:c1:d3:d1:
be:9e:c8:dc:2a:2b:b8:e1:45:8a:46:b3:fd:22:23:
96:ab:76:94:26:8a:53:99:f6:9a:5c:bd:f1:64:88:
74:fb:22:fb:ea:bc:fd:64:c8:1c:9e:18:ce:fb:3f:
8c:73:8c:48:31:96:44:c2:9a:24:0e:76:66:84:b6:
1e:90:e3:47:88:b4:7d:b9:88:bb:ca:8f:ca:b4:d7:
78:76:26:70:f9:00:3c:bd:f6:a4:be:8f:50:05:31:
71:ec:15:6a:ae:90:3b:c6:67:7a:54:90:6d:c7:7e:
06:db:b2:0c:2d:2b:6e:db:ed:ad:cd:18:9c:37:27:
3d:d0:e4:42:75:8c:b3:8f:53:3c:fe:85:db:18:a2:
f5:1d:74:a3:b2:d6:06:07:12:11:83:e5:1e:c3:d7:
ae:37:dd:b3:8d:3e:46:fb:9d:b4:4f:fa:06:94:c5:
82:ce:4e:b9:ef:8a:0d:bc:23:c3:d1:74:5d:8f:d7:
48:8b:56:c0:2e:a6:02:c2:c4:c1:2e:a6:6f:82:30:
9e:2b:8a:fc:59:46:90:b7:c0:5c:ee:7a:ec:b1:bb:
29:e2:0d:5b:e7:d7:8d:78:91:c6:13:a1:3c:2d:5a:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AC:68:B1:63:09:13:6A:AA:55:FD:38:3D:E9:98:72:08:BE:0F:9C
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:5c:4b:ec:13:13:54:89:07:26:a7:47:96:74:f5:85:17:5a:
3f:40:d5:ee:ba:88:ca:7d:25:a4:c4:54:2c:74:61:5c:cf:59:
7c:6a:46:7d:d8:c6:18:96:37:c5:19:26:5c:fe:6c:a9:85:b3:
93:87:ae:e5:35:df:bb:58:93:3d:ad:5e:be:95:e0:20:b0:4e:
d5:be:a2:54:56:82:cf:2a:27:92:c5:ad:70:54:3f:15:76:97:
3b:c1:07:03:33:98:0e:fd:74:cd:90:50:20:b3:48:b9:b2:f7:
4c:17:64:5b:2f:0a:b6:57:2c:ac:90:89:da:29:7d:c4:f2:1c:
97:d7:98:de:90:1d:21:81:23:e9:97:77:9e:df:e9:39:df:80:
87:94:bb:60:4a:54:77:b9:4b:0a:fb:2b:92:27:78:ca:76:59:
ba:67:a4:f2:d2:bb:76:3f:82:1d:2b:be:7e:46:03:b9:ac:5d:
73:af:b9:7e:c6:c5:bc:db:55:6a:ba:a9:cf:3a:b7:1c:1b:9c:
17:40:91:98:e5:8f:48:97:1c:27:4e:a4:36:2b:08:d7:36:9e:
ee:40:9d:0f:3b:1e:35:0f:f4:35:08:aa:fd:cb:a7:87:eb:5c:
61:f8:36:06:da:4e:11:ac:b1:1c:00:7e:b3:0c:8d:35:09:78:
19:77:54:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpUpLIMz463XYW25NCxvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNWJmNDM3NWYxN2EwMzU3MDE5NjkwMzAxZjk0MTkzMjRm
ZjdkNDQwHhcNMjUxMTExMDIwMTExWhcNMjUxMTEyMDIwMTExWjAzMTEwLwYDVQQD
Eyg4NmFjNjhiMTYzMDkxMzZhYWE1NWZkMzgzZGU5OTg3MjA4YmUwZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuix3sxtzq+V0ZwUFpo9KRp4Ccpxi
iW6EPmnB09G+nsjcKiu44UWKRrP9IiOWq3aUJopTmfaaXL3xZIh0+yL76rz9ZMgc
nhjO+z+Mc4xIMZZEwpokDnZmhLYekONHiLR9uYi7yo/KtNd4diZw+QA8vfakvo9Q
BTFx7BVqrpA7xmd6VJBtx34G27IMLStu2+2tzRicNyc90ORCdYyzj1M8/oXbGKL1
HXSjstYGBxIRg+Uew9euN92zjT5G+520T/oGlMWCzk6574oNvCPD0XRdj9dIi1bA
LqYCwsTBLqZvgjCeK4r8WUaQt8Bc7nrssbsp4g1b59eNeJHGE6E8LVpOwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIasaLFjCRNqqlX9OD3pmHIIvg+cMB8GA1UdIwQY
MBaAFEJb9DdfF6A1cBlpAwH5QZMk/31EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQt
ZjBlZDhmZTgyYjk3LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMjhhNzUtZDUzZi00ZTlmLTgyZGQtZjBlZDhmZTgyYjk3
LzEvUWx2ME4xOFhvRFZ3R1drREFmbEJreVRfZlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFxL7BMT
VIkHJqdHlnT1hRdaP0DV7rqIyn0lpMRULHRhXM9ZfGpGfdjGGJY3xRkmXP5sqYWz
k4eu5TXfu1iTPa1evpXgILBO1b6iVFaCzyonksWtcFQ/FXaXO8EHAzOYDv10zZBQ
ILNIubL3TBdkWy8KtlcsrJCJ2il9xPIcl9eY3pAdIYEj6Zd3nt/pOd+Ah5S7YEpU
d7lLCvsrkid4ynZZumek8tK7dj+CHSu+fkYDuaxdc6+5fsbFvNtVarqpzzq3HBuc
F0CRmOWPSJccJ06kNisI1zae7kCdDzseNQ/0NQiq/cunh+tcYfg2BtpOEayxHAB+
swyNNQl4GXdUYw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:56 2025 by rpki-client