Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json)
Hash identifier: VKCTt6RSHNeOG8yXX2fyDEJ64GLf1DC+5PyXvoNOqQY=
Subject key identifier: 1F:C3:A0:1C:7C:C8:B1:B2:A5:1E:8E:4F:85:E7:71:E0:EE:34:F6:70
Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Certificate serial: 019A1F88C0C7D85A069EA2D16B976A5F707D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
Manifest number: 108A
Signing time: Sun 26 Oct 2025 08:00:47 +0000
Manifest this update: Sun 26 Oct 2025 08:00:47 +0000
Manifest next update: Mon 27 Oct 2025 08:00:47 +0000
Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=)
2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: PbYpEK23ky5iKMizbhsYj+t4a45dc1mv4PHDmAAfoV8=)
3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=)
4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:c0:c7:d8:5a:06:9e:a2:d1:6b:97:6a:5f:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354
Validity
Not Before: Oct 26 08:00:47 2025 GMT
Not After : Oct 27 08:00:47 2025 GMT
Subject: CN=1fc3a01c7cc8b1b2a51e8e4f85e771e0ee34f670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:c6:81:b5:a0:1a:c6:3a:9f:2e:d9:f7:85:
30:e8:0a:41:b7:47:fc:ce:09:45:80:f8:0b:c2:b9:
c3:9a:61:fb:19:b0:f4:c0:68:c0:af:21:57:ea:6e:
0d:49:a0:7c:fc:ac:e2:87:fa:e8:d8:8d:02:11:ec:
7c:b6:73:c2:76:b3:94:e0:a5:db:09:93:bd:3d:f6:
6a:83:bc:9a:6e:8f:c1:77:69:ac:a1:f8:cc:26:33:
80:5e:9b:ba:a6:f4:dd:b1:93:98:64:8e:16:83:b8:
09:6d:57:33:0a:88:44:de:b5:ed:8f:0e:0a:d2:04:
9b:1c:50:d5:91:75:89:a8:39:e0:38:e6:06:9e:e2:
94:6a:ca:17:5c:00:3a:ae:c3:ab:1e:40:cd:48:27:
6a:9f:05:77:8a:6f:5c:22:95:a3:ef:12:bc:86:d5:
b6:f4:92:44:0a:d3:02:5c:bd:99:21:2a:3d:80:94:
50:13:31:33:c5:e6:0d:ba:00:82:30:7e:92:4d:4e:
8d:60:20:0c:35:96:46:bc:6b:94:ca:b9:82:76:1b:
ff:8a:e9:91:62:33:89:84:68:a3:7e:53:a1:00:3b:
e9:ea:1a:1f:e5:5b:4a:73:9c:10:4a:0c:42:0d:7e:
3d:32:2c:62:2a:f0:f4:a9:ed:76:6a:6a:9d:ca:69:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:A0:1C:7C:C8:B1:B2:A5:1E:8E:4F:85:E7:71:E0:EE:34:F6:70
X509v3 Authority Key Identifier:
keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b2:02:e0:fa:cb:e6:f8:b5:13:52:84:b1:84:d5:04:72:a9:
7b:01:da:ab:05:83:47:3f:b7:c6:f7:ac:f4:63:6e:a4:a0:d7:
2c:70:ae:1f:91:d2:a4:78:69:4e:e0:2b:72:07:61:7e:bf:8d:
99:e6:8d:4b:1b:a2:e3:cf:48:15:d3:6d:4a:fa:37:cc:1c:0d:
64:8b:c0:fd:19:4c:76:ce:6d:c2:88:20:a2:f5:6c:b8:f5:c1:
73:12:87:7c:ef:d5:d7:61:05:d2:95:42:8b:e4:86:7c:3a:e6:
09:c9:c6:0a:e9:df:05:0a:7c:15:53:35:59:e0:3e:72:c4:15:
61:e0:78:51:67:8d:48:bb:c9:37:95:28:d4:11:60:3a:c1:df:
04:02:6c:66:16:44:c0:69:09:ea:d0:5e:c6:ec:1f:e5:52:a1:
d2:90:55:12:11:57:b5:57:d8:e1:66:3f:0f:b1:1d:42:ed:eb:
70:21:30:8f:f3:9f:01:7c:f8:e0:b5:b8:71:10:e4:84:64:57:
2c:a9:32:bd:9f:e0:a2:9e:85:90:7d:10:28:2c:73:87:a1:6f:
89:9e:4e:5b:63:6b:c5:f7:bc:3b:90:e5:58:a7:93:5a:8f:10:
17:3e:f0:ab:c4:9c:63:0e:34:53:4e:26:dc:ce:63:8f:2e:69:
f4:85:fb:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofiMDH2FoGnqLRa5dqX3B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3
ZWMzNTQwHhcNMjUxMDI2MDgwMDQ3WhcNMjUxMDI3MDgwMDQ3WjAzMTEwLwYDVQQD
EygxZmMzYTAxYzdjYzhiMWIyYTUxZThlNGY4NWU3NzFlMGVlMzRmNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHPGgbWgGsY6ny7Z94Uw6ApBt0f8
zglFgPgLwrnDmmH7GbD0wGjAryFX6m4NSaB8/Kzih/ro2I0CEex8tnPCdrOU4KXb
CZO9PfZqg7yabo/Bd2msofjMJjOAXpu6pvTdsZOYZI4Wg7gJbVczCohE3rXtjw4K
0gSbHFDVkXWJqDngOOYGnuKUasoXXAA6rsOrHkDNSCdqnwV3im9cIpWj7xK8htW2
9JJECtMCXL2ZISo9gJRQEzEzxeYNugCCMH6STU6NYCAMNZZGvGuUyrmCdhv/iumR
YjOJhGijflOhADvp6hof5VtKc5wQSgxCDX49MixiKvD0qe12amqdymnWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/DoBx8yLGypR6OT4XnceDuNPZwMB8GA1UdIwQY
MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt
NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj
LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7IC4PrL
5vi1E1KEsYTVBHKpewHaqwWDRz+3xves9GNupKDXLHCuH5HSpHhpTuArcgdhfr+N
meaNSxui489IFdNtSvo3zBwNZIvA/RlMds5twoggovVsuPXBcxKHfO/V12EF0pVC
i+SGfDrmCcnGCunfBQp8FVM1WeA+csQVYeB4UWeNSLvJN5Uo1BFgOsHfBAJsZhZE
wGkJ6tBexuwf5VKh0pBVEhFXtVfY4WY/D7EdQu3rcCEwj/OfAXz44LW4cRDkhGRX
LKkyvZ/gop6FkH0QKCxzh6FviZ5OW2Nrxfe8O5DlWKeTWo8QFz7wq8ScYw40U04m
3M5jjy5p9IX7lw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:51:59 2025 by rpki-client