Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: zf6QhotJmurbUY6Nm1ojJO90QcgyrOscqzspCxSt4Lg=
Subject key identifier: 3B:8D:B3:C6:00:6E:F6:AB:7C:06:1B:A6:D9:09:4A:B8:59:C0:AD:18
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 019A4D0715F0941A8E706E14600A71F49BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 08DF
Signing time: Tue 04 Nov 2025 04:01:41 +0000
Manifest this update: Tue 04 Nov 2025 04:01:41 +0000
Manifest next update: Wed 05 Nov 2025 04:01:41 +0000
Files and hashes: 1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: zkQ3Pmr1FOeUB2pQweOU0Q+CP5e3f/IFr3cqa0vdNqg=)
2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:15:f0:94:1a:8e:70:6e:14:60:0a:71:f4:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Nov 4 04:01:41 2025 GMT
Not After : Nov 5 04:01:41 2025 GMT
Subject: CN=3b8db3c6006ef6ab7c061ba6d9094ab859c0ad18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:8f:80:c9:bd:a1:2c:0b:6a:bc:16:bb:5d:
ab:53:b5:f7:58:2c:d4:eb:19:67:52:ec:2a:8b:ce:
bd:f1:67:91:f7:b2:99:67:e9:83:1a:da:5d:ab:92:
77:71:cd:d1:83:3c:c9:b6:ab:d1:9d:56:26:eb:dc:
d4:a2:7c:5e:59:9f:6b:32:be:d1:a8:37:b9:b9:25:
56:59:45:e5:3a:87:70:28:35:0c:a0:0c:a1:09:12:
aa:46:b4:86:11:37:19:06:49:34:68:9f:6f:df:bf:
14:35:15:ce:b3:f7:0a:3c:7b:96:7f:43:16:96:eb:
3b:1f:22:8e:44:6f:4a:f0:59:6a:7d:b3:6c:41:b9:
67:71:f5:be:be:cc:f3:8d:eb:1a:90:da:c3:e3:92:
c2:00:1a:26:08:2a:a8:16:f7:88:dd:ba:a2:be:2f:
e4:49:77:1c:10:58:1f:8f:e9:1a:f0:9f:bf:a8:1a:
3d:86:19:18:48:13:d6:7b:d1:71:71:7d:a8:33:40:
1a:33:33:f3:b1:28:a9:ae:d4:5e:e5:0f:b6:cf:52:
51:1d:1a:5b:dc:14:4a:49:ce:f8:40:85:c5:f1:8e:
ab:92:7f:cd:f3:c9:a2:e7:be:11:3f:1d:8c:5f:87:
cb:67:77:2f:f8:7c:41:6f:a4:9b:bd:28:ba:82:64:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8D:B3:C6:00:6E:F6:AB:7C:06:1B:A6:D9:09:4A:B8:59:C0:AD:18
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ec:83:22:97:d1:78:cd:97:cb:61:fb:1b:bf:be:aa:8f:01:
5f:1b:df:fc:e8:a1:d9:12:22:3c:f6:fd:32:c9:93:e8:28:3e:
9d:05:73:7f:6f:35:e0:46:f2:25:b2:eb:a0:5f:ed:85:15:03:
81:2b:45:28:0f:88:d1:be:42:84:b7:c8:68:2a:d3:2e:66:f3:
be:d3:de:40:5d:20:9d:f7:dc:c5:77:09:26:95:e4:6c:3f:10:
f5:bb:f2:b8:95:92:0b:f2:ba:00:0a:17:de:c1:b8:e9:57:d9:
d9:df:b0:44:0a:ea:2c:6c:28:6e:e6:90:8a:aa:eb:ea:91:a2:
ac:7f:6f:53:70:48:f5:b3:fd:43:bd:ad:fe:30:51:26:7c:7a:
d0:1a:0d:5b:e9:c0:27:17:0e:6a:6f:81:89:97:20:32:60:8a:
30:a8:f4:bf:62:b9:ae:71:f4:4c:51:53:bb:ac:b8:ac:04:0a:
11:5b:77:7a:58:94:9a:e5:80:13:41:fd:dc:c0:22:37:5e:86:
9d:55:60:06:bb:0d:fb:8a:3a:ec:cc:2b:e8:37:e9:6c:c2:ea:
b9:2a:95:bf:f2:f8:8d:91:d1:8c:2d:6c:66:6d:02:aa:9d:09:
66:6b:2e:b2:03:70:3f:74:59:f8:a4:83:f1:8d:5d:d2:f0:75:
25:57:d0:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBxXwlBqOcG4UYApx9JvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw
ZDlkNDUwHhcNMjUxMTA0MDQwMTQxWhcNMjUxMTA1MDQwMTQxWjAzMTEwLwYDVQQD
EygzYjhkYjNjNjAwNmVmNmFiN2MwNjFiYTZkOTA5NGFiODU5YzBhZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoiPgMm9oSwLarwWu12rU7X3WCzU
6xlnUuwqi8698WeR97KZZ+mDGtpdq5J3cc3RgzzJtqvRnVYm69zUonxeWZ9rMr7R
qDe5uSVWWUXlOodwKDUMoAyhCRKqRrSGETcZBkk0aJ9v378UNRXOs/cKPHuWf0MW
lus7HyKORG9K8FlqfbNsQblncfW+vszzjesakNrD45LCABomCCqoFveI3bqivi/k
SXccEFgfj+ka8J+/qBo9hhkYSBPWe9FxcX2oM0AaMzPzsSiprtRe5Q+2z1JRHRpb
3BRKSc74QIXF8Y6rkn/N88mi574RPx2MX4fLZ3cv+HxBb6SbvSi6gmTu4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuNs8YAbvarfAYbptkJSrhZwK0YMB8GA1UdIwQY
MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt
NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi
LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+yDIpfR
eM2Xy2H7G7++qo8BXxvf/Oih2RIiPPb9MsmT6Cg+nQVzf2814EbyJbLroF/thRUD
gStFKA+I0b5ChLfIaCrTLmbzvtPeQF0gnffcxXcJJpXkbD8Q9bvyuJWSC/K6AAoX
3sG46VfZ2d+wRArqLGwobuaQiqrr6pGirH9vU3BI9bP9Q72t/jBRJnx60BoNW+nA
JxcOam+BiZcgMmCKMKj0v2K5rnH0TFFTu6y4rAQKEVt3eliUmuWAE0H93MAiN16G
nVVgBrsN+4o67Mwr6DfpbMLquSqVv/L4jZHRjC1sZm0Cqp0JZmsusgNwP3RZ+KSD
8Y1d0vB1JVfQcw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:48:38 2025 by rpki-client