Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: PxLsPIERqILnf80kbIdQunqI/Uo95Ow1xJ0UbyQAOXE=
Subject key identifier: 1C:23:E3:05:95:C7:FB:C7:D3:47:4D:9F:13:D1:57:88:DB:D4:F1:A1
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 019A0DB95624DE54583D831F466379BD89DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 1008
Signing time: Wed 22 Oct 2025 21:00:41 +0000
Manifest this update: Wed 22 Oct 2025 21:00:41 +0000
Manifest next update: Thu 23 Oct 2025 21:00:41 +0000
Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: l1OZuqQYh9jcFHOz+mzRWgq+pjuiR2n/msrOHVhAKGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b9:56:24:de:54:58:3d:83:1f:46:63:79:bd:89:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Oct 22 21:00:41 2025 GMT
Not After : Oct 23 21:00:41 2025 GMT
Subject: CN=1c23e30595c7fbc7d3474d9f13d15788dbd4f1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:55:91:c3:e2:66:84:2d:a2:a4:46:a4:3e:
6f:21:e2:3e:e5:06:1c:19:c3:78:dd:32:5d:cf:a7:
c6:0a:a0:e9:f1:dc:0f:2c:10:b2:36:55:cf:31:01:
72:0f:c2:d0:c7:54:ea:c9:fb:80:af:76:0e:f2:cb:
d5:83:6c:73:39:6c:59:e9:15:aa:d4:7c:0c:0a:25:
98:48:b2:86:4d:62:12:d5:46:fc:ab:a2:b2:a2:dd:
8d:e6:cc:27:d6:9c:ec:da:74:17:6e:bb:f0:cf:b6:
2b:23:c2:fb:b0:64:15:87:14:47:f8:9f:4e:6f:e3:
c9:b7:75:f0:cb:02:05:a0:b5:43:f2:74:2c:e0:6d:
3c:22:17:f3:84:d1:ad:d8:7c:d1:e1:c1:40:fe:75:
99:8a:a0:28:7f:66:83:7f:78:3e:9c:88:fb:6f:dc:
7c:79:d4:17:be:51:45:29:7f:3a:1d:9e:3e:46:2a:
68:6a:06:f7:74:65:d7:8a:4c:b7:04:7e:91:fe:c3:
2c:17:e5:cb:75:67:86:c1:2c:a5:b8:b9:60:47:b2:
31:13:44:b2:cd:d9:13:bd:59:c1:09:ee:e5:36:cb:
9b:af:9d:0f:54:9d:6a:81:c3:18:ee:df:ff:62:54:
69:b4:53:08:87:49:9c:a6:fb:c0:93:b8:c8:e3:34:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:23:E3:05:95:C7:FB:C7:D3:47:4D:9F:13:D1:57:88:DB:D4:F1:A1
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3b:c6:ac:36:0c:ee:93:56:21:7f:5e:4b:ac:92:be:35:4e:
94:cd:6d:9f:1e:9d:da:75:9a:73:dd:9e:1d:7c:a1:43:39:96:
d5:0b:63:2a:ee:a1:4a:c7:5e:9b:fb:fa:42:67:89:d7:eb:69:
c8:9c:3b:e9:6a:32:46:e9:21:19:e3:fe:a2:e9:b9:43:21:d2:
7b:8b:05:5b:07:9c:02:31:97:23:8a:ca:fe:b1:d7:54:64:0d:
e2:d9:e6:ce:30:f0:ce:59:36:77:13:49:ed:aa:d1:4d:7c:95:
da:76:ed:01:6c:d4:7a:52:82:47:f3:91:fa:fe:90:c8:31:b0:
56:f9:3f:6f:6f:65:c4:d5:a6:6e:95:20:c7:91:e8:61:12:25:
f5:6b:28:51:05:a3:d8:bb:ba:08:ed:9a:61:ba:08:1a:a6:68:
82:88:0f:44:17:c4:83:24:7d:d7:cd:33:f1:78:ac:9c:6c:6f:
f4:bc:04:36:ef:54:bb:dd:97:2d:be:31:92:96:05:74:1f:48:
41:6b:d4:22:d2:73:7c:29:17:00:e9:63:3d:f3:8a:cc:f5:8e:
d3:0a:b4:71:af:a6:e5:c9:03:5c:78:db:80:9e:83:17:0c:e6:
c1:ae:af:e7:d5:95:ab:2e:b4:9c:b2:de:01:ce:ef:98:8a:77:
d6:02:1b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoNuVYk3lRYPYMfRmN5vYnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzljYzE2MjFlZTMwMTBhZTk4ZTEyN2JkMjU0YTc4MzNm
ZDI4MjcwHhcNMjUxMDIyMjEwMDQxWhcNMjUxMDIzMjEwMDQxWjAzMTEwLwYDVQQD
EygxYzIzZTMwNTk1YzdmYmM3ZDM0NzRkOWYxM2QxNTc4OGRiZDRmMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB9VkcPiZoQtoqRGpD5vIeI+5QYc
GcN43TJdz6fGCqDp8dwPLBCyNlXPMQFyD8LQx1TqyfuAr3YO8svVg2xzOWxZ6RWq
1HwMCiWYSLKGTWIS1Ub8q6Kyot2N5swn1pzs2nQXbrvwz7YrI8L7sGQVhxRH+J9O
b+PJt3XwywIFoLVD8nQs4G08IhfzhNGt2HzR4cFA/nWZiqAof2aDf3g+nIj7b9x8
edQXvlFFKX86HZ4+Ripoagb3dGXXiky3BH6R/sMsF+XLdWeGwSyluLlgR7IxE0Sy
zdkTvVnBCe7lNsubr50PVJ1qgcMY7t//YlRptFMIh0mcpvvAk7jI4zRe3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwj4wWVx/vH00dNnxPRV4jb1PGhMB8GA1UdIwQY
MBaAFKk5zBYh7jAQrpjhJ70lSngz/SgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYt
YjA2MTk0ZDEzYzZiLzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9kNWJmNzItMzExNS00YzcxLWExYmYtYjA2MTk0ZDEzYzZi
LzEvcVRuTUZpSHVNQkN1bU9FbnZTVktlRFA5S0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszvGrDYM
7pNWIX9eS6ySvjVOlM1tnx6d2nWac92eHXyhQzmW1QtjKu6hSsdem/v6QmeJ1+tp
yJw76WoyRukhGeP+oum5QyHSe4sFWwecAjGXI4rK/rHXVGQN4tnmzjDwzlk2dxNJ
7arRTXyV2nbtAWzUelKCR/OR+v6QyDGwVvk/b29lxNWmbpUgx5HoYRIl9WsoUQWj
2Lu6CO2aYboIGqZogogPRBfEgyR9180z8XisnGxv9LwENu9Uu92XLb4xkpYFdB9I
QWvUItJzfCkXAOljPfOKzPWO0wq0ca+m5ckDXHjbgJ6DFwzmwa6v59WVqy60nLLe
Ac7vmIp31gIbGg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 06:54:53 2025 by rpki-client