Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: kbwmKH6bTqP4LyxUGXShW9IbvE70iLxHhwFXscxyiIc=
Subject key identifier: 65:5A:68:31:6B:B4:1D:EF:22:89:7E:40:BB:E1:D2:83:FB:59:87:DE
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 019A7149F11D9B79716AAA675129C9932081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 0F7B
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: SghGk9HLQdGqZMoKNEy8/D5gI1PVmwaIAFZrm/SGG98=)
2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f1:1d:9b:79:71:6a:aa:67:51:29:c9:93:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=655a68316bb41def22897e40bbe1d283fb5987de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:7c:df:94:9d:71:a9:b6:4f:da:a2:ec:d9:
c4:fe:5e:65:3f:fa:a6:0f:61:ad:71:0b:40:72:82:
f7:c7:cf:f4:85:25:78:9e:f5:82:3b:95:42:6a:47:
39:99:e5:f9:de:02:fb:a9:c9:c8:5b:29:f5:36:d7:
ed:d7:cc:54:7a:cb:a9:cf:51:33:0a:a4:e1:6c:dd:
f9:a8:c0:6d:dd:02:02:73:fa:b8:2b:39:70:3f:4d:
c9:1c:7e:fe:0d:61:22:c9:a6:25:cf:83:71:28:4c:
c5:60:02:db:54:85:ed:b4:db:7d:c8:db:cd:e5:fa:
35:61:31:e6:17:31:02:66:03:67:80:dd:9b:33:f2:
71:88:4c:25:3f:dd:06:04:39:b4:4c:f7:35:9e:84:
1e:ee:53:6e:2b:59:b2:a8:ee:59:10:b2:80:31:3c:
9e:02:12:25:c6:f1:6b:3e:38:af:9a:9f:c7:08:81:
8c:d1:6a:e0:f3:1a:3a:88:dd:6c:5f:97:3c:13:fa:
1f:7a:d1:79:79:91:e7:5d:3d:36:ea:0e:81:f6:f2:
4f:ad:19:e8:5d:15:14:84:e0:68:92:9a:de:16:8f:
4e:61:ad:18:1e:08:23:6b:58:6c:0a:dd:40:92:b2:
d1:48:c1:c0:37:dd:50:c2:59:12:c1:fb:da:f0:8a:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:68:31:6B:B4:1D:EF:22:89:7E:40:BB:E1:D2:83:FB:59:87:DE
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:16:7c:cd:dd:5f:ff:0d:41:5a:a5:8e:f0:39:54:86:dc:83:
b5:00:72:1a:bc:bf:74:b9:79:8b:f1:67:2f:d4:02:4d:64:9d:
ac:d0:bb:ad:96:47:fd:d0:cd:91:39:e8:a9:46:fa:ba:ab:03:
2a:1d:7a:2d:cf:c4:e5:6d:c6:b6:02:a1:ad:21:c1:42:32:a2:
44:3f:af:31:ea:1f:ca:20:0a:dd:c5:14:80:87:9f:3e:6f:0f:
15:1e:40:6a:61:25:22:8e:d1:46:77:9c:84:4b:38:97:2d:ec:
1f:1b:56:d9:f2:34:1e:ad:c6:4c:bb:38:27:cb:2f:39:01:c2:
d8:5c:03:df:96:4d:06:1a:ca:7d:9b:f3:3a:e0:ae:cc:62:35:
ed:97:8e:4e:24:58:50:ab:54:ed:d5:58:f0:0a:b1:11:7d:73:
1f:8e:e8:0f:ea:81:e8:c1:32:57:2b:1f:7a:bd:38:46:7a:02:
3d:3a:8a:c2:89:e6:ac:3a:a7:52:ff:4b:97:9e:b7:02:85:23:
36:9e:43:45:8f:2b:36:e9:9d:be:0d:da:5d:ca:cf:b6:13:ed:
50:93:39:fb:e2:c5:a6:90:71:29:1b:42:95:3b:90:c1:39:a2:
7d:4b:81:33:49:79:84:d5:98:92:75:47:4e:f2:e0:66:bd:0f:
84:80:c4:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSfEdm3lxaqpnUSnJkyCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMzAxNzc1YjNmZGZmMDRhMjI3ZDZkODU5YzAxYjZkNjMz
YTRmMGIwHhcNMjUxMTExMDUwMTAyWhcNMjUxMTEyMDUwMTAyWjAzMTEwLwYDVQQD
Eyg2NTVhNjgzMTZiYjQxZGVmMjI4OTdlNDBiYmUxZDI4M2ZiNTk4N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwp835Sdcam2T9qi7NnE/l5lP/qm
D2GtcQtAcoL3x8/0hSV4nvWCO5VCakc5meX53gL7qcnIWyn1Ntft18xUesupz1Ez
CqThbN35qMBt3QICc/q4KzlwP03JHH7+DWEiyaYlz4NxKEzFYALbVIXttNt9yNvN
5fo1YTHmFzECZgNngN2bM/JxiEwlP90GBDm0TPc1noQe7lNuK1myqO5ZELKAMTye
AhIlxvFrPjivmp/HCIGM0Wrg8xo6iN1sX5c8E/ofetF5eZHnXT026g6B9vJPrRno
XRUUhOBokpreFo9OYa0YHggja1hsCt1AkrLRSMHAN91QwlkSwfva8IpEkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVaaDFrtB3vIol+QLvh0oP7WYfeMB8GA1UdIwQY
MBaAFEMwF3Wz/f8EoifW2FnAG21jOk8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEt
MmNkMDA5MTBiY2I3LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEtMmNkMDA5MTBiY2I3
LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRZ8zd1f
/w1BWqWO8DlUhtyDtQByGry/dLl5i/FnL9QCTWSdrNC7rZZH/dDNkTnoqUb6uqsD
Kh16Lc/E5W3GtgKhrSHBQjKiRD+vMeofyiAK3cUUgIefPm8PFR5AamElIo7RRnec
hEs4ly3sHxtW2fI0Hq3GTLs4J8svOQHC2FwD35ZNBhrKfZvzOuCuzGI17ZeOTiRY
UKtU7dVY8AqxEX1zH47oD+qB6MEyVysfer04RnoCPTqKwonmrDqnUv9Ll563AoUj
Np5DRY8rNumdvg3aXcrPthPtUJM5++LFppBxKRtClTuQwTmifUuBM0l5hNWYknVH
TvLgZr0PhIDEPA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:38 2025 by rpki-client