Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: wiO4hTb6a+qUKBXyiJq5Nhi6QcvaiA9Xv0anqODutU4=
Subject key identifier: B1:1B:A3:69:FC:10:2A:32:DD:0A:1F:AF:3C:94:2E:DB:B9:45:0E:2F
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019A1D2C762798F9AF5428EF8E9818F9122D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 16F7
Signing time: Sat 25 Oct 2025 21:00:44 +0000
Manifest this update: Sat 25 Oct 2025 21:00:44 +0000
Manifest next update: Sun 26 Oct 2025 21:00:44 +0000
Files and hashes: 1: 1-tobmuArgsO1CcS37ElbRPB4oI0.roa (hash: eoz/B2g3BVZDkFcVrm+jT5e/XqpAm/AHcMzK9BR9JlQ=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: vDjHCi3ygy0/ukm9PsLSbWhHQWIGPhDcnnzbcmMpsZU=)
3: dysGc3dUC19B4xYH14h547-J3bU.roa (hash: xZJSB931nK/0DYsJmXQtw/2T7yJN+gcQPJ/Rr8Mu1dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:76:27:98:f9:af:54:28:ef:8e:98:18:f9:12:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Oct 25 21:00:44 2025 GMT
Not After : Oct 26 21:00:44 2025 GMT
Subject: CN=b11ba369fc102a32dd0a1faf3c942edbb9450e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3b:f9:81:1e:a4:65:ab:d6:bf:12:fc:61:9d:
e2:57:a2:e3:c1:7f:5e:62:61:cf:9f:e4:60:1b:cd:
b1:a8:32:34:10:22:cf:5c:21:8d:30:cb:bd:08:44:
38:03:d1:71:74:d9:dc:cb:7b:28:d4:d9:bd:bb:0a:
19:4c:b2:b7:de:96:51:76:41:34:28:dc:51:11:8e:
32:fb:a8:c3:88:56:c3:38:ce:8e:cf:d5:15:6f:6d:
71:03:2e:63:49:9b:9b:5a:9b:33:31:ca:e4:2f:a2:
be:a6:0f:1e:3f:e3:ec:99:c1:f4:55:70:19:9c:b4:
40:d4:30:c5:89:e4:96:50:cb:25:af:a0:3c:10:ca:
6c:c5:13:b8:aa:15:af:0a:cc:af:da:70:d9:43:be:
78:9d:38:e6:d2:7d:32:12:e0:46:09:d9:7c:b7:6e:
7b:eb:cd:b7:cd:f6:ef:ac:75:b1:da:2a:2f:e3:21:
c9:89:dc:aa:69:ab:3f:68:26:45:25:c3:5e:cf:db:
87:a8:2c:05:40:d9:37:52:01:f4:ed:46:63:1a:8d:
0c:58:51:9f:fd:a7:c1:a0:12:db:2c:4f:cb:d4:ae:
e0:8a:64:77:5d:44:1e:49:34:cc:89:12:cb:35:a0:
d4:c0:10:e0:37:52:fa:f9:35:26:b1:be:fb:d2:be:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1B:A3:69:FC:10:2A:32:DD:0A:1F:AF:3C:94:2E:DB:B9:45:0E:2F
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4c:bb:f5:bb:24:18:e2:41:91:00:48:8d:a3:cb:9b:06:15:
22:c0:0a:4b:4e:83:e7:00:7c:e3:d9:88:7f:cd:be:cb:9a:96:
fa:d6:2c:f4:69:1a:6a:40:5f:cb:6a:46:36:09:de:7b:a0:46:
82:cc:bc:a0:f7:00:49:e8:b2:80:14:dc:9b:ce:05:46:54:d4:
36:25:e5:0f:6a:56:03:86:fc:54:18:b7:79:7e:00:9a:68:a9:
02:f2:39:4d:01:bb:53:92:0f:aa:f8:c1:85:10:bf:7a:d9:8a:
d5:a7:1b:0a:c2:a3:a9:cf:25:44:a6:6d:c0:68:5c:cb:16:84:
ef:fe:14:5f:8b:39:b4:66:b8:3f:c4:af:90:b3:12:b4:87:9a:
e5:f2:f0:d1:93:eb:ab:23:91:b1:f9:14:c3:99:ab:b5:74:7d:
46:69:dc:14:2c:68:2f:75:dc:c5:5c:76:65:0f:34:e3:35:d0:
42:ae:80:20:75:19:ef:4b:66:e1:57:50:f6:50:80:55:2f:9a:
5d:bc:55:3a:8b:50:e2:59:c9:7b:41:a7:72:00:0e:73:0d:2c:
c9:67:0f:1c:26:5b:57:0e:60:b1:ec:92:06:4a:ce:0c:d6:71:
a5:d1:32:43:5e:55:25:3b:c9:4b:b5:ad:0f:a1:31:52:34:19:
e1:cf:bf:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodLHYnmPmvVCjvjpgY+RItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl
YTU3MDIwHhcNMjUxMDI1MjEwMDQ0WhcNMjUxMDI2MjEwMDQ0WjAzMTEwLwYDVQQD
EyhiMTFiYTM2OWZjMTAyYTMyZGQwYTFmYWYzYzk0MmVkYmI5NDUwZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTv5gR6kZavWvxL8YZ3iV6LjwX9e
YmHPn+RgG82xqDI0ECLPXCGNMMu9CEQ4A9FxdNncy3so1Nm9uwoZTLK33pZRdkE0
KNxREY4y+6jDiFbDOM6Oz9UVb21xAy5jSZubWpszMcrkL6K+pg8eP+PsmcH0VXAZ
nLRA1DDFieSWUMslr6A8EMpsxRO4qhWvCsyv2nDZQ754nTjm0n0yEuBGCdl8t257
6823zfbvrHWx2iov4yHJidyqaas/aCZFJcNez9uHqCwFQNk3UgH07UZjGo0MWFGf
/afBoBLbLE/L1K7gimR3XUQeSTTMiRLLNaDUwBDgN1L6+TUmsb770r6NcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEbo2n8ECoy3QofrzyULtu5RQ4vMB8GA1UdIwQY
MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt
ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1
LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHky79bsk
GOJBkQBIjaPLmwYVIsAKS06D5wB849mIf82+y5qW+tYs9GkaakBfy2pGNgnee6BG
gsy8oPcASeiygBTcm84FRlTUNiXlD2pWA4b8VBi3eX4AmmipAvI5TQG7U5IPqvjB
hRC/etmK1acbCsKjqc8lRKZtwGhcyxaE7/4UX4s5tGa4P8SvkLMStIea5fLw0ZPr
qyORsfkUw5mrtXR9RmncFCxoL3XcxVx2ZQ804zXQQq6AIHUZ70tm4VdQ9lCAVS+a
XbxVOotQ4lnJe0GncgAOcw0syWcPHCZbVw5gseySBkrODNZxpdEyQ15VJTvJS7Wt
D6ExUjQZ4c+/xg==
-----END CERTIFICATE-----
Generated at Sun Oct 26 06:33:52 2025 by rpki-client