Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: vKPvv/4gQ2kYf9Pu/+ObzO0s3w+9bf8NSq8n7b5xffI=
Subject key identifier: FD:2D:47:CD:1E:EE:2A:42:68:FF:1E:14:AB:E4:00:3B:EC:89:42:43
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 0199C2D64E52BF5E01249B6779040C3064A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1363
Signing time: Wed 08 Oct 2025 08:00:48 +0000
Manifest this update: Wed 08 Oct 2025 08:00:48 +0000
Manifest next update: Thu 09 Oct 2025 08:00:48 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: ZQcQb+pZpoh9TY+Ug7djJnMxMx8I1BCbPNRDLrhlQ58=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:d6:4e:52:bf:5e:01:24:9b:67:79:04:0c:30:64:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Oct 8 08:00:48 2025 GMT
Not After : Oct 9 08:00:48 2025 GMT
Subject: CN=fd2d47cd1eee2a4268ff1e14abe4003bec894243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:14:3b:18:af:c0:98:66:42:82:64:b6:6d:
b7:0d:e7:df:fb:bb:2f:34:d6:8e:70:65:aa:de:13:
51:81:a0:d5:e2:71:78:bb:f5:34:c5:2f:4b:ec:5e:
fc:c8:2d:7a:3b:53:cc:9e:28:ec:4a:dc:33:39:41:
6e:73:e3:a6:5f:5f:e2:5b:23:de:f0:4b:89:6e:f9:
8c:f4:8c:c1:7e:2d:b1:37:dc:83:90:d9:ab:e5:85:
4c:3d:45:ad:6d:c5:8f:8c:a3:43:78:01:80:5a:c4:
af:99:ad:33:cf:ae:0b:cc:4f:11:16:9e:5f:e4:c5:
3f:f3:78:83:4a:e0:09:6d:1c:00:da:d4:34:33:58:
d2:57:12:91:cc:90:d4:55:a0:c9:55:f3:1a:cd:6a:
0b:5d:05:96:dd:92:68:6d:ee:0c:d2:49:01:73:f4:
1e:a4:37:ca:dc:03:31:0e:23:50:22:7b:4a:f7:ec:
73:1b:c2:a8:bc:bc:ce:de:85:18:91:e9:32:ab:c3:
84:4d:c7:4c:59:0e:af:d0:92:92:e5:e2:4a:c2:8c:
a8:a2:74:04:f9:4e:87:bc:d1:35:41:a7:cd:a9:aa:
fc:0b:7f:f7:da:79:66:f4:dc:35:03:46:d5:f8:0a:
c1:fc:89:ec:01:3f:c4:38:69:16:61:20:53:eb:b4:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2D:47:CD:1E:EE:2A:42:68:FF:1E:14:AB:E4:00:3B:EC:89:42:43
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:8d:61:86:b1:cd:42:2c:a8:95:8d:7c:32:03:b6:e0:bf:
97:10:92:0a:25:48:92:76:80:6b:51:c3:b0:ad:ad:be:fe:43:
23:c4:f9:15:e9:ce:d2:c1:4c:13:65:1a:58:5e:72:e7:43:c0:
2e:a2:77:ab:8b:f0:20:9c:36:57:8e:d3:91:c0:af:14:ee:bd:
9a:52:3a:2a:11:1e:44:09:bd:b4:e0:89:d7:35:9c:c2:07:85:
b7:e4:ba:90:95:1a:c8:ad:80:76:6c:d3:1c:61:92:4d:65:0e:
10:99:e4:a9:f1:53:43:c7:82:67:9e:85:b3:99:d2:25:d2:83:
ce:e9:47:71:bb:c3:df:9d:e2:81:bd:f2:b8:e2:c1:f0:dc:46:
01:d4:7f:a3:4b:09:4e:dc:2b:87:a1:df:da:f0:50:d0:e9:e6:
d4:02:ef:dc:3b:9a:c5:67:46:c6:51:73:b3:dd:e5:1e:b9:d8:
10:17:6a:28:87:e4:d6:75:42:61:85:c9:3d:fe:3b:e0:db:35:
10:07:d2:0a:cd:7e:72:dc:9d:02:d3:51:8c:67:7b:bc:4a:2c:
b9:02:80:c5:f9:95:af:bc:0c:52:42:3b:b2:f3:5a:ed:af:2a:
a1:68:eb:27:16:da:11:bc:5b:ef:21:d9:f3:87:69:f9:e3:fb:
33:8c:6a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnC1k5Sv14BJJtneQQMMGSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNDk2NTg0ZTVjZjM5YjU2ODc0ZGU4ZGM3N2FhM2E2ZmY5
ZThhMWUwHhcNMjUxMDA4MDgwMDQ4WhcNMjUxMDA5MDgwMDQ4WjAzMTEwLwYDVQQD
EyhmZDJkNDdjZDFlZWUyYTQyNjhmZjFlMTRhYmU0MDAzYmVjODk0MjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpUUOxivwJhmQoJktm23Deff+7sv
NNaOcGWq3hNRgaDV4nF4u/U0xS9L7F78yC16O1PMnijsStwzOUFuc+OmX1/iWyPe
8EuJbvmM9IzBfi2xN9yDkNmr5YVMPUWtbcWPjKNDeAGAWsSvma0zz64LzE8RFp5f
5MU/83iDSuAJbRwA2tQ0M1jSVxKRzJDUVaDJVfMazWoLXQWW3ZJobe4M0kkBc/Qe
pDfK3AMxDiNQIntK9+xzG8KovLzO3oUYkekyq8OETcdMWQ6v0JKS5eJKwoyoonQE
+U6HvNE1QafNqar8C3/32nlm9Nw1A0bV+ArB/InsAT/EOGkWYSBT67SX1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0tR80e7ipCaP8eFKvkADvsiUJDMB8GA1UdIwQY
MBaAFENJZYTlzzm1aHTejcd6o6b/nooeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEt
ZTJjOTIyOGFhYzUzLzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEtZTJjOTIyOGFhYzUz
LzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu+NYYax
zUIsqJWNfDIDtuC/lxCSCiVIknaAa1HDsK2tvv5DI8T5FenO0sFME2UaWF5y50PA
LqJ3q4vwIJw2V47TkcCvFO69mlI6KhEeRAm9tOCJ1zWcwgeFt+S6kJUayK2AdmzT
HGGSTWUOEJnkqfFTQ8eCZ56Fs5nSJdKDzulHcbvD353igb3yuOLB8NxGAdR/o0sJ
Ttwrh6Hf2vBQ0Onm1ALv3DuaxWdGxlFzs93lHrnYEBdqKIfk1nVCYYXJPf474Ns1
EAfSCs1+ctydAtNRjGd7vEosuQKAxfmVr7wMUkI7svNa7a8qoWjrJxbaEbxb7yHZ
84dp+eP7M4xq6Q==
-----END CERTIFICATE-----
Generated at Wed Oct 8 15:47:27 2025 by rpki-client