Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: 0VKCfWGFMc7zMn0Sh4yPLO9j/5x3Pcog7tnbkjdBE0s=
Subject key identifier: B7:9F:BC:37:10:44:0F:1D:96:81:F9:C7:F3:00:30:AB:E0:CF:64:14
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 019A4DAA817FF6AE8B2468B2812F82C3C8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 07:00:10 +0000
Manifest this update: Tue 04 Nov 2025 07:00:10 +0000
Manifest next update: Wed 05 Nov 2025 07:00:10 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: Gfsu/v1+VHEod2vTCrWN2BYO94o05YBlQEMzNngxCjM=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:81:7f:f6:ae:8b:24:68:b2:81:2f:82:c3:c8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Nov 4 07:00:10 2025 GMT
Not After : Nov 5 07:00:10 2025 GMT
Subject: CN=b79fbc3710440f1d9681f9c7f30030abe0cf6414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:ff:1e:fd:e1:6f:24:62:67:af:b0:d8:6c:
3d:0b:d0:ef:fc:67:74:17:9b:9a:9f:b3:4f:ee:c2:
a7:81:eb:05:90:9d:c5:d1:88:4f:51:7b:e6:c6:ca:
4d:8c:a6:0d:bc:9b:58:61:6c:5f:19:66:0e:50:c2:
11:f8:21:28:53:cc:a9:b5:57:d1:d4:13:b3:64:ed:
c8:af:34:ea:55:06:77:57:9a:9f:82:00:f2:e4:bc:
e6:45:5d:dc:ae:d4:32:f1:31:06:85:1c:00:33:17:
16:52:ce:41:a6:9b:d5:6d:03:d9:32:ed:7b:2c:87:
bd:fb:a3:d3:25:d9:b5:84:f6:8b:d2:7b:2e:6a:43:
b2:3b:9a:51:30:e7:02:d3:b6:90:c6:58:e5:09:1e:
4e:b0:6f:62:ee:34:a7:cf:ac:b0:7a:5b:c0:89:2c:
b0:ba:a7:2a:03:dd:69:f0:ae:cb:9c:62:b8:d5:01:
b9:af:b0:59:15:42:a8:84:f6:d7:1d:d8:05:bf:bc:
ed:2d:59:fd:cf:0a:c9:1f:d7:a0:22:73:08:ca:2a:
e9:8e:9c:a8:73:4e:83:d6:6e:ac:e1:18:5f:92:9a:
95:9e:33:b0:ce:8c:0b:f1:48:ea:9e:e4:e8:c5:45:
ab:c9:bb:c6:c6:d9:2a:41:08:c5:44:3f:80:38:03:
97:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9F:BC:37:10:44:0F:1D:96:81:F9:C7:F3:00:30:AB:E0:CF:64:14
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:3f:4e:cd:fa:6d:90:91:8d:95:1f:4b:90:91:a6:df:94:
80:81:03:c6:08:6f:57:d3:50:cd:2c:91:f8:e1:b7:b7:e2:74:
14:f5:b4:06:29:a7:23:bf:d0:8e:a5:f5:54:10:e0:54:dd:67:
5a:12:9b:3a:75:1e:6a:1b:e3:d6:62:17:85:fb:29:4b:aa:cf:
fe:55:3a:b0:4a:ed:7e:d3:21:05:a7:b6:76:42:fd:c0:20:ab:
2f:5e:f1:93:a3:99:b2:8f:bd:3f:6f:2c:5e:5c:13:66:37:64:
c1:11:10:90:f1:f2:e9:cf:6b:fb:9d:64:1d:13:17:fb:88:8c:
d7:3c:b9:4e:37:9d:bc:4b:cf:72:1d:42:3e:dc:27:6d:82:15:
9d:35:d1:da:3d:94:bb:ec:db:14:56:e8:07:dd:96:ca:cc:79:
71:dc:20:7f:3c:25:55:1d:83:b3:81:93:61:a0:ec:e3:9c:5c:
5e:e1:1f:dc:ec:5c:78:92:a3:81:b1:d5:84:f0:74:be:7e:a1:
c4:82:f8:79:d5:22:57:e7:31:07:58:98:ff:a0:02:e7:2d:19:
12:be:fd:e6:a8:08:bb:6d:d7:a6:98:fb:4b:fa:ef:9b:0c:41:
4c:0c:d4:5d:d0:c4:20:cf:10:83:a8:2d:d5:11:97:55:89:b3:
b5:03:53:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqoF/9q6LJGiygS+Cw8jYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzRiOGRlYzEyODFiYzU0MzE3YzdmZWQwZTlhY2JjN2I5
N2NhYzcwHhcNMjUxMTA0MDcwMDEwWhcNMjUxMTA1MDcwMDEwWjAzMTEwLwYDVQQD
EyhiNzlmYmMzNzEwNDQwZjFkOTY4MWY5YzdmMzAwMzBhYmUwY2Y2NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC7/Hv3hbyRiZ6+w2Gw9C9Dv/Gd0
F5uan7NP7sKngesFkJ3F0YhPUXvmxspNjKYNvJtYYWxfGWYOUMIR+CEoU8yptVfR
1BOzZO3IrzTqVQZ3V5qfggDy5LzmRV3crtQy8TEGhRwAMxcWUs5BppvVbQPZMu17
LIe9+6PTJdm1hPaL0nsuakOyO5pRMOcC07aQxljlCR5OsG9i7jSnz6ywelvAiSyw
uqcqA91p8K7LnGK41QG5r7BZFUKohPbXHdgFv7ztLVn9zwrJH9egInMIyirpjpyo
c06D1m6s4RhfkpqVnjOwzowL8UjqnuToxUWrybvGxtkqQQjFRD+AOAOX9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLefvDcQRA8dloH5x/MAMKvgz2QUMB8GA1UdIwQY
MBaAFKk0uN7BKBvFQxfH/tDprLx7l8rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMt
MjdlZTQyZDkyNWFkLzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMtMjdlZTQyZDkyNWFk
LzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhW0/Ts36
bZCRjZUfS5CRpt+UgIEDxghvV9NQzSyR+OG3t+J0FPW0BimnI7/QjqX1VBDgVN1n
WhKbOnUeahvj1mIXhfspS6rP/lU6sErtftMhBae2dkL9wCCrL17xk6OZso+9P28s
XlwTZjdkwREQkPHy6c9r+51kHRMX+4iM1zy5TjedvEvPch1CPtwnbYIVnTXR2j2U
u+zbFFboB92Wysx5cdwgfzwlVR2Ds4GTYaDs45xcXuEf3OxceJKjgbHVhPB0vn6h
xIL4edUiV+cxB1iY/6AC5y0ZEr795qgIu23Xppj7S/rvmwxBTAzUXdDEIM8Qg6gt
1RGXVYmztQNTvg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:18 2025 by rpki-client