Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
File: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft (raw, json)
Hash identifier: /YGrKy3yGXs1FHljaXCZcQhf3Jrq13tQlBmvA/avj18=
Subject key identifier: 81:54:A9:C1:D1:3F:E7:7A:7B:E9:D9:A3:7A:57:F1:A9:77:01:20:E6
Authority key identifier: A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
Certificate issuer: /CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Certificate serial: 019A4E4FFB452CD2CF5593309C80AFA36976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
Manifest number: 0799
Signing time: Tue 04 Nov 2025 10:00:55 +0000
Manifest this update: Tue 04 Nov 2025 10:00:55 +0000
Manifest next update: Wed 05 Nov 2025 10:00:55 +0000
Files and hashes: 1: 5O0UiD_W3tjgR9ssx2_M3oXSAqs.roa (hash: gAGUmwLvei624zjz2Ru7prJo+tns2dqLybNdH1gm80g=)
2: fjZ2O6X1drD4u2kQUpCSZOgPEgQ.roa (hash: C+uPnjidRp+aUpGFTJLFRy477yZGyTAEpW7NYrD38KM=)
3: jckFFgzdtVKgfSlQxhVd7W95rM8.roa (hash: oIp603TFU7IlaG9OGhW5gPhcNVyBuPYe1O+RSg1I+es=)
4: qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl (hash: tolTYlzcFQqv2WRmhp+tvfgW5/GkIfFbDPaZFpF66xA=)
5: zkvZvBR_ZIBD-QsAPtiUmTfPoYw.roa (hash: QZPnljABa+B7L3bRvs6ZKt265sGoFXO7IkclbyLbbsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fb:45:2c:d2:cf:55:93:30:9c:80:af:a3:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e4918fc7fdfb73bba8cf58d4cb5fe449cf83f6
Validity
Not Before: Nov 4 10:00:55 2025 GMT
Not After : Nov 5 10:00:55 2025 GMT
Subject: CN=8154a9c1d13fe77a7be9d9a37a57f1a9770120e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:f0:77:72:59:e7:57:55:69:f7:1a:c3:38:
f0:bf:e8:96:83:1d:d6:7c:81:64:1c:d5:b7:02:56:
f8:d6:16:50:60:5d:c6:9f:39:ed:16:be:dc:e2:90:
59:b9:7d:37:ef:0b:92:a2:2b:9f:cf:f6:2f:eb:d6:
0d:59:e1:e0:1e:33:e8:c5:0a:15:7a:fd:b1:4c:19:
f4:4b:38:7a:58:fe:e1:25:bf:19:a8:b3:8a:c7:b4:
70:f9:79:af:09:67:72:77:21:92:40:33:94:6a:c3:
ed:ee:87:e2:d6:aa:6c:4a:5d:87:b0:11:c8:69:e4:
cd:e5:81:27:6d:fd:57:5b:47:39:b7:96:63:3d:50:
2a:04:f7:1d:ec:4f:29:8f:ff:de:e8:18:89:40:0d:
df:9b:90:f3:70:f3:c0:6d:1c:75:7c:00:a6:01:3f:
19:c0:86:94:4d:71:ff:db:8b:00:0d:70:f0:1b:69:
02:f7:d1:fd:be:4b:2b:5f:8f:4e:9f:3d:9a:03:f3:
0e:c4:f0:24:0d:e2:cb:57:cd:cb:ea:8d:7c:30:67:
24:a6:57:53:ba:da:73:5e:61:33:bd:2e:d3:6d:27:
eb:4c:ed:90:c6:41:da:df:56:fd:ba:76:d9:45:46:
67:ba:3a:2e:66:32:95:40:bd:9f:40:8c:4b:0a:d2:
92:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:54:A9:C1:D1:3F:E7:7A:7B:E9:D9:A3:7A:57:F1:A9:77:01:20:E6
X509v3 Authority Key Identifier:
keyid:A8:E4:91:8F:C7:FD:FB:73:BB:A8:CF:58:D4:CB:5F:E4:49:CF:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/185eb3-2ab2-45b5-aa33-015ea5019520/1/qOSRj8f9-3O7qM9Y1Mtf5EnPg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:6b:77:91:31:a4:35:e6:f2:47:a8:eb:1d:10:c7:14:b1:
c1:69:17:35:ae:c8:91:47:7c:37:64:cd:24:da:5d:34:9e:19:
bc:53:fa:7d:47:e2:ae:68:27:82:3a:50:e0:b7:a0:9a:71:91:
6b:02:89:ce:42:1b:b9:2a:86:4b:ce:e0:5b:39:7e:9f:17:f7:
0b:55:6e:50:a8:c1:55:73:44:3b:de:d4:7b:22:37:60:31:e8:
65:fd:08:71:60:f3:e0:3c:86:17:ef:8b:74:ad:92:2d:c0:4c:
e7:16:b4:81:18:10:11:2e:ef:5b:4f:ff:19:5b:d8:0b:67:3a:
41:13:1b:fc:0b:c3:56:f8:1a:36:e9:f6:3b:60:32:4c:eb:78:
f4:c4:2d:77:da:9c:85:75:57:5c:df:04:a5:4e:c7:1e:2e:fb:
57:f8:bb:b2:66:68:40:00:e1:9a:24:7b:aa:70:a3:2e:72:10:
99:78:5e:3e:33:2f:07:25:f2:ad:21:1f:ea:58:48:a1:3e:83:
bc:32:be:a1:8d:75:4e:9d:55:00:44:a0:9a:e5:6e:a7:25:67:
f8:69:b2:71:8d:31:97:8e:2a:75:aa:5b:a4:86:fe:a2:a0:b1:
e0:a5:2e:03:56:44:6a:7e:1e:30:f6:dd:f7:62:f2:2b:bb:cb:
ea:b4:92:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT/tFLNLPVZMwnICvo2l2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZTQ5MThmYzdmZGZiNzNiYmE4Y2Y1OGQ0Y2I1ZmU0NDlj
ZjgzZjYwHhcNMjUxMTA0MTAwMDU1WhcNMjUxMTA1MTAwMDU1WjAzMTEwLwYDVQQD
Eyg4MTU0YTljMWQxM2ZlNzdhN2JlOWQ5YTM3YTU3ZjFhOTc3MDEyMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZXwd3JZ51dVafcawzjwv+iWgx3W
fIFkHNW3Alb41hZQYF3GnzntFr7c4pBZuX037wuSoiufz/Yv69YNWeHgHjPoxQoV
ev2xTBn0Szh6WP7hJb8ZqLOKx7Rw+XmvCWdydyGSQDOUasPt7ofi1qpsSl2HsBHI
aeTN5YEnbf1XW0c5t5ZjPVAqBPcd7E8pj//e6BiJQA3fm5DzcPPAbRx1fACmAT8Z
wIaUTXH/24sADXDwG2kC99H9vksrX49Onz2aA/MOxPAkDeLLV83L6o18MGckpldT
utpzXmEzvS7TbSfrTO2QxkHa31b9unbZRUZnujouZjKVQL2fQIxLCtKS3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFUqcHRP+d6e+nZo3pX8al3ASDmMB8GA1UdIwQY
MBaAFKjkkY/H/ftzu6jPWNTLX+RJz4P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMt
MDE1ZWE1MDE5NTIwLzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xODVlYjMtMmFiMi00NWI1LWFhMzMtMDE1ZWE1MDE5NTIw
LzEvcU9TUmo4ZjktM083cU05WTFNdGY1RW5QZ19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATQtrd5Ex
pDXm8keo6x0QxxSxwWkXNa7IkUd8N2TNJNpdNJ4ZvFP6fUfirmgngjpQ4LegmnGR
awKJzkIbuSqGS87gWzl+nxf3C1VuUKjBVXNEO97UeyI3YDHoZf0IcWDz4DyGF++L
dK2SLcBM5xa0gRgQES7vW0//GVvYC2c6QRMb/AvDVvgaNun2O2AyTOt49MQtd9qc
hXVXXN8EpU7HHi77V/i7smZoQADhmiR7qnCjLnIQmXhePjMvByXyrSEf6lhIoT6D
vDK+oY11Tp1VAESgmuVupyVn+GmycY0xl44qdapbpIb+oqCx4KUuA1ZEan4eMPbd
92LyK7vL6rSSlQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:04:56 2025 by rpki-client