Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: ILlaIqRHv07DdC34wdNTAITZikVmMs3d2sv3XUc17qs=
Subject key identifier: 60:33:0F:A0:A7:2F:F0:CF:BE:64:AF:6F:70:71:7A:AE:6E:7C:4B:11
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 019A4EF484469716D39C130F42D72D60C013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 134F
Signing time: Tue 04 Nov 2025 13:00:38 +0000
Manifest this update: Tue 04 Nov 2025 13:00:38 +0000
Manifest next update: Wed 05 Nov 2025 13:00:38 +0000
Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: PrlQY9vxoO+6+fFtNKDAVta5H7ovyG988X4IxKClRwQ=)
3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:84:46:97:16:d3:9c:13:0f:42:d7:2d:60:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Nov 4 13:00:38 2025 GMT
Not After : Nov 5 13:00:38 2025 GMT
Subject: CN=60330fa0a72ff0cfbe64af6f70717aae6e7c4b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:a5:4e:fa:b9:c2:97:9f:9d:01:3f:24:78:
1b:3a:dc:8b:26:87:cb:e6:ab:9f:85:34:a4:e0:97:
e2:49:14:04:0e:ca:e2:a0:c6:ce:78:96:13:e3:88:
e0:ee:65:dd:d8:97:7b:4f:86:02:43:45:3e:a2:10:
75:96:aa:59:b7:cf:72:12:cc:33:7f:7b:ee:fa:a7:
cb:5a:f9:24:e3:c2:cd:14:66:00:33:11:ae:69:af:
f1:e4:a7:d3:12:38:85:03:93:8c:ac:a1:30:ad:b3:
02:4d:ce:24:da:ff:52:94:4f:da:7b:86:72:f9:7f:
28:5f:78:16:93:c0:5f:c1:85:25:77:a1:0f:f2:21:
4e:92:47:f0:70:48:b4:24:73:58:5b:97:bc:1e:79:
a8:88:b7:2e:eb:40:a0:98:4d:a9:9a:62:1d:f1:29:
eb:5f:c1:a2:0c:e3:60:1f:fd:68:83:85:7f:3a:14:
2e:e6:d6:b6:c3:fe:18:5b:e4:e6:6e:ff:1c:e9:07:
61:55:a1:80:f2:35:d6:fa:58:58:60:8f:99:03:ad:
f0:a6:c0:a2:01:34:62:1e:15:f0:e4:fc:53:5f:d9:
61:db:75:36:82:83:b3:de:40:29:db:eb:19:8c:71:
42:93:eb:65:70:37:a2:67:8d:fb:28:79:3a:5c:67:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:33:0F:A0:A7:2F:F0:CF:BE:64:AF:6F:70:71:7A:AE:6E:7C:4B:11
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:18:53:1e:ef:70:dc:f2:9c:ae:82:c1:db:47:3b:3d:59:ea:
a2:c8:ec:37:b1:10:f8:c4:0b:f6:bc:d5:3a:12:6c:42:d1:24:
43:bf:36:57:0a:af:66:5f:f0:3a:a1:55:07:44:97:63:c0:5a:
c0:58:2a:53:71:f3:88:a1:da:44:66:65:ca:f4:e8:8f:01:64:
6e:2e:15:ee:6b:0c:85:28:61:f6:9f:02:0e:7b:7a:c9:be:8e:
7b:0f:cc:5b:59:4b:d4:53:8c:ca:16:22:7d:38:ca:59:1f:48:
54:dd:c6:aa:75:68:51:dd:c3:f1:73:c3:dd:a6:32:a3:c1:ff:
de:44:29:42:ee:1b:24:23:1b:f7:a5:00:48:6f:4d:d4:6f:c7:
f0:3d:8c:6b:46:fa:8f:b9:51:cb:cb:d3:39:15:42:fc:e4:fc:
63:e4:bf:21:f4:16:0b:d9:ca:56:fb:c5:a5:22:d6:cf:6b:88:
1e:ff:06:84:a7:e6:58:5f:45:e1:39:0c:25:c7:30:81:8e:93:
5c:bf:36:46:98:81:13:b9:8f:1d:ea:24:1c:41:37:63:0c:91:
b5:ba:a1:ad:45:39:56:b6:e7:8a:c1:6c:59:9d:51:06:e3:33:
3c:1e:a5:9e:9a:1b:9b:91:06:f5:67:cb:65:b3:d7:25:b7:9a:
4c:d2:c5:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9IRGlxbTnBMPQtctYMATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzNhMzA5MWMzYjFhOGM5ZTgyYTA5ZDM3NDA5MGY2ZDcz
MDBiMjAwHhcNMjUxMTA0MTMwMDM4WhcNMjUxMTA1MTMwMDM4WjAzMTEwLwYDVQQD
Eyg2MDMzMGZhMGE3MmZmMGNmYmU2NGFmNmY3MDcxN2FhZTZlN2M0YjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vylTvq5wpefnQE/JHgbOtyLJofL
5qufhTSk4JfiSRQEDsrioMbOeJYT44jg7mXd2Jd7T4YCQ0U+ohB1lqpZt89yEswz
f3vu+qfLWvkk48LNFGYAMxGuaa/x5KfTEjiFA5OMrKEwrbMCTc4k2v9SlE/ae4Zy
+X8oX3gWk8BfwYUld6EP8iFOkkfwcEi0JHNYW5e8HnmoiLcu60CgmE2pmmId8Snr
X8GiDONgH/1og4V/OhQu5ta2w/4YW+Tmbv8c6QdhVaGA8jXW+lhYYI+ZA63wpsCi
ATRiHhXw5PxTX9lh23U2goOz3kAp2+sZjHFCk+tlcDeiZ437KHk6XGdn/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAzD6CnL/DPvmSvb3Bxeq5ufEsRMB8GA1UdIwQY
MBaAFKvDowkcOxqMnoKgnTdAkPbXMAsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMt
MThhNzY4YjYwZmNkLzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iNzM5ZTktMTZhOC00MmRmLTgyMGMtMThhNzY4YjYwZmNk
LzEvcThPakNSdzdHb3llZ3FDZE4wQ1E5dGN3Q3lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBhTHu9w
3PKcroLB20c7PVnqosjsN7EQ+MQL9rzVOhJsQtEkQ782VwqvZl/wOqFVB0SXY8Ba
wFgqU3HziKHaRGZlyvTojwFkbi4V7msMhShh9p8CDnt6yb6Oew/MW1lL1FOMyhYi
fTjKWR9IVN3GqnVoUd3D8XPD3aYyo8H/3kQpQu4bJCMb96UASG9N1G/H8D2Ma0b6
j7lRy8vTORVC/OT8Y+S/IfQWC9nKVvvFpSLWz2uIHv8GhKfmWF9F4TkMJccwgY6T
XL82RpiBE7mPHeokHEE3YwyRtbqhrUU5VrbnisFsWZ1RBuMzPB6lnpobm5EG9WfL
ZbPXJbeaTNLFgA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:50 2025 by rpki-client