Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: 3QxD85Yn1aMV0LkelznawhJoXHUzk/+TC2RwJTRIn0c=
Subject key identifier: C9:CD:88:B8:7A:C4:DA:D1:2A:EC:70:18:7E:CE:6F:3E:F6:95:56:AB
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019A4EBD50D0F4C2F31C8B4FEEE6CD454A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0A55
Signing time: Tue 04 Nov 2025 12:00:21 +0000
Manifest this update: Tue 04 Nov 2025 12:00:21 +0000
Manifest next update: Wed 05 Nov 2025 12:00:21 +0000
Files and hashes: 1: RY9h-rx1ZstpJjozDETgohyO7Lk.roa (hash: 0CX3AZGe8LLC0uBgiztbMwk7WnvOC9Yq5FJHH6gri8w=)
2: gA8AYbCwcFJfHyhTWrHCSel_7z4.roa (hash: DRfyCzFOVemyTrr7A1FKb5ojCB7lbj59iDLvIoFfDN4=)
3: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: jVnPyJa019xo0Qb4O/UsL+SuvYpj7oZzEeDIKeQo/zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:50:d0:f4:c2:f3:1c:8b:4f:ee:e6:cd:45:4a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Nov 4 12:00:21 2025 GMT
Not After : Nov 5 12:00:21 2025 GMT
Subject: CN=c9cd88b87ac4dad12aec70187ece6f3ef69556ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:47:8d:08:b9:bb:dd:27:6b:06:6b:ae:35:
16:64:f3:a1:b3:fd:4b:b3:85:9f:e0:96:fa:5b:04:
ae:81:13:f0:45:df:2e:66:9b:cc:97:ec:dc:05:12:
fe:44:be:c2:07:af:6c:ca:95:bf:b2:41:a1:d2:1d:
05:1e:6f:44:1f:42:e0:1b:70:70:e4:cf:69:3c:8e:
d5:cd:48:30:d7:d2:28:7e:b1:d3:94:6d:e3:07:25:
b5:25:0d:be:fe:d0:47:99:bc:2f:2a:1c:af:7f:f3:
a8:6c:f7:86:bb:df:cf:df:b3:49:20:35:28:58:2d:
ed:e2:2d:5c:21:39:a3:4d:d9:49:95:a4:25:83:a7:
cf:44:51:28:5c:ae:30:8c:9f:72:13:1b:fb:7f:66:
fa:3b:eb:2b:68:2d:cd:e0:00:77:cd:f9:ee:b3:1f:
49:20:2d:fe:81:66:11:2b:2f:c7:40:17:eb:f5:df:
01:69:52:70:ab:4c:64:43:30:ec:f3:de:05:9c:7b:
9f:71:95:ca:29:37:9a:f1:75:2a:54:a4:11:3a:e2:
c1:b2:3e:75:5d:85:29:22:85:39:19:17:a8:18:f1:
87:55:8f:e1:34:59:94:0d:2f:1c:f5:21:35:73:25:
5d:89:ca:70:55:81:e5:84:e7:45:58:d5:3c:81:4f:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CD:88:B8:7A:C4:DA:D1:2A:EC:70:18:7E:CE:6F:3E:F6:95:56:AB
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:96:90:a1:4f:a0:2b:36:69:dc:bf:82:5f:c4:69:64:43:1e:
77:e6:2a:c0:ea:2e:bb:24:3d:12:7e:ca:a9:4e:84:45:bc:76:
93:88:a4:82:56:49:a4:32:3f:5b:34:41:60:7f:4c:43:f7:07:
6c:f7:53:5a:94:39:d8:06:41:c0:b7:37:f3:18:0c:37:c3:c7:
02:18:f9:59:50:e4:a6:30:a2:fd:57:6e:51:ac:ea:9d:c2:88:
44:1c:ba:0f:a3:d3:8d:09:92:c3:52:ca:ef:36:27:11:4d:92:
bd:a6:7f:43:34:a2:2f:7d:c2:2b:eb:62:dd:cd:00:e8:2f:bd:
90:2d:3d:12:25:6b:18:80:f5:90:eb:09:dd:22:21:74:fd:e1:
ae:cb:34:5e:e1:3c:96:88:19:fb:37:5d:4a:9b:17:34:e2:73:
7d:11:c1:12:a6:d4:92:d2:8e:f3:3c:12:c1:ae:d9:8e:2b:04:
26:14:fc:48:68:5a:f5:95:26:cf:c3:3f:db:c3:1b:ac:f8:b8:
5d:f5:76:8c:6a:1e:cc:ac:62:84:70:5f:51:e0:d2:c7:0b:32:
7d:32:40:fb:0a:3f:16:2b:fc:ad:75:63:24:72:9a:a7:4b:92:
fc:e8:15:5f:dd:9d:29:cd:80:85:35:79:4b:77:5c:10:0f:fb:
26:ad:3d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvVDQ9MLzHItP7ubNRUovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGFmMDAyMjUxMDZiMjA5NmU5YjIxZDlhYzJmMjA0MDY4
OGRlYTIwHhcNMjUxMTA0MTIwMDIxWhcNMjUxMTA1MTIwMDIxWjAzMTEwLwYDVQQD
EyhjOWNkODhiODdhYzRkYWQxMmFlYzcwMTg3ZWNlNmYzZWY2OTU1NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FRHjQi5u90nawZrrjUWZPOhs/1L
s4Wf4Jb6WwSugRPwRd8uZpvMl+zcBRL+RL7CB69sypW/skGh0h0FHm9EH0LgG3Bw
5M9pPI7VzUgw19IofrHTlG3jByW1JQ2+/tBHmbwvKhyvf/OobPeGu9/P37NJIDUo
WC3t4i1cITmjTdlJlaQlg6fPRFEoXK4wjJ9yExv7f2b6O+sraC3N4AB3zfnusx9J
IC3+gWYRKy/HQBfr9d8BaVJwq0xkQzDs894FnHufcZXKKTea8XUqVKQROuLBsj51
XYUpIoU5GReoGPGHVY/hNFmUDS8c9SE1cyVdicpwVYHlhOdFWNU8gU+dHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnNiLh6xNrRKuxwGH7Obz72lVarMB8GA1UdIwQY
MBaAFIEK8AIlEGsglumyHZrC8gQGiN6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMt
M2NhNDg4ZGVlZTg5LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMtM2NhNDg4ZGVlZTg5
LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZaQoU+g
KzZp3L+CX8RpZEMed+YqwOouuyQ9En7KqU6ERbx2k4ikglZJpDI/WzRBYH9MQ/cH
bPdTWpQ52AZBwLc38xgMN8PHAhj5WVDkpjCi/VduUazqncKIRBy6D6PTjQmSw1LK
7zYnEU2SvaZ/QzSiL33CK+ti3c0A6C+9kC09EiVrGID1kOsJ3SIhdP3hrss0XuE8
logZ+zddSpsXNOJzfRHBEqbUktKO8zwSwa7ZjisEJhT8SGha9ZUmz8M/28MbrPi4
XfV2jGoezKxihHBfUeDSxwsyfTJA+wo/Fiv8rXVjJHKap0uS/OgVX92dKc2AhTV5
S3dcEA/7Jq09lg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:02 2025 by rpki-client