Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: c8KUgIx/RRb1y1EH8Xq0oTmBoUu77S1Rq1nD8I/LRyY=
Subject key identifier: 32:67:FA:F2:48:E7:D5:BA:49:71:FA:92:5E:C4:6A:1E:36:8E:C5:40
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 019A4F98C82842B42E6DF39372D37801C717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0BF0
Signing time: Tue 04 Nov 2025 16:00:03 +0000
Manifest this update: Tue 04 Nov 2025 16:00:03 +0000
Manifest next update: Wed 05 Nov 2025 16:00:03 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: vEojfqzHEr47RBL0qlDPGgh0AS0BTgDWzv1O1sqXNHs=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:c8:28:42:b4:2e:6d:f3:93:72:d3:78:01:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Nov 4 16:00:03 2025 GMT
Not After : Nov 5 16:00:03 2025 GMT
Subject: CN=3267faf248e7d5ba4971fa925ec46a1e368ec540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:a6:07:d4:c6:98:44:28:4c:94:c1:a2:f5:
b2:7e:b5:a1:56:81:80:3a:89:ce:61:59:e4:cf:c0:
0e:1a:32:06:2d:50:29:10:2a:de:f7:f2:bf:68:d0:
fe:db:69:7d:9b:6c:0d:25:cb:ae:66:28:c5:a1:ad:
3d:73:fd:6b:43:cd:bb:ec:91:c5:18:0f:1c:8b:c0:
39:81:30:d2:3b:05:4f:09:58:b1:c5:de:f9:95:c6:
5a:cb:ad:0f:e6:e9:1a:28:bb:af:af:e8:a7:94:66:
28:85:f8:13:81:e4:6a:87:61:ae:ff:31:66:fd:27:
8b:c1:b6:2e:76:b1:a2:bf:a9:62:13:23:5b:2b:81:
7a:15:b4:6e:7a:5b:aa:c2:15:14:0e:91:52:67:b7:
52:8b:d8:43:9e:d3:25:b7:47:58:be:b9:09:46:99:
1d:d5:e4:aa:c7:e2:7d:37:99:a5:01:73:d2:94:0b:
49:7e:4b:b7:74:e8:9c:f5:bb:9e:e2:19:3b:c5:c0:
d1:1a:ff:41:43:00:50:6f:0c:db:34:d0:a9:b1:26:
66:c5:d9:af:9e:00:14:c7:41:6a:8a:6c:9d:7a:42:
7d:30:77:73:f2:dc:8a:60:31:08:c8:0f:90:3e:31:
a1:60:fa:8a:74:56:da:9f:70:1b:f9:ee:44:90:1f:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:FA:F2:48:E7:D5:BA:49:71:FA:92:5E:C4:6A:1E:36:8E:C5:40
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5a:8c:b8:28:13:77:ac:51:e1:61:a2:6c:bf:52:77:f0:5c:
34:b1:d2:7d:c3:fc:4c:db:e3:30:ec:47:e8:f1:ee:e8:e6:95:
72:e2:bc:d0:d6:b2:99:17:f8:3f:5e:1b:64:ca:8c:00:80:33:
98:8b:e8:5a:4a:a1:ea:ca:9b:f7:50:d1:05:7c:7e:3c:5c:d5:
45:39:01:dd:2f:d2:e5:65:dc:89:5a:50:f1:db:19:9b:a8:7a:
a8:a8:3d:91:9c:fd:71:0d:08:91:08:26:03:14:61:38:73:95:
dd:5e:16:ed:5e:27:83:d5:8f:c6:dd:25:8c:dd:22:fc:51:22:
fb:46:be:fd:7c:b5:f1:84:15:83:9b:13:17:5a:39:ef:4f:a0:
e5:7b:81:24:7e:1c:75:5d:24:76:c0:7e:83:85:74:cd:69:bb:
bf:ab:66:b3:67:b6:0f:f0:5d:19:51:b0:d2:de:39:b9:ad:dd:
0c:aa:19:19:49:00:2f:10:ba:db:26:6d:3c:81:f0:22:aa:34:
a5:d3:82:68:c4:92:9e:d6:be:d7:66:41:96:ab:3d:99:88:43:
dc:fe:7d:91:6a:7a:fe:79:0c:ad:0a:e9:c1:d1:dc:d8:c3:16:
b6:2c:33:91:d2:0a:6c:40:29:d2:0f:74:b3:03:45:0a:b9:2c:
03:25:f1:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmMgoQrQubfOTctN4AccXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3
Nzc1ODEwHhcNMjUxMTA0MTYwMDAzWhcNMjUxMTA1MTYwMDAzWjAzMTEwLwYDVQQD
EygzMjY3ZmFmMjQ4ZTdkNWJhNDk3MWZhOTI1ZWM0NmExZTM2OGVjNTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjOmB9TGmEQoTJTBovWyfrWhVoGA
OonOYVnkz8AOGjIGLVApECre9/K/aND+22l9m2wNJcuuZijFoa09c/1rQ8277JHF
GA8ci8A5gTDSOwVPCVixxd75lcZay60P5ukaKLuvr+inlGYohfgTgeRqh2Gu/zFm
/SeLwbYudrGiv6liEyNbK4F6FbRueluqwhUUDpFSZ7dSi9hDntMlt0dYvrkJRpkd
1eSqx+J9N5mlAXPSlAtJfku3dOic9bue4hk7xcDRGv9BQwBQbwzbNNCpsSZmxdmv
ngAUx0FqimydekJ9MHdz8tyKYDEIyA+QPjGhYPqKdFban3Ab+e5EkB8PXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJn+vJI59W6SXH6kl7Eah42jsVAMB8GA1UdIwQY
MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et
NjA3Y2EwMjViOTRmLzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm
LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1qMuCgT
d6xR4WGibL9Sd/BcNLHSfcP8TNvjMOxH6PHu6OaVcuK80NaymRf4P14bZMqMAIAz
mIvoWkqh6sqb91DRBXx+PFzVRTkB3S/S5WXciVpQ8dsZm6h6qKg9kZz9cQ0IkQgm
AxRhOHOV3V4W7V4ng9WPxt0ljN0i/FEi+0a+/Xy18YQVg5sTF1o570+g5XuBJH4c
dV0kdsB+g4V0zWm7v6tms2e2D/BdGVGw0t45ua3dDKoZGUkALxC62yZtPIHwIqo0
pdOCaMSSnta+12ZBlqs9mYhD3P59kWp6/nkMrQrpwdHc2MMWtiwzkdIKbEAp0g90
swNFCrksAyXxwA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:32 2025 by rpki-client