Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: lRJrvuZhMDqPMR/jdGgSma+CxiyN7M1iNRFNK1PmtB4=
Subject key identifier: 74:C4:2D:69:B0:32:67:2B:2D:84:7C:4D:60:4E:17:DD:36:20:81:56
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 0199D43821B902850ED4E66A8673BD90BF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 078B
Signing time: Sat 11 Oct 2025 17:01:12 +0000
Manifest this update: Sat 11 Oct 2025 17:01:12 +0000
Manifest next update: Sun 12 Oct 2025 17:01:12 +0000
Files and hashes: 1: 6PUuNM6kD7H9KDBzDlL_59AGPNY.roa (hash: njnCyxOOncTtTG+MixsjROLgTFP3LTieMN/tci4brok=)
2: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: iKfV88kO8PVPzfsvgoSoYNF9WplBpo90zsc0RAbE3zA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d4:38:21:b9:02:85:0e:d4:e6:6a:86:73:bd:90:bf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Oct 11 17:01:12 2025 GMT
Not After : Oct 12 17:01:12 2025 GMT
Subject: CN=74c42d69b032672b2d847c4d604e17dd36208156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:52:b6:41:86:91:6f:99:cc:23:c1:86:b4:
ef:e0:a3:9e:5d:c6:2a:bb:ea:83:f7:90:87:9e:14:
e5:7c:9d:99:5e:51:01:cd:bb:28:0f:e1:1d:0b:8d:
49:a1:ff:36:73:e0:bd:a4:8d:f5:b4:48:59:a5:24:
c0:db:6c:73:74:2f:e3:cc:63:c0:56:50:cb:9f:a1:
8e:0a:31:71:5c:35:e1:f3:63:b3:2d:d3:b3:d9:b4:
ee:d3:03:ad:9d:7b:49:16:74:0d:50:46:0e:b3:5e:
26:e7:ab:b7:ad:b6:ae:ac:ce:75:8e:5c:d7:5d:76:
ec:79:eb:23:ac:74:83:56:7c:56:94:84:52:df:0e:
77:17:bb:9c:46:1a:91:4d:0e:31:97:a2:a3:9c:a6:
ad:1c:b9:71:bf:27:41:50:d9:fb:b6:c5:ae:0a:77:
c0:6c:74:d4:41:36:5d:bc:aa:f9:14:23:85:1f:3d:
75:7f:84:58:37:86:36:4f:58:fa:3a:b4:51:bc:ea:
3e:02:40:e7:99:59:92:ac:ce:24:6d:d6:d0:c9:38:
18:73:a0:61:76:92:9b:c6:1a:25:71:55:26:e4:52:
5a:14:51:28:5a:fc:14:2c:df:c3:ca:02:2a:59:83:
3e:fb:e7:ef:35:53:19:d5:44:1f:0b:bd:67:0e:19:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C4:2D:69:B0:32:67:2B:2D:84:7C:4D:60:4E:17:DD:36:20:81:56
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a1:fc:cf:80:f0:b9:76:34:71:f6:b3:cc:43:56:58:a3:d3:
f4:8e:5e:56:53:67:07:78:58:c2:9e:8e:e1:b2:0d:69:9c:1a:
0e:cf:ef:02:5f:fa:49:7c:13:ae:c7:12:58:f9:9c:fd:a2:cf:
68:f4:be:60:86:e8:04:58:25:ea:bf:27:63:33:bf:eb:c3:ff:
37:b7:5a:24:30:b9:6c:1a:ee:91:24:da:2c:3c:da:4b:56:e9:
c9:54:41:1b:d8:08:5d:9a:97:a5:65:6f:f6:ee:36:30:75:5d:
5f:04:bf:67:a2:03:c4:08:03:5e:f2:bf:41:fe:05:c9:66:98:
44:cb:92:7e:e1:d0:bd:ee:fe:3a:9b:49:80:de:2f:3e:09:9a:
d4:a4:1a:47:71:b7:aa:37:0b:b4:f6:98:9d:b8:01:40:1e:66:
a4:fa:9e:44:27:2a:74:00:78:89:6e:5e:11:d2:b0:fd:52:30:
85:72:72:4f:80:66:81:f3:6e:b8:84:a3:bf:8e:48:e6:da:9e:
90:cd:69:00:60:5a:ee:2c:74:48:24:1f:58:8b:ca:eb:69:bf:
19:70:ff:f2:6d:01:fd:81:fa:85:88:31:1f:3a:f6:92:1b:67:
d5:9d:ec:cf:b5:5f:33:27:0c:52:cf:bc:8e:2f:32:4b:cb:43:
b2:a0:d0:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnUOCG5AoUO1OZqhnO9kL9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj
MTE2M2IwHhcNMjUxMDExMTcwMTEyWhcNMjUxMDEyMTcwMTEyWjAzMTEwLwYDVQQD
Eyg3NGM0MmQ2OWIwMzI2NzJiMmQ4NDdjNGQ2MDRlMTdkZDM2MjA4MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEpStkGGkW+ZzCPBhrTv4KOeXcYq
u+qD95CHnhTlfJ2ZXlEBzbsoD+EdC41Jof82c+C9pI31tEhZpSTA22xzdC/jzGPA
VlDLn6GOCjFxXDXh82OzLdOz2bTu0wOtnXtJFnQNUEYOs14m56u3rbaurM51jlzX
XXbseesjrHSDVnxWlIRS3w53F7ucRhqRTQ4xl6KjnKatHLlxvydBUNn7tsWuCnfA
bHTUQTZdvKr5FCOFHz11f4RYN4Y2T1j6OrRRvOo+AkDnmVmSrM4kbdbQyTgYc6Bh
dpKbxholcVUm5FJaFFEoWvwULN/DygIqWYM+++fvNVMZ1UQfC71nDhn0yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTELWmwMmcrLYR8TWBOF902IIFWMB8GA1UdIwQY
MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt
N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw
LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqH8z4Dw
uXY0cfazzENWWKPT9I5eVlNnB3hYwp6O4bINaZwaDs/vAl/6SXwTrscSWPmc/aLP
aPS+YIboBFgl6r8nYzO/68P/N7daJDC5bBrukSTaLDzaS1bpyVRBG9gIXZqXpWVv
9u42MHVdXwS/Z6IDxAgDXvK/Qf4FyWaYRMuSfuHQve7+OptJgN4vPgma1KQaR3G3
qjcLtPaYnbgBQB5mpPqeRCcqdAB4iW5eEdKw/VIwhXJyT4BmgfNuuISjv45I5tqe
kM1pAGBa7ix0SCQfWIvK62m/GXD/8m0B/YH6hYgxHzr2khtn1Z3sz7VfMycMUs+8
ji8yS8tDsqDQsg==
-----END CERTIFICATE-----
Generated at Sat Oct 11 20:30:17 2025 by rpki-client