Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: rHmUataDXyWISc6bObhve/3+BdrgnyIqGPWrOMq4diI=
Subject key identifier: 71:14:E9:D9:2F:B1:E7:E7:F8:2A:1B:64:4C:AF:4B:0B:33:0A:EA:DB
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 019A4EF53731A2EA69494708046E622119B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 0D8E
Signing time: Tue 04 Nov 2025 13:01:24 +0000
Manifest this update: Tue 04 Nov 2025 13:01:24 +0000
Manifest next update: Wed 05 Nov 2025 13:01:24 +0000
Files and hashes: 1: U6h0E3CpWcLE4IcpdPD5N0_flWE.roa (hash: /MeOIU5IzJfeECJ9wAs+zMCbOflzuiKPgRuM31+tyrU=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: fb9KlejcilFSeg8jS56Pv4d5BSyReVWgh7u8V6OKUiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:37:31:a2:ea:69:49:47:08:04:6e:62:21:19:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Nov 4 13:01:24 2025 GMT
Not After : Nov 5 13:01:24 2025 GMT
Subject: CN=7114e9d92fb1e7e7f82a1b644caf4b0b330aeadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:b5:64:97:c0:07:9f:68:ef:4f:80:3c:89:
b5:34:4c:8d:82:97:85:a8:38:2f:a7:7f:db:3b:20:
d9:98:99:06:f6:78:45:28:b3:de:79:02:35:c3:f0:
00:44:28:9d:42:21:74:7d:46:65:a6:14:ca:4b:18:
f5:f0:01:0a:61:0b:f7:b7:5e:d6:2c:ad:ea:ba:b2:
8f:5c:ce:6f:5e:01:07:12:8b:99:ed:cd:74:08:3b:
ab:73:3e:cd:c2:12:b1:03:66:52:a6:d2:68:82:7c:
81:8c:ee:44:a7:6d:21:7a:d9:1e:f1:d9:45:e1:e4:
0a:1b:bb:21:a0:8b:3a:09:bb:db:e2:17:23:ec:89:
e4:0b:18:c7:0c:6b:fa:2e:15:3d:65:15:28:69:34:
1c:9a:f0:3e:09:fe:b8:12:04:b4:6f:ee:3f:73:0d:
41:3c:8c:eb:58:ca:cc:67:06:d5:5f:8b:53:eb:8b:
bf:f4:27:61:7c:a1:0c:d9:7f:4d:29:78:80:7f:e3:
78:c9:6e:b4:0e:5f:6b:49:78:1f:c4:07:2d:82:bf:
4a:f3:29:58:69:bf:3a:f9:36:78:8c:85:bf:b0:a7:
1d:3f:df:85:5b:7c:22:7c:a1:f8:31:fd:c0:95:b1:
a8:e8:dd:94:93:8a:32:0b:88:4a:89:1a:31:91:fd:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:14:E9:D9:2F:B1:E7:E7:F8:2A:1B:64:4C:AF:4B:0B:33:0A:EA:DB
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ec:60:0a:66:c3:37:9a:b2:6a:f7:30:fe:c0:a0:85:b7:e1:
b4:39:06:60:12:a0:9f:f8:d1:34:4b:82:1c:02:c8:b7:1b:c3:
e8:06:2d:e3:42:5b:67:7f:18:6d:0b:51:ef:3a:36:0e:0f:ee:
41:37:99:53:92:3d:5b:33:f3:ac:1f:60:a1:d3:ed:ca:a8:11:
1c:a0:33:ad:3e:ac:25:56:7e:34:4f:48:a7:19:57:7d:da:4e:
16:95:23:d4:11:39:3c:b7:bc:33:84:0f:07:13:bb:65:d6:6b:
5a:96:6e:6e:4a:6e:51:8f:2e:1f:68:e5:7a:ad:d9:c7:d1:81:
c2:f3:fe:49:65:ea:b0:74:38:40:fb:43:7d:9e:c2:39:f7:da:
80:b3:97:b8:98:7f:c0:8b:68:a5:eb:b5:24:5d:6c:13:84:97:
a2:5a:53:f3:f9:96:f0:f6:51:dc:c6:2d:0b:ce:9b:3d:d6:70:
93:00:79:92:50:3e:1b:83:fd:5c:e9:60:c5:3d:56:46:55:a1:
de:d2:68:ea:2e:83:24:0e:39:23:1c:a8:2c:12:20:a5:89:bc:
d6:0f:f4:4a:86:4d:6d:96:11:74:7c:8e:d7:17:9e:4a:76:7d:
75:99:94:b5:8d:8e:3d:34:3f:a7:01:04:cb:53:4d:78:79:88:
46:f9:57:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9TcxouppSUcIBG5iIRmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODVjNjdmMjIzMDllMGQ4NGMzMGI1NDI1Mjk3MjUzMjg2
MDUxNTEwHhcNMjUxMTA0MTMwMTI0WhcNMjUxMTA1MTMwMTI0WjAzMTEwLwYDVQQD
Eyg3MTE0ZTlkOTJmYjFlN2U3ZjgyYTFiNjQ0Y2FmNGIwYjMzMGFlYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7W1ZJfAB59o70+APIm1NEyNgpeF
qDgvp3/bOyDZmJkG9nhFKLPeeQI1w/AARCidQiF0fUZlphTKSxj18AEKYQv3t17W
LK3qurKPXM5vXgEHEouZ7c10CDurcz7NwhKxA2ZSptJognyBjO5Ep20hetke8dlF
4eQKG7shoIs6Cbvb4hcj7InkCxjHDGv6LhU9ZRUoaTQcmvA+Cf64EgS0b+4/cw1B
PIzrWMrMZwbVX4tT64u/9CdhfKEM2X9NKXiAf+N4yW60Dl9rSXgfxActgr9K8ylY
ab86+TZ4jIW/sKcdP9+FW3wifKH4Mf3AlbGo6N2Uk4oyC4hKiRoxkf1a7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEU6dkvsefn+CobZEyvSwszCurbMB8GA1UdIwQY
MBaAFKqFxn8iMJ4NhMMLVCUpclMoYFFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmIt
MmEyZWQ0NWUyNzEyLzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lNzkyMDItYWNhYi00YjFhLTk5MmItMmEyZWQ0NWUyNzEy
LzEvcW9YR2Z5SXduZzJFd3d0VUpTbHlVeWhnVVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+xgCmbD
N5qyavcw/sCghbfhtDkGYBKgn/jRNEuCHALItxvD6AYt40JbZ38YbQtR7zo2Dg/u
QTeZU5I9WzPzrB9godPtyqgRHKAzrT6sJVZ+NE9IpxlXfdpOFpUj1BE5PLe8M4QP
BxO7ZdZrWpZubkpuUY8uH2jleq3Zx9GBwvP+SWXqsHQ4QPtDfZ7COffagLOXuJh/
wItopeu1JF1sE4SXolpT8/mW8PZR3MYtC86bPdZwkwB5klA+G4P9XOlgxT1WRlWh
3tJo6i6DJA45IxyoLBIgpYm81g/0SoZNbZYRdHyO1xeeSnZ9dZmUtY2OPTQ/pwEE
y1NNeHmIRvlX0Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:34 2025 by rpki-client