Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: eYBt1BykUR8pRGTlSZQpe/7A1MXXWlpc6DLqAF8c3ig=
Subject key identifier: 1F:DB:FD:71:D1:14:43:0C:D2:3D:40:43:8D:A5:C7:B0:A7:8A:70:12
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 019A71EE7BBC9296AF56C2A3311E53B77672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 10B8
Signing time: Tue 11 Nov 2025 08:00:45 +0000
Manifest this update: Tue 11 Nov 2025 08:00:45 +0000
Manifest next update: Wed 12 Nov 2025 08:00:45 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: 8/PpYYPqdqF+Emzr2zvNl795jIsQvgen3lqUmkDr3jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7b:bc:92:96:af:56:c2:a3:31:1e:53:b7:76:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Nov 11 08:00:45 2025 GMT
Not After : Nov 12 08:00:45 2025 GMT
Subject: CN=1fdbfd71d114430cd23d40438da5c7b0a78a7012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e8:56:fc:98:fd:d5:c9:20:21:2b:12:a3:d1:
22:86:c6:bc:eb:55:0a:a5:b2:33:97:c6:45:ad:64:
54:de:e0:77:ea:57:8d:56:8c:8c:45:48:20:91:f6:
b4:fd:d8:6e:80:9d:1a:0a:be:95:38:7a:6e:25:18:
e5:6b:c2:92:53:d4:6b:d5:8b:8a:ae:55:d5:b4:ef:
3c:d9:09:8b:ba:bb:21:28:1f:9c:50:1a:ee:f0:a6:
40:ed:bc:60:69:e7:f7:76:a3:7b:d8:ef:47:c6:04:
43:00:d2:2d:27:87:73:f4:b5:ab:d1:12:d4:a5:8f:
bd:e5:f6:a4:d4:43:df:b6:6b:41:ac:c0:52:dd:a6:
f8:d3:05:34:cf:54:21:4d:06:d9:d7:5c:74:aa:51:
8a:da:5e:d2:be:40:08:f3:4a:c1:cb:b6:2f:d6:40:
c8:b1:03:71:98:b0:ba:0f:5b:cd:6b:5d:97:ee:21:
9e:a3:95:2b:45:18:7a:a4:67:e7:56:93:3e:1b:26:
15:33:44:8c:25:59:34:bc:44:d5:69:c7:b6:42:dd:
ce:fb:97:dc:8f:c5:c0:93:f2:78:cd:36:bd:39:4f:
f5:6d:9a:d7:5d:55:66:bf:72:db:b8:2e:a9:a6:0f:
8b:43:34:41:b0:79:a0:53:dd:23:a0:9e:7c:aa:0e:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:FD:71:D1:14:43:0C:D2:3D:40:43:8D:A5:C7:B0:A7:8A:70:12
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:47:9f:ad:ea:59:3d:11:17:97:c5:c7:ed:46:1b:79:2b:02:
00:2d:a4:2a:0f:d2:33:03:93:64:ba:e6:19:a4:c5:b7:f9:36:
a9:c2:e7:e8:61:a3:43:d5:c3:7c:8c:b3:c9:8e:bd:1e:7c:5e:
ad:19:1b:7f:17:dd:72:a1:ff:e5:f4:bb:f9:19:68:11:dc:01:
d4:d4:8d:65:4b:97:b9:a3:6d:6a:d2:89:d6:0c:6b:ca:d2:8a:
0c:09:ad:29:3e:d4:50:ef:f5:09:95:93:fb:a2:05:c1:e0:d7:
e0:39:e4:b8:d8:5d:32:fb:82:81:a4:a7:47:5c:e3:5c:4b:a6:
2b:30:59:0e:b4:27:da:72:97:3c:03:c6:87:10:53:b0:2c:76:
3b:99:a7:59:e8:00:35:70:35:2b:71:56:8b:29:2f:86:7a:40:
1e:ee:41:4a:32:5f:d9:42:42:bb:91:44:c7:7d:3f:66:86:a6:
ce:2b:c3:54:47:0f:7f:31:d8:3f:6f:b6:07:4b:c5:45:6a:78:
3e:ef:8c:3c:c4:2b:c9:05:aa:2f:87:61:00:80:35:97:d2:e6:
42:aa:54:87:df:72:39:3a:ee:a4:1c:6d:9c:1d:9f:53:67:8c:
9a:93:64:c5:54:a1:12:00:e6:f3:88:e0:05:29:5b:e2:1d:a1:
00:22:b5:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7nu8kpavVsKjMR5Tt3ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDJhMTQxM2IwY2NlMzRlM2Y3ZmJmMGU3ZjM4ZTBhMzcw
YTYyNjcwHhcNMjUxMTExMDgwMDQ1WhcNMjUxMTEyMDgwMDQ1WjAzMTEwLwYDVQQD
EygxZmRiZmQ3MWQxMTQ0MzBjZDIzZDQwNDM4ZGE1YzdiMGE3OGE3MDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+hW/Jj91ckgISsSo9Eihsa861UK
pbIzl8ZFrWRU3uB36leNVoyMRUggkfa0/dhugJ0aCr6VOHpuJRjla8KSU9Rr1YuK
rlXVtO882QmLurshKB+cUBru8KZA7bxgaef3dqN72O9HxgRDANItJ4dz9LWr0RLU
pY+95fak1EPftmtBrMBS3ab40wU0z1QhTQbZ11x0qlGK2l7SvkAI80rBy7Yv1kDI
sQNxmLC6D1vNa12X7iGeo5UrRRh6pGfnVpM+GyYVM0SMJVk0vETVace2Qt3O+5fc
j8XAk/J4zTa9OU/1bZrXXVVmv3LbuC6ppg+LQzRBsHmgU90joJ58qg7fbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/b/XHRFEMM0j1AQ42lx7CninASMB8GA1UdIwQY
MBaAFINCoUE7DM404/f78Ofzjgo3CmJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUt
NjQ4YjkyMjc2MDE0LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81NGU3OTctZGJlMy00OTQ1LWE4MzUtNjQ4YjkyMjc2MDE0
LzEvZzBLaFFUc016alRqOV92dzVfT09DamNLWW1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREefrepZ
PREXl8XH7UYbeSsCAC2kKg/SMwOTZLrmGaTFt/k2qcLn6GGjQ9XDfIyzyY69Hnxe
rRkbfxfdcqH/5fS7+RloEdwB1NSNZUuXuaNtatKJ1gxrytKKDAmtKT7UUO/1CZWT
+6IFweDX4DnkuNhdMvuCgaSnR1zjXEumKzBZDrQn2nKXPAPGhxBTsCx2O5mnWegA
NXA1K3FWiykvhnpAHu5BSjJf2UJCu5FEx30/ZoamzivDVEcPfzHYP2+2B0vFRWp4
Pu+MPMQryQWqL4dhAIA1l9LmQqpUh99yOTrupBxtnB2fU2eMmpNkxVShEgDm84jg
BSlb4h2hACK14Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:28 2025 by rpki-client