Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier: W+YC0YyCXoUAY9rVNyJhvmcKiyjPeK7k7S3oT688Gis=
Subject key identifier: F4:1D:87:36:92:DF:48:23:05:6F:E0:A4:A9:17:02:4C:70:DC:B6:D8
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial: 019A7112D407DCC3B26FC2C0FC65A67DB682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number: 060A
Signing time: Tue 11 Nov 2025 04:00:50 +0000
Manifest this update: Tue 11 Nov 2025 04:00:50 +0000
Manifest next update: Wed 12 Nov 2025 04:00:50 +0000
Files and hashes: 1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: w/JFqyWk0gFFFtHS2naUcEOpUeb6GzCazvq/ZdUp/Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d4:07:dc:c3:b2:6f:c2:c0:fc:65:a6:7d:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Validity
Not Before: Nov 11 04:00:50 2025 GMT
Not After : Nov 12 04:00:50 2025 GMT
Subject: CN=f41d873692df4823056fe0a4a917024c70dcb6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:a8:8a:2b:d2:d1:24:10:b8:2f:2a:68:8c:
41:f1:34:79:f0:04:0f:7f:79:ee:76:35:f2:37:7d:
2a:36:56:01:f7:a8:8f:75:ca:a2:6f:1b:4a:f2:fa:
85:e7:52:c3:5a:d2:3d:06:db:36:a6:44:bc:08:97:
f4:c1:39:e0:c9:a3:14:37:60:52:6c:cd:9c:5d:ba:
0d:15:f3:7f:85:f8:a7:8b:15:c9:4d:2d:ff:2e:0a:
3d:c8:45:f9:d0:1d:54:39:0b:ed:48:a1:1e:64:df:
3f:43:e4:67:e9:9c:75:84:3d:97:dd:d0:ec:75:fe:
2d:cf:60:9c:a7:82:b0:e5:d3:92:a1:1a:b1:70:e1:
bf:0f:23:c5:95:8c:1b:74:90:f0:b6:c3:76:37:94:
cf:2d:90:a8:c2:7b:03:45:f6:6a:8b:ea:2f:25:da:
f3:76:64:f6:7a:d2:9a:20:e2:1b:fe:e3:41:1f:39:
9f:8d:6c:3b:45:1b:e4:84:dd:72:c1:bd:b5:1a:fb:
99:2c:67:12:78:09:8d:bc:bf:06:8d:10:f2:a1:ef:
60:2c:64:d4:a0:04:02:a6:c5:1d:25:04:0f:43:18:
8d:93:27:95:ed:9e:4a:76:dc:c4:8c:32:bd:0b:86:
89:e1:66:8d:0e:13:fc:2a:39:2b:77:d9:af:af:cd:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1D:87:36:92:DF:48:23:05:6F:E0:A4:A9:17:02:4C:70:DC:B6:D8
X509v3 Authority Key Identifier:
keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:03:59:25:7a:ad:4a:37:e1:27:6a:c4:e0:e4:4e:ef:29:
7b:22:7d:98:b8:45:72:e5:af:c0:81:21:a6:07:28:26:dd:56:
cf:fb:63:26:4d:3b:24:5e:cc:f4:08:e5:0b:e7:3e:f9:35:e4:
cd:05:d9:c0:7f:d5:9c:7c:80:8d:5f:3a:ca:eb:d8:24:c4:10:
f9:3e:0e:5c:88:4e:3a:48:c9:1f:9d:61:87:1a:4f:42:c3:f6:
2f:22:f5:39:24:90:7d:f9:3d:e9:03:bd:5d:c2:71:88:03:bb:
6e:70:68:8a:3f:2f:c4:ce:2a:89:4f:7f:78:7b:d9:81:fa:bc:
ba:f7:9e:14:e3:30:86:af:d7:51:5d:7f:6c:8e:7f:35:84:45:
eb:3e:89:21:b3:dc:32:56:29:c2:20:ee:f2:f6:27:d1:f9:14:
30:95:14:a5:9e:75:9a:89:02:0b:8e:14:bf:9f:52:84:5d:5e:
c5:97:59:0b:d8:e9:cc:40:78:83:9f:f0:6e:76:03:10:0e:a3:
77:05:bf:4d:00:d4:6d:a6:4e:26:0a:68:b8:ee:da:49:f2:fc:
07:9c:52:93:da:ab:d0:75:2a:88:32:fe:a6:d8:b3:8c:cf:8c:
05:4c:c3:d2:4e:37:a5:98:62:e6:8d:65:b4:ab:f2:e7:97:72:
45:37:87:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtQH3MOyb8LA/GWmfbaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YmJkNGQ5ODU4YWI1MjgwNzAwZWY3ZTk1YzA0MTYwZjNk
MmNiNDgwHhcNMjUxMTExMDQwMDUwWhcNMjUxMTEyMDQwMDUwWjAzMTEwLwYDVQQD
EyhmNDFkODczNjkyZGY0ODIzMDU2ZmUwYTRhOTE3MDI0YzcwZGNiNmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1+oiivS0SQQuC8qaIxB8TR58AQP
f3nudjXyN30qNlYB96iPdcqibxtK8vqF51LDWtI9Bts2pkS8CJf0wTngyaMUN2BS
bM2cXboNFfN/hfinixXJTS3/Lgo9yEX50B1UOQvtSKEeZN8/Q+Rn6Zx1hD2X3dDs
df4tz2Ccp4Kw5dOSoRqxcOG/DyPFlYwbdJDwtsN2N5TPLZCownsDRfZqi+ovJdrz
dmT2etKaIOIb/uNBHzmfjWw7RRvkhN1ywb21GvuZLGcSeAmNvL8GjRDyoe9gLGTU
oAQCpsUdJQQPQxiNkyeV7Z5KdtzEjDK9C4aJ4WaNDhP8Kjkrd9mvr80oSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQdhzaS30gjBW/gpKkXAkxw3LbYMB8GA1UdIwQY
MBaAFKi71NmFirUoBwDvfpXAQWDz0stIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYt
MThiMmZkNDMyMGY1LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83YWFkOWMtZDY1Ny00NWJkLWIwMTYtMThiMmZkNDMyMGY1
LzEvcUx2VTJZV0t0U2dIQU85LWxjQkJZUFBTeTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgy4DWSV6
rUo34SdqxODkTu8peyJ9mLhFcuWvwIEhpgcoJt1Wz/tjJk07JF7M9AjlC+c++TXk
zQXZwH/VnHyAjV86yuvYJMQQ+T4OXIhOOkjJH51hhxpPQsP2LyL1OSSQffk96QO9
XcJxiAO7bnBoij8vxM4qiU9/eHvZgfq8uveeFOMwhq/XUV1/bI5/NYRF6z6JIbPc
MlYpwiDu8vYn0fkUMJUUpZ51mokCC44Uv59ShF1exZdZC9jpzEB4g5/wbnYDEA6j
dwW/TQDUbaZOJgpouO7aSfL8B5xSk9qr0HUqiDL+ptizjM+MBUzD0k43pZhi5o1l
tKvy55dyRTeH3g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:03 2025 by rpki-client