Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: Uzlc5Pnk/ym0BZ4yCfSZ9qHVMkWnHqtBmAxtEiPPEHk=
Subject key identifier: B7:9D:02:A4:8C:77:A4:D4:2D:9A:04:CF:D1:98:B7:31:F6:C7:B0:9E
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019A7180A198989E97FAD37041B1D9FC8867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0A67
Signing time: Tue 11 Nov 2025 06:00:46 +0000
Manifest this update: Tue 11 Nov 2025 06:00:46 +0000
Manifest next update: Wed 12 Nov 2025 06:00:46 +0000
Files and hashes: 1: RY9h-rx1ZstpJjozDETgohyO7Lk.roa (hash: 0CX3AZGe8LLC0uBgiztbMwk7WnvOC9Yq5FJHH6gri8w=)
2: gA8AYbCwcFJfHyhTWrHCSel_7z4.roa (hash: DRfyCzFOVemyTrr7A1FKb5ojCB7lbj59iDLvIoFfDN4=)
3: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: obtCqmFoDoQ6JzTeK903/dt8Xpz18H84k55Sh+kcfog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:a1:98:98:9e:97:fa:d3:70:41:b1:d9:fc:88:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Nov 11 06:00:46 2025 GMT
Not After : Nov 12 06:00:46 2025 GMT
Subject: CN=b79d02a48c77a4d42d9a04cfd198b731f6c7b09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:51:bc:dc:c1:87:13:62:4d:ec:a7:2a:d8:
50:58:bf:f6:aa:66:78:c0:14:66:f9:4f:7c:17:7f:
34:a6:2e:3e:a1:1b:fc:36:83:97:2a:b7:e3:1a:68:
49:81:b4:e0:65:59:4a:58:68:b3:c3:6b:30:56:28:
91:4d:d1:57:88:bb:da:20:cc:87:0a:d7:5b:11:1a:
a7:07:68:85:b2:78:71:26:36:1c:17:5d:89:9f:b6:
b6:60:90:88:80:68:44:87:e2:b3:db:57:9d:be:06:
5f:a6:74:96:6a:58:ce:ae:be:37:a7:40:47:65:bd:
3f:79:4e:89:ac:a8:5f:39:f4:e1:eb:7e:b2:ec:fa:
5a:62:a3:72:7f:bb:f6:1a:35:44:b9:01:68:95:59:
03:81:15:d8:64:09:b9:64:e3:1b:bf:6e:a7:cf:c5:
82:b3:7b:ee:dc:01:ef:47:0f:44:03:45:44:76:a1:
6a:ca:87:d7:b5:fa:d1:09:4d:23:e7:ec:ca:c5:ca:
10:c2:81:62:7c:75:d3:f9:17:23:f5:f2:89:67:19:
9c:d2:3c:f5:a2:c5:7a:99:0e:bd:b4:83:20:03:2f:
24:6c:cc:1e:29:fd:0b:7f:2c:29:bc:51:08:fa:a7:
51:5a:14:a8:19:79:ab:bf:f7:c8:1d:b8:6b:ea:27:
c7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:02:A4:8C:77:A4:D4:2D:9A:04:CF:D1:98:B7:31:F6:C7:B0:9E
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d8:ce:2b:c0:f2:89:fa:a2:f9:f8:3d:87:c6:5d:33:05:be:
05:01:0a:fe:24:d9:d8:83:39:80:e4:57:fb:3c:b1:d6:38:ba:
d6:6f:f6:45:c5:e4:d6:24:65:9a:3a:8a:f6:d7:7d:7c:71:c2:
02:e5:9d:c1:06:5a:db:aa:da:4e:3d:d9:94:e4:a3:c2:d1:95:
52:df:4f:1a:d1:a4:b6:4e:b0:d7:96:31:79:ba:c4:87:af:63:
28:04:bd:c6:9c:16:4f:a9:1f:03:86:39:5e:d1:05:f3:d9:6d:
5a:11:e2:ee:cc:c3:27:88:45:ad:34:3c:c0:01:37:23:aa:b2:
c6:ae:8b:2a:fe:18:b0:2d:db:21:28:fb:e9:d0:87:e6:1a:5c:
0f:ce:6b:41:40:95:e8:39:8e:ec:1c:0e:18:3a:13:4d:ae:60:
08:12:47:b8:ac:df:10:e1:21:4e:8c:ba:43:45:1a:1d:ef:be:
53:98:9a:8d:92:d1:73:6f:f1:34:ce:20:12:26:19:fe:9e:87:
1e:89:62:6d:d9:25:53:69:89:bf:7f:9e:3e:17:bf:32:6d:4f:
28:14:25:46:d7:b2:35:5c:89:39:6e:07:40:3d:8e:79:fa:1c:
67:67:06:73:e1:80:76:41:32:71:42:93:20:b0:cc:5c:83:ab:
33:c6:2a:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgKGYmJ6X+tNwQbHZ/IhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMGFmMDAyMjUxMDZiMjA5NmU5YjIxZDlhYzJmMjA0MDY4
OGRlYTIwHhcNMjUxMTExMDYwMDQ2WhcNMjUxMTEyMDYwMDQ2WjAzMTEwLwYDVQQD
EyhiNzlkMDJhNDhjNzdhNGQ0MmQ5YTA0Y2ZkMTk4YjczMWY2YzdiMDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZlRvNzBhxNiTeynKthQWL/2qmZ4
wBRm+U98F380pi4+oRv8NoOXKrfjGmhJgbTgZVlKWGizw2swViiRTdFXiLvaIMyH
CtdbERqnB2iFsnhxJjYcF12Jn7a2YJCIgGhEh+Kz21edvgZfpnSWaljOrr43p0BH
Zb0/eU6JrKhfOfTh636y7PpaYqNyf7v2GjVEuQFolVkDgRXYZAm5ZOMbv26nz8WC
s3vu3AHvRw9EA0VEdqFqyofXtfrRCU0j5+zKxcoQwoFifHXT+Rcj9fKJZxmc0jz1
osV6mQ69tIMgAy8kbMweKf0LfywpvFEI+qdRWhSoGXmrv/fIHbhr6ifHbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLedAqSMd6TULZoEz9GYtzH2x7CeMB8GA1UdIwQY
MBaAFIEK8AIlEGsglumyHZrC8gQGiN6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMt
M2NhNDg4ZGVlZTg5LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC80NDJhOWItOWVkNy00OTNkLTgzZjMtM2NhNDg4ZGVlZTg5
LzEvZ1Fyd0FpVVFheUNXNmJJZG1zTHlCQWFJM3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9jOK8Dy
ifqi+fg9h8ZdMwW+BQEK/iTZ2IM5gORX+zyx1ji61m/2RcXk1iRlmjqK9td9fHHC
AuWdwQZa26raTj3ZlOSjwtGVUt9PGtGktk6w15YxebrEh69jKAS9xpwWT6kfA4Y5
XtEF89ltWhHi7szDJ4hFrTQ8wAE3I6qyxq6LKv4YsC3bISj76dCH5hpcD85rQUCV
6DmO7BwOGDoTTa5gCBJHuKzfEOEhToy6Q0UaHe++U5iajZLRc2/xNM4gEiYZ/p6H
HolibdklU2mJv3+ePhe/Mm1PKBQlRteyNVyJOW4HQD2OefocZ2cGc+GAdkEycUKT
ILDMXIOrM8YqnA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:46 2025 by rpki-client