Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: nTXvLWHF1p+fYCUMb4z2hIajR4ViZ3jTxy+xF8kw+QE=
Subject key identifier: 60:EB:3E:9A:16:32:6C:67:A0:5D:5E:5C:AF:55:36:A5:E1:1D:11:6C
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 019A706DFEDF4217C0DB532EB25F932B9B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0C01
Signing time: Tue 11 Nov 2025 01:00:48 +0000
Manifest this update: Tue 11 Nov 2025 01:00:48 +0000
Manifest next update: Wed 12 Nov 2025 01:00:48 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: prjU0/WGBzqX9JinhFnovogOdClWaDNxsF0z2wFNp4o=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:fe:df:42:17:c0:db:53:2e:b2:5f:93:2b:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Nov 11 01:00:48 2025 GMT
Not After : Nov 12 01:00:48 2025 GMT
Subject: CN=60eb3e9a16326c67a05d5e5caf5536a5e11d116c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a7:43:86:f4:d1:98:13:cc:3b:1d:e4:5a:79:
f9:75:90:18:ee:20:7f:99:2b:3b:b7:a7:f9:bd:a1:
c0:eb:aa:09:6a:38:2a:e1:10:46:db:42:47:ed:4e:
7a:ce:17:04:47:b8:21:ea:0b:06:99:8e:9e:8c:70:
e3:af:f6:53:0e:ae:62:b7:1e:16:79:a5:1a:6a:88:
c0:87:6f:c2:3f:85:5b:ea:c6:53:ec:37:03:06:8f:
9f:11:0b:a2:5c:31:e1:08:08:21:5e:12:d7:e4:f6:
5e:40:0e:6d:b2:c0:f4:83:f5:8b:6b:e1:87:c4:c9:
02:8b:e5:8a:f2:ba:c6:2f:c1:8f:03:10:db:fa:aa:
7a:0d:03:5c:83:10:97:90:54:88:df:f7:8d:e8:c8:
c1:9e:1f:70:03:7f:87:59:ac:c3:e8:85:ad:10:7b:
f8:51:a3:b1:1a:db:f9:04:d1:02:8a:a9:72:7e:54:
e3:72:01:f3:a7:c8:9c:38:2a:70:3b:0f:47:35:4e:
5d:de:61:27:23:37:b6:ce:93:15:62:e4:a8:ca:1c:
55:42:0d:6d:62:71:36:52:2d:93:0d:d4:eb:d0:71:
87:ad:28:aa:f8:47:be:bf:60:69:e9:25:a7:66:a2:
60:4d:36:0e:d1:c7:4b:8a:79:51:07:81:97:c8:e0:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EB:3E:9A:16:32:6C:67:A0:5D:5E:5C:AF:55:36:A5:E1:1D:11:6C
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d0:98:3c:22:8d:8a:a9:ab:9d:62:c0:f2:e4:95:a7:50:5f:
c1:fd:25:c2:e0:e9:70:b5:fd:ff:af:2b:d0:2a:04:bd:c9:2b:
f7:da:86:6f:5e:f8:28:d0:2a:23:09:15:fd:7b:46:f1:d7:66:
63:33:9f:dd:71:9d:9d:6b:e3:ae:13:d8:3a:9f:cf:fe:c2:a8:
73:bc:2c:aa:fd:85:2c:ee:50:2d:cf:dc:21:28:7d:74:0e:d7:
d8:6d:ae:75:56:74:69:87:be:c4:83:19:ce:c3:0a:32:4f:8f:
98:04:75:2a:23:20:07:bc:a0:b9:21:81:0c:bd:96:73:f5:3d:
f6:36:d2:15:bd:4f:c8:18:c6:0f:00:0c:20:6a:3a:00:4d:c8:
3a:ad:6d:4c:98:ee:9b:2b:0c:ef:71:92:e6:7c:1d:88:1d:f8:
f9:8c:81:28:61:9e:0b:63:8b:6b:d8:01:76:83:ad:3a:24:d5:
2b:09:a4:42:c2:31:ed:7b:84:b0:68:0b:c0:6b:55:30:39:d9:
14:c0:f8:15:92:58:18:d1:14:25:0f:68:ae:af:ed:f9:1c:5d:
d9:72:59:b8:7b:9a:f7:69:d0:e9:45:0c:ce:82:69:7f:88:47:
3a:1c:07:cf:7a:a6:19:54:16:fa:43:16:1f:7c:4a:e7:75:c2:
12:da:50:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbf7fQhfA21Musl+TK5sMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDFjOTM5ZWE5NWEyMWYzYjc0MjkwMWRmZTA1ZjI2YTU3
Nzc1ODEwHhcNMjUxMTExMDEwMDQ4WhcNMjUxMTEyMDEwMDQ4WjAzMTEwLwYDVQQD
Eyg2MGViM2U5YTE2MzI2YzY3YTA1ZDVlNWNhZjU1MzZhNWUxMWQxMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KdDhvTRmBPMOx3kWnn5dZAY7iB/
mSs7t6f5vaHA66oJajgq4RBG20JH7U56zhcER7gh6gsGmY6ejHDjr/ZTDq5itx4W
eaUaaojAh2/CP4Vb6sZT7DcDBo+fEQuiXDHhCAghXhLX5PZeQA5tssD0g/WLa+GH
xMkCi+WK8rrGL8GPAxDb+qp6DQNcgxCXkFSI3/eN6MjBnh9wA3+HWazD6IWtEHv4
UaOxGtv5BNECiqlyflTjcgHzp8icOCpwOw9HNU5d3mEnIze2zpMVYuSoyhxVQg1t
YnE2Ui2TDdTr0HGHrSiq+Ee+v2Bp6SWnZqJgTTYO0cdLinlRB4GXyOCVJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDrPpoWMmxnoF1eXK9VNqXhHRFsMB8GA1UdIwQY
MBaAFKpByTnqlaIfO3QpAd/gXyald3WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2Et
NjA3Y2EwMjViOTRmLzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ODFmYjEtOTA0ZC00OTlhLWI5M2EtNjA3Y2EwMjViOTRm
LzEvcWtISk9lcVZvaDg3ZENrQjMtQmZKcVYzZFlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdCYPCKN
iqmrnWLA8uSVp1Bfwf0lwuDpcLX9/68r0CoEvckr99qGb174KNAqIwkV/XtG8ddm
YzOf3XGdnWvjrhPYOp/P/sKoc7wsqv2FLO5QLc/cISh9dA7X2G2udVZ0aYe+xIMZ
zsMKMk+PmAR1KiMgB7yguSGBDL2Wc/U99jbSFb1PyBjGDwAMIGo6AE3IOq1tTJju
mysM73GS5nwdiB34+YyBKGGeC2OLa9gBdoOtOiTVKwmkQsIx7XuEsGgLwGtVMDnZ
FMD4FZJYGNEUJQ9orq/t+Rxd2XJZuHua92nQ6UUMzoJpf4hHOhwHz3qmGVQW+kMW
H3xK53XCEtpQ5w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:16 2025 by rpki-client