Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: Pc/5qc5ZD8HVYYqt2cSIL6m8XGmOv+0xqsXJ3ncjA/o=
Subject key identifier: 01:00:6A:60:C9:D7:56:DB:42:F2:40:EA:33:E0:7D:94:C7:F3:DF:28
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 0199FE105162036141BA8A04E3A31A288994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 0912
Signing time: Sun 19 Oct 2025 20:01:46 +0000
Manifest this update: Sun 19 Oct 2025 20:01:46 +0000
Manifest next update: Mon 20 Oct 2025 20:01:46 +0000
Files and hashes: 1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=)
2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: SKz06sI42RxoYiML/TZ8GonTZUcnR3TV3O1s+xeJUcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:51:62:03:61:41:ba:8a:04:e3:a3:1a:28:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Oct 19 20:01:46 2025 GMT
Not After : Oct 20 20:01:46 2025 GMT
Subject: CN=01006a60c9d756db42f240ea33e07d94c7f3df28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:55:72:4a:ce:b9:a3:f9:9a:47:0c:90:04:
af:58:4c:98:a5:0c:ca:13:c2:24:c6:fc:6c:1e:8d:
e5:fd:24:37:60:89:9a:36:0c:be:60:ac:b5:af:e6:
0d:51:3c:61:6d:e9:82:57:1d:db:3d:16:7c:e5:20:
68:23:3f:d0:b3:64:ab:32:33:1f:79:8e:e2:1c:e8:
1e:01:9f:14:15:dc:c4:e9:dc:d9:79:1f:31:38:6c:
ed:26:37:a5:45:8b:d9:22:5f:97:bb:3f:44:d0:f5:
2d:35:90:6c:a5:f2:15:52:f8:51:03:46:0d:ce:e1:
52:cc:58:b5:59:2b:b2:0e:3b:39:0a:a2:01:e4:54:
a7:91:4d:a7:c7:64:b1:0d:78:f8:1a:bc:18:5c:03:
54:26:d7:32:4d:b3:0c:2f:4a:bf:a4:7f:d8:e1:84:
c1:68:87:9b:12:cf:5a:a6:58:ea:8f:4b:5f:0b:25:
ad:0b:f4:e3:9f:f6:3a:6b:7d:bd:29:5e:eb:02:d0:
27:2c:46:1a:d1:cc:6b:a8:37:2b:67:28:1b:f9:7d:
ab:8d:df:45:9f:81:e7:3c:eb:79:c2:fa:ef:25:bc:
32:2a:76:8b:7b:86:b2:b7:e0:0d:76:62:09:91:36:
e2:a7:72:e6:4b:6a:ee:45:61:32:40:8b:c3:cf:f2:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:00:6A:60:C9:D7:56:DB:42:F2:40:EA:33:E0:7D:94:C7:F3:DF:28
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2a:7e:b8:80:e7:31:5f:15:b7:ff:65:1f:8c:b7:21:e1:ad:
ea:c3:3d:c0:60:7d:cc:35:e8:8b:a0:8c:dd:23:be:f0:ce:f5:
5f:f3:23:bc:19:99:32:ca:34:78:35:0a:4f:28:93:a4:3a:b4:
0a:1f:d3:29:2f:c2:d0:99:1a:c4:1a:24:17:72:5a:8e:20:1b:
37:f5:9d:03:9d:3d:8a:19:92:30:69:f8:ab:c9:49:a1:73:3b:
b2:99:de:5b:ed:16:86:f5:e2:74:2b:df:89:97:9c:7e:37:a8:
23:27:40:df:2b:4a:01:90:dd:16:a5:aa:c1:23:0d:1f:1b:41:
3d:65:c7:85:65:0a:64:85:7f:bb:c1:48:0e:bb:ed:c1:5c:e5:
39:48:e8:89:88:1b:53:6d:65:bb:1b:9d:fd:05:53:63:a2:72:
c7:c2:2c:c9:91:27:54:de:15:db:af:5e:12:bd:51:f9:03:28:
6d:17:d7:40:70:0e:47:e2:33:b5:82:95:69:43:d8:14:98:be:
67:c4:4b:b7:a5:f3:19:54:a8:75:9d:ca:d9:f2:78:31:c0:a7:
f0:3c:de:96:09:bf:b4:aa:44:3c:5a:3d:b8:20:9f:6b:19:7f:
d6:ec:75:0d:9d:27:e5:8e:c3:23:50:af:73:38:41:7e:93:e0:
aa:58:8a:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EFFiA2FBuooE46MaKImUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MDRiY2NlYjljMzYzZjEzZTNhZGFhNGMwZmE1Mjc4MGYw
NjQ2ODQwHhcNMjUxMDE5MjAwMTQ2WhcNMjUxMDIwMjAwMTQ2WjAzMTEwLwYDVQQD
EygwMTAwNmE2MGM5ZDc1NmRiNDJmMjQwZWEzM2UwN2Q5NGM3ZjNkZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr1VckrOuaP5mkcMkASvWEyYpQzK
E8IkxvxsHo3l/SQ3YImaNgy+YKy1r+YNUTxhbemCVx3bPRZ85SBoIz/Qs2SrMjMf
eY7iHOgeAZ8UFdzE6dzZeR8xOGztJjelRYvZIl+Xuz9E0PUtNZBspfIVUvhRA0YN
zuFSzFi1WSuyDjs5CqIB5FSnkU2nx2SxDXj4GrwYXANUJtcyTbMML0q/pH/Y4YTB
aIebEs9apljqj0tfCyWtC/Tjn/Y6a329KV7rAtAnLEYa0cxrqDcrZygb+X2rjd9F
n4HnPOt5wvrvJbwyKnaLe4ayt+ANdmIJkTbip3LmS2ruRWEyQIvDz/LhhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEAamDJ11bbQvJA6jPgfZTH898oMB8GA1UdIwQY
MBaAFLUEvM65w2PxPjrapMD6UngPBkaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjkt
MmEzNTFhYjNiOGY2LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xZDNjZGMtZDA0Yi00YWRiLWIwNjktMmEzNTFhYjNiOGY2
LzEvdFFTOHpybkRZX0UtT3Rxa3dQcFNlQThHUm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkip+uIDn
MV8Vt/9lH4y3IeGt6sM9wGB9zDXoi6CM3SO+8M71X/MjvBmZMso0eDUKTyiTpDq0
Ch/TKS/C0JkaxBokF3JajiAbN/WdA509ihmSMGn4q8lJoXM7spneW+0WhvXidCvf
iZecfjeoIydA3ytKAZDdFqWqwSMNHxtBPWXHhWUKZIV/u8FIDrvtwVzlOUjoiYgb
U21luxud/QVTY6Jyx8IsyZEnVN4V269eEr1R+QMobRfXQHAOR+IztYKVaUPYFJi+
Z8RLt6XzGVSodZ3K2fJ4McCn8Dzelgm/tKpEPFo9uCCfaxl/1ux1DZ0n5Y7DI1Cv
czhBfpPgqliKUg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:00 2025 by rpki-client