Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier: X7NjUazsriaS7Hd172MNTmj2SF0pmXnUV+oPu6i6/4w=
Subject key identifier: E3:51:63:93:B2:03:1B:7E:E3:5D:47:62:BA:27:7A:7B:43:4E:5E:B5
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 0199FC58CF3A1BB006054D1654959CE77BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number: 0557
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
2: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
3: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: +lT40BSG7dfP5C/RbAIXW4rE8bC+uQpUAEKjoSMsOzc=)
4: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cf:3a:1b:b0:06:05:4d:16:54:95:9c:e7:7b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=e3516393b2031b7ee35d4762ba277a7b434e5eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:87:b3:0a:fc:71:ef:2d:76:a7:dd:89:24:
a7:73:43:49:a0:40:73:d4:85:d0:07:c7:1e:45:35:
93:ed:14:a7:d5:a3:09:65:ae:fd:f2:46:1c:72:5f:
73:ef:95:e2:95:86:97:0f:5e:31:ce:31:1e:47:ba:
fe:7b:35:b5:c5:0e:d5:4a:d5:21:e5:9a:e1:b4:93:
d4:b8:f4:cb:08:0c:a4:64:64:cf:de:62:21:28:1d:
39:0d:7d:a9:65:d1:04:ac:e1:22:10:4c:94:0f:90:
01:99:c5:0e:98:94:93:32:b8:8e:cf:ed:93:65:65:
27:a7:4e:a1:3e:81:7c:78:17:f1:df:d6:ad:eb:ce:
cc:a4:29:be:a6:a2:e3:96:6c:95:8c:b5:6e:2c:34:
c9:a0:f0:3b:d5:a5:26:c2:86:7b:f6:be:91:f6:cf:
4b:c8:eb:83:54:d2:3c:20:2b:ae:6d:23:2c:49:81:
10:59:c4:47:21:57:89:39:8d:52:43:68:8b:d3:80:
fa:b7:19:50:22:58:02:29:8d:2d:71:1d:7d:5d:64:
24:ce:d8:90:19:dc:63:72:98:7d:ed:92:9d:d2:31:
75:ec:a4:d3:4a:10:de:c8:e7:bf:aa:aa:3d:94:2f:
b1:14:01:a1:39:65:7a:21:0d:eb:89:50:c9:4f:25:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:63:93:B2:03:1B:7E:E3:5D:47:62:BA:27:7A:7B:43:4E:5E:B5
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:07:c8:4b:1c:42:97:a1:13:04:d9:09:b6:4e:40:51:8d:dd:
4d:c7:d3:97:61:ee:26:ff:57:3b:ab:9e:aa:f9:b7:cf:cd:68:
fc:73:36:ae:5b:f0:fe:fd:41:8e:1f:ab:d8:3a:02:82:43:9b:
3f:d5:f5:d6:df:53:06:50:ab:8a:eb:9b:81:20:f9:8e:0d:28:
b0:47:12:0e:80:6c:d1:37:23:91:89:71:15:c4:fd:1e:ad:56:
40:0c:c4:f7:e1:71:0a:de:71:c3:6d:ef:22:03:68:0f:f6:87:
10:6c:33:12:51:59:ab:6b:e5:3e:45:c7:dd:91:41:e9:0a:08:
6f:25:f9:ec:cc:ae:17:ac:15:17:31:e3:e7:43:21:b8:12:18:
91:cd:9f:49:9c:eb:40:03:0f:dc:c0:88:ea:f6:e3:50:b1:ed:
ab:80:f8:36:9d:a2:0d:bc:ce:a5:4f:e8:91:44:01:1b:21:8b:
7d:2a:de:2b:2a:8a:b6:4f:e0:4e:6a:2f:c3:d6:92:94:32:07:
6a:fa:8a:5d:ca:63:54:92:9a:0f:ac:49:11:e4:94:bb:69:84:
1e:d3:86:5d:e5:64:41:ba:4b:80:c1:b2:51:43:9f:bc:b4:0c:
2c:f6:73:90:79:d1:66:e5:1b:61:e5:bf:8f:97:24:94:e4:48:
d6:f8:b6:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WM86G7AGBU0WVJWc53v/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzE5MThjMWY0NWU2ZWMxN2RhY2E2N2E3YWQxOTNjYWYw
NGI3YjIwHhcNMjUxMDE5MTIwMTQyWhcNMjUxMDIwMTIwMTQyWjAzMTEwLwYDVQQD
EyhlMzUxNjM5M2IyMDMxYjdlZTM1ZDQ3NjJiYTI3N2E3YjQzNGU1ZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a6Hswr8ce8tdqfdiSSnc0NJoEBz
1IXQB8ceRTWT7RSn1aMJZa798kYccl9z75XilYaXD14xzjEeR7r+ezW1xQ7VStUh
5ZrhtJPUuPTLCAykZGTP3mIhKB05DX2pZdEErOEiEEyUD5ABmcUOmJSTMriOz+2T
ZWUnp06hPoF8eBfx39at687MpCm+pqLjlmyVjLVuLDTJoPA71aUmwoZ79r6R9s9L
yOuDVNI8ICuubSMsSYEQWcRHIVeJOY1SQ2iL04D6txlQIlgCKY0tcR19XWQkztiQ
Gdxjcph97ZKd0jF17KTTShDeyOe/qqo9lC+xFAGhOWV6IQ3riVDJTyUZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONRY5OyAxt+411HYronentDTl61MB8GA1UdIwQY
MBaAFKvBkYwfRebsF9rKZ6etGTyvBLeyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEt
NmJiNWZlNjY1NzUwLzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84Zjg4ZGUtZGFlZC00OGQyLWI3MDEtNmJiNWZlNjY1NzUw
LzEvcThHUmpCOUY1dXdYMnNwbnA2MFpQSzhFdDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgfISxxC
l6ETBNkJtk5AUY3dTcfTl2HuJv9XO6ueqvm3z81o/HM2rlvw/v1Bjh+r2DoCgkOb
P9X11t9TBlCriuubgSD5jg0osEcSDoBs0TcjkYlxFcT9Hq1WQAzE9+FxCt5xw23v
IgNoD/aHEGwzElFZq2vlPkXH3ZFB6QoIbyX57MyuF6wVFzHj50MhuBIYkc2fSZzr
QAMP3MCI6vbjULHtq4D4Np2iDbzOpU/okUQBGyGLfSreKyqKtk/gTmovw9aSlDIH
avqKXcpjVJKaD6xJEeSUu2mEHtOGXeVkQbpLgMGyUUOfvLQMLPZzkHnRZuUbYeW/
j5cklORI1vi2Xg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:31 2025 by rpki-client