Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: gFWUMzo4gW5Dlxb6HzcRdpXDNeWdkI6rjaAvxSilq6w=
Subject key identifier: 78:82:AD:7C:6D:7D:E5:2B:4B:1D:42:EC:9C:8A:D0:36:9E:F1:FA:32
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 0198D5F19E344B8D0E8136411C0B8841E86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0D3A
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: cACLsETFkrWp2y3uSppllbzeN8M.roa (hash: 69+xRQ628SJEg1B3Gvd/lIbJ0dPAum9FWWtmKpGIALk=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: bxIO54x/y1HFxiBk9t+3YQ8i6BUSY4Bx4fq/6oa1swc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9e:34:4b:8d:0e:81:36:41:1c:0b:88:41:e8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=7882ad7c6d7de52b4b1d42ec9c8ad0369ef1fa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:94:46:b8:9e:be:3c:21:97:bf:bd:cb:84:
e4:f9:b7:fa:44:1d:5d:32:0f:d4:e9:4a:a8:e0:84:
26:36:ee:c9:58:c2:4d:98:b1:29:c5:4e:fd:8f:90:
f8:bf:2c:1e:2d:e7:5a:e3:58:32:1f:ae:1b:f8:5d:
4b:c2:72:fc:cc:d6:29:38:f8:69:da:00:8d:b9:7d:
4b:ed:b7:57:cc:cd:af:3a:96:9f:f3:2d:70:bf:a0:
c7:b6:bc:bd:c5:8c:83:f4:58:4a:cd:76:97:fc:eb:
4a:b8:7f:03:24:da:27:5b:94:22:06:70:59:0f:58:
45:88:4b:26:08:c9:e5:ea:0a:2a:e0:3a:f7:e2:4e:
63:18:cb:36:71:67:48:e8:c0:83:46:70:5a:9b:b0:
54:94:cf:bc:2d:80:cc:fe:5a:ca:d2:81:a0:68:74:
c3:00:49:8d:4d:92:f4:ec:c0:1a:c2:37:6f:4c:95:
cd:da:6e:8e:1e:1a:ed:cd:2d:fa:43:1d:a7:88:59:
9a:1f:fc:d9:c4:91:6b:ab:fa:8b:87:88:13:b7:0e:
94:73:db:77:82:c0:8a:67:0a:ea:c5:5c:70:1c:cb:
33:c8:e7:2e:ff:8c:8c:97:37:7d:60:fe:18:9e:74:
f9:ab:76:9b:d4:d5:a9:8a:84:62:97:10:42:f6:fe:
26:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:82:AD:7C:6D:7D:E5:2B:4B:1D:42:EC:9C:8A:D0:36:9E:F1:FA:32
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:8f:e0:34:18:6f:ff:94:41:1c:d0:84:98:21:5a:d1:91:
23:45:6b:96:0c:25:7f:f1:49:19:62:11:b1:2f:a9:f6:24:d5:
7f:28:12:97:30:52:19:fd:91:39:13:82:22:89:27:c4:98:c5:
b7:43:77:0d:5a:c5:41:21:ba:9c:3e:c9:9b:2e:3c:09:4b:d8:
93:1e:a8:44:7a:14:ee:c5:c8:be:6e:56:a4:66:9c:e4:7e:35:
24:14:1f:99:8d:a4:b3:00:56:df:2d:ff:80:00:f9:42:70:13:
6a:01:fe:13:80:4f:ce:77:52:44:10:91:08:20:6a:fb:0c:97:
87:33:69:8b:f6:ab:7e:1e:a9:68:34:4e:2e:eb:55:6d:ca:b2:
ba:aa:67:83:be:4d:26:36:ae:08:a0:91:5f:9d:95:ef:8e:0a:
8e:b9:7b:62:68:fd:96:4f:02:02:28:80:12:9a:45:23:89:3d:
44:48:c6:a5:21:95:fe:f7:e9:6a:ba:d1:e6:da:ad:cc:72:ed:
ef:92:4b:40:d6:b7:89:3e:02:ad:4c:60:47:f2:e4:13:ce:28:
d9:1b:d9:2d:d9:f0:16:2a:37:d9:3f:37:a7:cf:f3:6c:d4:e3:
0c:4e:86:28:7f:6b:79:e4:bf:b4:44:2a:f2:2a:60:39:17:3c:
d3:6f:a1:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Z40S40OgTZBHAuIQehuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzExM2M3YWVhNmI3MTRhMDYwZTlmN2MzZTcxNTY5ZTYw
M2QzOTUwHhcNMjUwODIzMDgwMDM4WhcNMjUwODI0MDgwMDM4WjAzMTEwLwYDVQQD
Eyg3ODgyYWQ3YzZkN2RlNTJiNGIxZDQyZWM5YzhhZDAzNjllZjFmYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzGURrievjwhl7+9y4Tk+bf6RB1d
Mg/U6Uqo4IQmNu7JWMJNmLEpxU79j5D4vyweLeda41gyH64b+F1LwnL8zNYpOPhp
2gCNuX1L7bdXzM2vOpaf8y1wv6DHtry9xYyD9FhKzXaX/OtKuH8DJNonW5QiBnBZ
D1hFiEsmCMnl6goq4Dr34k5jGMs2cWdI6MCDRnBam7BUlM+8LYDM/lrK0oGgaHTD
AEmNTZL07MAawjdvTJXN2m6OHhrtzS36Qx2niFmaH/zZxJFrq/qLh4gTtw6Uc9t3
gsCKZwrqxVxwHMszyOcu/4yMlzd9YP4YnnT5q3ab1NWpioRilxBC9v4mPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiCrXxtfeUrSx1C7JyK0Dae8foyMB8GA1UdIwQY
MBaAFKvBE8euprcUoGDp98PnFWnmA9OVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYt
MWQwYTRlYzgyN2FiLzEvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jMGFkNGQtMjBmZS00YTkzLWFmMDYtMWQwYTRlYzgyN2Fi
LzEvcThFVHg2Nm10eFNnWU9uM3ctY1ZhZVlEMDVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+SP4DQY
b/+UQRzQhJghWtGRI0Vrlgwlf/FJGWIRsS+p9iTVfygSlzBSGf2ROROCIoknxJjF
t0N3DVrFQSG6nD7Jmy48CUvYkx6oRHoU7sXIvm5WpGac5H41JBQfmY2kswBW3y3/
gAD5QnATagH+E4BPzndSRBCRCCBq+wyXhzNpi/arfh6paDROLutVbcqyuqpng75N
JjauCKCRX52V744Kjrl7Ymj9lk8CAiiAEppFI4k9REjGpSGV/vfparrR5tqtzHLt
75JLQNa3iT4CrUxgR/LkE84o2RvZLdnwFio32T83p8/zbNTjDE6GKH9reeS/tEQq
8ipgORc802+h5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:11 2025 by rpki-client