
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: 211zO1OX9vb6FSpga0hhyvEexIADQzNxsi4ZUXciPso=
Subject key identifier: 19:D8:67:B7:19:B8:6A:EF:6D:70:AA:E1:0C:9A:73:7D:30:0F:97:4F
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 0199FE101CD553E7CA3ACD4BD66496F3CC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: B0
Signing time: Sun 19 Oct 2025 20:01:32 +0000
Manifest this update: Sun 19 Oct 2025 20:01:32 +0000
Manifest next update: Mon 20 Oct 2025 20:01:32 +0000
Files and hashes: 1: 6-EX2htJlHImEHBSvQOybhHaeO0.roa (hash: 1ZsDmzKZ+zRhoeIFPi5/Pw5pQ/dfpTV0ipC/YNmanno=)
2: fl64q3w812YfzXLS36kYEo550Os.roa (hash: FCrMbgS1Qp2Ghje1H1/gJu/F21+3Pg9qcnIqWk+O48U=)
3: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: 0MYzFVgLmcomNKTu6jx8GOohbggUdib/YHCnoF9FioA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:1c:d5:53:e7:ca:3a:cd:4b:d6:64:96:f3:cc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Oct 19 20:01:32 2025 GMT
Not After : Oct 20 20:01:32 2025 GMT
Subject: CN=19d867b719b86aef6d70aae10c9a737d300f974f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:96:41:1b:d8:46:a0:23:e1:05:c9:bc:c2:
77:a6:ab:4c:aa:8f:74:48:97:06:11:72:82:e4:f5:
9a:66:93:97:2c:aa:2f:71:e7:9f:7b:2b:11:5b:b6:
b1:52:93:c2:44:8d:04:37:9c:c4:18:fe:d6:9d:e6:
1e:71:2d:56:79:82:0e:f9:d5:b8:5e:cd:09:bd:6e:
e7:77:44:ba:fd:ff:54:31:d2:f7:0a:17:5c:89:7d:
cc:0e:15:bd:a1:0d:d3:4e:80:60:48:92:27:ad:3c:
72:52:86:49:3a:93:ad:b0:fa:c7:bd:47:c3:c4:b1:
f3:94:93:fb:48:f4:fa:86:94:6c:c5:ee:c7:31:3b:
e9:35:67:b2:7a:27:ed:2d:36:83:11:87:05:3c:93:
fd:12:4c:e2:21:0a:f0:c5:05:5b:d6:f3:ae:be:03:
34:74:d1:38:71:de:7e:a9:0b:4a:07:db:b0:35:5e:
49:f3:86:f0:1a:dd:39:c7:60:09:b1:a0:5f:6b:14:
5e:39:e8:0d:0a:74:74:29:79:5a:3d:3a:4e:6c:27:
12:d8:1a:4c:f2:ad:41:9d:1c:c7:34:99:6e:92:ee:
a3:47:75:77:55:df:8a:ce:5c:c6:78:ec:dc:79:bf:
c9:29:00:91:5b:5d:2f:b5:d7:3e:07:7b:ad:ca:4c:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D8:67:B7:19:B8:6A:EF:6D:70:AA:E1:0C:9A:73:7D:30:0F:97:4F
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:27:69:66:ba:9c:d4:96:a3:b4:f7:79:de:35:c0:12:26:6c:
c9:0f:c3:50:0c:69:70:e4:b6:15:ff:37:f8:16:a8:cf:e4:9b:
3d:0e:b2:1b:7f:85:98:29:28:87:f8:e4:7e:c8:fc:51:68:a2:
89:70:14:41:9e:de:27:2c:0f:71:25:a7:2e:70:9c:56:a5:db:
89:f2:71:8b:f9:b3:ff:1e:2b:68:9f:cc:e9:f9:cb:30:f4:8c:
67:de:b5:33:ad:e0:61:a6:46:f6:cc:7d:79:f3:43:02:8d:5d:
b5:15:03:49:65:08:33:98:80:47:5b:52:fc:d3:e5:ce:34:7e:
e8:2d:ac:21:e6:7e:3c:b6:04:96:8a:10:75:39:3f:e5:68:21:
f4:9e:53:f5:12:11:eb:96:e5:52:20:45:64:9e:5c:98:61:0c:
be:11:d5:a3:cb:f4:bf:db:0b:1b:68:96:6f:9b:17:43:6e:f4:
e6:cb:6b:42:4c:ac:c1:02:a2:42:72:15:05:f0:68:d0:01:d5:
12:f8:1d:b7:26:30:5b:2d:98:dd:db:04:b4:42:3c:45:79:a7:
3f:fb:2f:43:25:5a:e8:31:90:1b:0e:0c:39:81:08:43:64:c6:
7c:3c:de:68:85:78:bb:2d:1b:df:e8:80:85:b9:1a:c2:d8:a7:
11:20:69:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EBzVU+fKOs1L1mSW88w0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MjQ2Yjg4YjgyOWI0YTNhYWRjMjgwZGExNDViNjNlOTll
OTJhMGUwHhcNMjUxMDE5MjAwMTMyWhcNMjUxMDIwMjAwMTMyWjAzMTEwLwYDVQQD
EygxOWQ4NjdiNzE5Yjg2YWVmNmQ3MGFhZTEwYzlhNzM3ZDMwMGY5NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng6WQRvYRqAj4QXJvMJ3pqtMqo90
SJcGEXKC5PWaZpOXLKovceefeysRW7axUpPCRI0EN5zEGP7WneYecS1WeYIO+dW4
Xs0JvW7nd0S6/f9UMdL3ChdciX3MDhW9oQ3TToBgSJInrTxyUoZJOpOtsPrHvUfD
xLHzlJP7SPT6hpRsxe7HMTvpNWeyeiftLTaDEYcFPJP9EkziIQrwxQVb1vOuvgM0
dNE4cd5+qQtKB9uwNV5J84bwGt05x2AJsaBfaxReOegNCnR0KXlaPTpObCcS2BpM
8q1BnRzHNJluku6jR3V3Vd+KzlzGeOzceb/JKQCRW10vtdc+B3utykwDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnYZ7cZuGrvbXCq4Qyac30wD5dPMB8GA1UdIwQY
MBaAFKgka4i4KbSjqtwoDaFFtj6Z6SoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEt
NDkwYzg4MzAxZmNlLzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hMzZmYjItZTYwZC00ZjhiLTljOGEtNDkwYzg4MzAxZmNl
LzEvcUNScmlMZ3B0S09xM0NnTm9VVzJQcG5wS2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCdpZrqc
1JajtPd53jXAEiZsyQ/DUAxpcOS2Ff83+Baoz+SbPQ6yG3+FmCkoh/jkfsj8UWii
iXAUQZ7eJywPcSWnLnCcVqXbifJxi/mz/x4raJ/M6fnLMPSMZ961M63gYaZG9sx9
efNDAo1dtRUDSWUIM5iAR1tS/NPlzjR+6C2sIeZ+PLYElooQdTk/5Wgh9J5T9RIR
65blUiBFZJ5cmGEMvhHVo8v0v9sLG2iWb5sXQ2705strQkyswQKiQnIVBfBo0AHV
EvgdtyYwWy2Y3dsEtEI8RXmnP/svQyVa6DGQGw4MOYEIQ2TGfDzeaIV4uy0b3+iA
hbkawtinESBpsw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:36 2025 by rpki-client