Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
File: qMbudsTo2UYU4IJQX_6MmRokr4o.mft (raw, json)
Hash identifier: s4jzVUBxdVQ3G0nT6seqI0DL/YEN/ftx2e7S0RsIVik=
Subject key identifier: 8B:87:BD:7E:CE:D6:58:48:EB:86:59:F8:49:42:C2:F9:CA:48:6E:0A
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Certificate issuer: /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial: 019A4F991EFCFE5AB008317D8F9824386673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
Manifest number: 1372
Signing time: Tue 04 Nov 2025 16:00:26 +0000
Manifest this update: Tue 04 Nov 2025 16:00:26 +0000
Manifest next update: Wed 05 Nov 2025 16:00:26 +0000
Files and hashes: 1: WTYKu26kIWjOTIQNkx9XhusumzA.roa (hash: jdR1zGE/VerZVpVMdByTcrJDOg5A7+iJoxqGyTD0+wQ=)
2: qMbudsTo2UYU4IJQX_6MmRokr4o.crl (hash: XOuemerAj6GFjJwKUhuEjZ15VmqqpbN0/EQ2cfFS38w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:1e:fc:fe:5a:b0:08:31:7d:8f:98:24:38:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Validity
Not Before: Nov 4 16:00:26 2025 GMT
Not After : Nov 5 16:00:26 2025 GMT
Subject: CN=8b87bd7eced65848eb8659f84942c2f9ca486e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:ce:49:89:a4:24:d6:3e:30:c3:d6:90:c1:
d6:4d:8f:ac:d5:63:81:e0:7a:fa:47:7f:60:ee:f9:
06:67:85:bc:3b:af:a3:e7:91:b6:60:dd:99:35:54:
e5:38:85:bc:da:11:11:24:03:6d:c6:cd:95:33:0a:
8b:81:e3:cf:5c:17:bd:32:38:13:7d:25:76:e9:4e:
b6:28:eb:70:06:46:c0:bf:0c:39:07:5f:a7:1f:c7:
34:63:ee:18:01:75:6b:fa:1a:2f:d1:2b:a7:c7:7e:
72:0a:f1:e4:18:a9:04:bc:5e:84:49:77:44:e6:ba:
b9:a3:99:a4:23:f1:44:15:ee:c1:ba:6a:45:b8:51:
df:4d:b4:f1:d1:5c:87:71:9a:7c:29:82:0a:2e:bc:
9d:70:f1:41:6a:fb:46:fd:8a:0c:28:a0:e8:97:38:
52:f2:2f:d4:4c:dd:f1:a4:b4:50:aa:b1:89:72:ae:
97:2f:87:77:c7:55:fe:34:71:1d:76:79:c5:8a:28:
de:0c:fc:35:d4:a2:b2:99:40:6c:d0:25:c0:30:0a:
11:96:68:ea:57:8a:6f:42:fc:e1:7d:7c:4c:cc:76:
8d:e6:d3:8f:03:14:86:48:e2:6c:81:e6:b7:41:0b:
cf:b4:ab:d1:6c:83:7d:23:7e:b5:99:35:73:a4:b7:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:87:BD:7E:CE:D6:58:48:EB:86:59:F8:49:42:C2:F9:CA:48:6E:0A
X509v3 Authority Key Identifier:
keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d0:7b:73:41:62:39:95:c5:12:77:94:b8:93:4a:29:0e:e0:
13:a4:b1:95:72:7c:fa:13:ae:3a:b9:b6:b2:5c:db:ff:f5:61:
d4:12:4d:7f:1f:31:1d:1e:f3:f2:75:27:02:77:90:74:32:9c:
36:53:9b:a0:16:64:3e:2d:df:fb:96:61:c9:ca:f6:80:6e:83:
a2:59:95:b4:44:31:22:e5:ff:1f:b5:ed:70:67:86:f3:78:b7:
1c:68:0b:68:eb:04:95:fc:26:5b:2f:83:5b:fe:c8:3e:f3:ab:
1c:fc:69:2a:bc:01:22:47:2a:ae:cd:97:f7:34:87:09:e7:86:
d8:32:8b:12:b2:01:7f:88:2c:e9:03:36:c8:09:ed:8a:7a:a1:
f4:28:bc:30:9f:14:15:a2:1d:6f:b0:fc:36:00:72:54:e3:9c:
5e:36:52:df:cf:72:b3:52:e0:94:68:b2:b3:75:cc:46:b9:9f:
cf:e1:19:2d:d8:ad:e9:9f:61:17:ea:80:1c:6e:9d:50:24:44:
f9:a8:bb:4f:8a:e2:38:79:0c:2e:84:07:09:0c:fb:60:05:e7:
08:ed:a5:7e:fc:5c:34:66:5d:71:fb:15:77:df:c7:bd:18:78:
b9:b1:8f:23:21:53:63:47:5f:38:69:cc:d3:35:f8:72:19:9d:
b4:7e:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:45 2025 by rpki-client