Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: 4ZAmpgS/uj+gizDu4AT9gtTz0MO3sWVMBsxHVfvFxJw=
Subject key identifier: 5E:AC:10:D1:37:72:5D:97:42:15:21:6C:55:26:5B:F3:5D:BF:9F:4C
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019A511999FD77E4EAA9701021BB2BDE8B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 12A8
Signing time: Tue 04 Nov 2025 23:00:23 +0000
Manifest this update: Tue 04 Nov 2025 23:00:23 +0000
Manifest next update: Wed 05 Nov 2025 23:00:23 +0000
Files and hashes: 1: 0TzJK__KWaWwj7IIFGxcW_zcy6A.roa (hash: zzUxvFov3vux2BIMLPpoZFjho4ThQjWHPRuDNEigsXI=)
2: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: A2aaDzQtlgQ4GOs60AunQgqxrPBWx+weoE2rzbVqgZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:99:fd:77:e4:ea:a9:70:10:21:bb:2b:de:8b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Nov 4 23:00:23 2025 GMT
Not After : Nov 5 23:00:23 2025 GMT
Subject: CN=5eac10d137725d974215216c55265bf35dbf9f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7d:c6:79:54:3f:50:91:1a:4d:8e:05:de:4d:
3f:c8:5a:04:5d:a1:6f:71:1b:7e:f0:b1:56:48:40:
f4:96:b9:23:80:a8:c6:bc:9e:27:1c:57:28:33:3c:
01:36:67:18:6c:2d:d8:4f:bc:dc:e1:8e:0d:43:88:
27:1e:71:8d:43:21:bb:0a:45:a5:a4:70:93:df:50:
eb:75:d4:c5:0b:87:f7:2c:32:c2:55:11:a7:e0:51:
69:4f:e1:c4:d2:9b:7a:49:c5:56:8a:ca:ad:84:a4:
5f:5a:70:43:b5:d6:c0:49:6e:99:ea:1a:98:cf:a6:
d6:73:15:33:21:2b:02:bd:7e:9b:c4:ff:f7:47:c5:
18:0e:92:28:43:70:52:b3:6e:52:a9:2b:0f:ff:b3:
93:ba:3b:0e:a2:41:a3:4a:3c:0f:31:a4:e1:79:9e:
5c:17:12:6b:73:8c:04:68:61:13:02:4f:c8:98:b7:
ea:18:f4:11:10:63:23:78:55:06:a1:4d:4a:95:09:
c2:2c:5e:0d:63:02:d3:ce:68:69:a2:c4:bb:cb:21:
83:c7:3d:1e:9e:e5:b1:16:f7:84:8a:9a:98:4c:ad:
4a:d1:22:e0:bf:f3:d9:2a:e4:43:2f:3c:19:4b:d0:
b0:e1:f3:28:06:bc:ad:84:6a:f2:ee:66:42:fc:e1:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:10:D1:37:72:5D:97:42:15:21:6C:55:26:5B:F3:5D:BF:9F:4C
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c2:ca:a9:51:3b:c8:2e:2e:ff:8c:96:5e:01:d3:58:ab:2b:
87:c6:47:48:c4:84:83:a2:8b:f2:c6:30:73:05:20:65:75:a2:
95:21:87:33:7f:81:c3:09:ba:ad:2f:5a:43:43:56:a4:bc:19:
62:80:97:ec:48:fb:3d:40:19:39:cb:6c:f7:26:b4:0e:64:af:
81:98:7c:fc:6d:be:a7:88:ce:21:89:de:28:73:2b:93:b5:1b:
ab:61:4d:32:56:66:10:cb:56:78:3d:d9:fe:69:eb:1c:c0:de:
bf:47:a4:7c:2d:86:46:cf:d5:df:e2:57:83:9c:91:b8:7b:6f:
a5:2e:be:71:97:94:03:00:a3:b3:69:70:a5:ef:d4:f3:08:c7:
21:1e:e8:b0:71:21:31:fd:47:3a:ee:90:f2:ff:82:18:84:ba:
6f:4d:1c:a5:2b:9e:c6:65:a7:28:93:48:11:56:d5:c1:b2:89:
6a:83:52:8d:c0:60:93:4d:86:c3:76:2b:c2:23:0a:98:4f:ea:
6e:7e:de:59:e4:d2:ef:dc:73:8d:81:d3:67:67:48:6a:42:fc:
7c:c2:87:23:5c:bd:80:d5:0e:11:df:18:68:bc:64:49:3e:fb:
a9:36:ee:a0:6d:53:10:2c:4f:54:a8:1d:b4:49:fb:0c:35:a3:
f7:78:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:21:37 2025 by rpki-client