Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: ifDdrLbezPQq/UnT1K8dqMcnZ1MM1JLNA9kF4hopiz0=
Subject key identifier: BA:22:70:2A:25:21:07:00:F9:B6:8A:FD:F4:57:70:4F:E8:06:72:AB
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 019A4C98182EF32A27A32B4DD77DBA73E5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0CE8
Signing time: Tue 04 Nov 2025 02:00:27 +0000
Manifest this update: Tue 04 Nov 2025 02:00:27 +0000
Manifest next update: Wed 05 Nov 2025 02:00:27 +0000
Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: myOluWwIQm4YVZI7sSAIo0Qrip5zAKd7G5KE+n0pjak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:18:2e:f3:2a:27:a3:2b:4d:d7:7d:ba:73:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Nov 4 02:00:27 2025 GMT
Not After : Nov 5 02:00:27 2025 GMT
Subject: CN=ba22702a25210700f9b68afdf457704fe80672ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:c3:9c:f0:71:80:19:7b:47:e6:9c:6b:db:
dd:c3:31:3c:63:9d:d7:3c:51:7a:38:6a:8e:6f:de:
2b:00:87:94:e6:09:ac:ad:ff:a7:61:8b:96:d4:1d:
a6:37:60:a7:b2:26:b6:23:11:d6:68:c9:bd:74:c6:
e2:78:ae:ca:d3:1a:50:fa:5c:bc:99:dd:5b:ca:61:
a7:40:83:06:99:c1:24:7d:78:af:66:c9:38:66:a4:
af:70:c6:a8:f3:31:b3:ca:40:54:85:e8:1b:a1:c2:
d1:ec:ae:54:d5:e7:09:3c:45:c2:f8:77:d7:85:52:
b4:d8:49:36:d9:3c:8a:fa:35:8e:f2:8c:1e:cf:a5:
2d:87:71:22:6f:47:1b:7a:09:de:92:21:da:0f:2c:
f6:0e:e3:a9:31:f2:32:f9:f5:33:1f:8b:86:30:eb:
8a:29:34:61:e3:1f:e1:62:6f:52:01:5c:52:94:ff:
73:6d:e3:25:a6:4b:8a:6a:d2:fa:f4:d0:aa:53:33:
dd:91:2b:60:18:9f:68:b3:fb:67:51:ae:ae:0f:d0:
1f:d5:72:2a:5a:19:6a:46:50:9a:c6:83:ed:9a:3e:
b5:3d:dc:c6:d3:ff:d8:5a:4d:d3:7d:a7:c6:6f:6c:
11:23:5a:2c:66:7b:82:0b:b9:ee:3e:5c:6a:a0:15:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:22:70:2A:25:21:07:00:F9:B6:8A:FD:F4:57:70:4F:E8:06:72:AB
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4d:de:21:01:33:73:10:7a:6f:06:1c:1f:4e:5e:b3:03:8d:
3f:cb:ed:f9:83:b0:cd:87:fc:21:4b:e1:4c:b6:7f:bd:1c:c6:
88:3f:23:e3:ac:bc:c5:c7:53:d4:75:38:8b:b1:71:84:e4:d0:
0c:a9:8b:0d:26:23:71:01:38:12:29:3f:a9:b6:a2:47:2c:4a:
97:0b:9c:f2:0a:90:03:38:60:6d:86:75:27:e4:9e:d4:7e:f7:
af:9f:b0:0f:5c:01:d2:ca:d2:97:b2:26:fd:49:9f:e7:a1:68:
f0:bd:62:5a:69:b3:8c:41:d9:76:eb:d8:19:fb:a1:7f:e4:42:
2d:e8:7d:58:37:53:fe:44:3b:f8:3a:dc:e3:1e:b3:51:9a:dd:
2e:29:b8:1b:52:9a:f4:68:75:0f:37:28:60:74:3a:c6:e3:2c:
0d:00:c1:12:f4:37:61:c1:25:05:c9:1f:04:b5:b9:d7:71:ae:
bc:1d:b7:78:7b:8a:64:95:94:5d:e0:64:25:28:de:d6:7f:da:
56:c1:33:ea:81:8d:4f:93:2b:41:bb:51:e8:c4:c2:01:0c:90:
77:01:55:fa:e1:7b:7f:0b:44:b3:e7:03:d6:e2:b7:90:1a:b3:
5f:de:e2:88:68:82:4d:7b:d6:b2:dd:ff:5d:6a:d9:04:33:86:
76:fc:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:26 2025 by rpki-client