Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: Y9zqB6BCFko3a4fZaTZDchjYZm9/N3vptknkgTSrliU=
Subject key identifier: AF:EE:28:8C:D5:4E:33:CE:93:92:06:07:31:B7:9B:3A:87:25:BC:57
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019A4EF573C931F589E6BABE99AB91206FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 0F2E
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: JVNmris4Yg07PGSYdIpjQBHM+3e3f+ph43Zpyu58/jA=)
3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:73:c9:31:f5:89:e6:ba:be:99:ab:91:20:6f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=afee288cd54e33ce9392060731b79b3a8725bc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:1d:f8:5e:75:28:f8:82:d2:28:6c:8d:e0:
7d:1d:d2:9e:66:96:d2:3a:f7:9d:20:27:49:da:ba:
fa:97:69:83:d9:6a:4a:1b:11:69:16:ef:d9:26:1d:
ef:d9:9d:2a:b3:5f:4a:27:ba:e4:dd:c2:67:a8:df:
f0:83:88:4a:57:b2:2e:e8:9b:a5:a4:ed:eb:5c:44:
86:e4:61:8a:c0:8f:1d:e1:c2:31:18:ca:d9:b4:48:
35:22:99:d9:fb:e3:55:49:4a:55:74:0a:86:79:22:
2d:8d:48:da:6b:03:8b:c8:e3:ff:af:ae:28:4b:7c:
79:3e:7c:33:42:e9:97:0a:ff:bb:ed:b6:8c:53:fe:
e4:4c:22:28:99:4f:fc:34:12:17:6f:5a:ae:0e:13:
47:e7:32:51:38:54:cd:36:a0:86:49:04:df:0a:ca:
91:55:fc:02:d2:52:cf:bf:bf:8d:5c:f3:a6:f2:11:
03:fe:95:fd:59:06:09:cb:e7:25:95:d6:57:3c:08:
01:e3:5f:8b:7c:e1:5b:1a:a9:44:c5:48:49:b4:47:
17:75:c4:46:2d:bf:67:39:cb:17:f5:d6:5f:37:94:
d6:43:71:39:5c:1b:2c:92:fd:9d:82:e8:d4:07:ef:
4e:26:96:1d:75:73:cd:ae:2a:09:d6:e1:52:6d:6b:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:EE:28:8C:D5:4E:33:CE:93:92:06:07:31:B7:9B:3A:87:25:BC:57
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b2:de:91:20:cf:ae:98:60:dc:66:dd:86:e2:68:88:ba:ef:
4b:7e:bd:62:20:a9:37:36:53:4f:2d:04:e5:fa:b0:ec:bf:2e:
73:f2:10:db:02:ed:7a:c9:8f:e1:ed:b3:ff:a9:0e:88:d0:4c:
58:d0:68:b1:b5:7e:a1:f7:6d:02:b3:ac:51:1a:61:64:13:c9:
31:87:0c:c5:e3:5e:a9:04:e4:d7:4a:18:b1:df:16:10:6f:ea:
9e:2b:b2:4d:58:7a:a4:04:08:1e:4b:50:a3:53:fa:ec:f6:78:
ab:9c:18:21:ab:b1:07:93:49:e9:d5:55:b3:4c:3b:46:06:32:
06:76:bb:29:55:bc:5c:61:27:0d:02:99:05:b9:e9:3a:27:5a:
e4:f8:ba:ec:d0:19:8e:77:90:05:b5:83:ce:7d:f0:27:1d:4a:
99:8d:b3:75:4b:f3:99:de:16:28:eb:63:1d:de:64:2a:16:ed:
27:20:bd:04:67:87:bc:a4:4d:1d:e0:b5:e4:42:00:fb:81:dc:
c8:52:e0:9c:9d:3e:d6:70:e1:f6:54:e0:17:33:8d:c6:b6:90:
1d:f1:c9:f7:44:e4:64:88:05:53:26:81:b4:6a:3a:a2:2a:6e:
16:7c:ce:25:84:64:ae:24:3c:a1:4c:96:4b:dd:14:ec:b0:ca:
e1:72:d8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:51 2025 by rpki-client