Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: uUj64aS7c95j4uSq+jyGMMmg2vjKu2mZcIS9P/Wrs+w=
Subject key identifier: 3A:2D:AB:E9:D3:06:34:A8:DD:E8:02:E3:B1:1E:31:C7:4D:62:AC:75
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 019A4EF4EAC8D5C588AF6C779891814CED38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0E43
Signing time: Tue 04 Nov 2025 13:01:04 +0000
Manifest this update: Tue 04 Nov 2025 13:01:04 +0000
Manifest next update: Wed 05 Nov 2025 13:01:04 +0000
Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=)
2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: CIGwJyQ/Ps4H9tuc0YJsjL0ehyZYnYGTwZ+ooFUF2Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ea:c8:d5:c5:88:af:6c:77:98:91:81:4c:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Nov 4 13:01:04 2025 GMT
Not After : Nov 5 13:01:04 2025 GMT
Subject: CN=3a2dabe9d30634a8dde802e3b11e31c74d62ac75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b6:91:e7:c0:cf:3d:c8:2a:df:e5:a9:e5:84:
a5:65:39:56:e5:11:d5:f1:26:45:da:fa:4b:6a:71:
a6:a6:15:74:d5:6a:e2:34:81:93:6a:27:4e:b9:6b:
c9:98:e3:0b:59:be:92:35:4c:65:24:e8:ce:a9:f7:
1f:a6:c1:19:4a:ba:e1:e3:17:22:fc:53:8e:e7:63:
e3:07:6b:1b:ca:86:5b:dc:0d:90:7c:ef:0d:e3:26:
f3:2f:bf:08:11:a4:19:5a:1c:97:eb:34:5e:11:ae:
ac:11:45:3a:22:67:d7:a1:b0:4c:54:44:88:50:8a:
1e:d1:a4:91:8e:c4:ae:84:f5:29:6d:52:e9:c2:ce:
97:59:4a:e1:1a:99:d2:3a:a0:d2:6a:47:b3:7e:25:
d6:b0:ec:a9:d4:9d:c3:df:ad:cf:51:a9:46:48:80:
4a:77:a5:fa:cd:6b:36:70:e4:c7:17:fe:1c:d3:f3:
7b:18:0f:06:48:93:e4:87:09:9e:78:e9:a2:a1:fa:
bc:63:ea:e1:9e:fa:fa:c4:1f:98:4e:c4:d0:37:12:
e1:8b:e5:15:ae:28:2f:07:be:35:63:cf:02:67:a1:
47:4e:92:52:8b:d9:2a:6c:d7:4a:e7:03:15:6c:a5:
19:8c:20:66:a7:58:6a:f0:be:94:94:a1:96:f5:3e:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2D:AB:E9:D3:06:34:A8:DD:E8:02:E3:B1:1E:31:C7:4D:62:AC:75
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:ac:4e:fb:2f:53:77:f9:13:ad:9e:4c:6b:75:65:58:e6:
91:ee:e4:df:65:2e:e8:7c:90:75:ed:6f:5d:52:e6:2e:fa:c6:
3c:59:1a:a1:e4:07:d3:79:ab:ce:0e:8e:99:60:fa:02:58:31:
c1:82:5c:62:f7:81:5e:42:ad:88:ee:9e:e8:28:ef:fc:1b:d7:
b7:b4:80:00:90:75:89:9a:37:1e:89:7c:ce:2b:55:31:3e:dc:
bf:d5:1a:cb:32:3e:9a:bb:8c:8a:34:80:78:e8:0f:55:40:d6:
80:31:6c:03:f7:fe:78:0b:1a:8a:e2:28:d6:99:d1:69:e9:d8:
c2:1e:a0:fe:32:39:e4:48:0a:29:48:c7:31:b3:4f:ff:bb:61:
99:0a:4e:09:81:24:9e:8d:70:57:4b:25:f3:2d:e2:e7:bc:43:
10:7f:4f:2d:b4:e3:1b:7e:39:b8:7e:be:71:c1:b6:b2:d7:54:
4b:7c:d6:3f:b5:40:57:f9:57:2f:be:f2:d1:ad:d8:5e:6d:92:
f1:6c:a7:4e:78:d9:98:68:a1:11:1b:84:96:e5:37:71:35:38:
01:99:dd:20:3f:fe:a4:64:17:1a:7b:85:33:9e:17:6e:95:d0:
30:97:38:ea:61:d9:d1:78:52:59:d3:7c:fb:ab:2a:73:24:7b:
d2:ec:35:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:02 2025 by rpki-client