Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: Oh9P68atFqJleNutR9yKm9MDKTenufJ2UzQceda3thg=
Subject key identifier: 45:E4:62:E9:D2:4F:E1:B9:11:E2:16:E7:BD:7C:CD:A0:33:02:44:BD
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 019A4D06C1535E02683A560039CE6D4B21D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 139E
Signing time: Tue 04 Nov 2025 04:01:19 +0000
Manifest this update: Tue 04 Nov 2025 04:01:19 +0000
Manifest next update: Wed 05 Nov 2025 04:01:19 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: xj2/c3NrHCFXvj4d0eNOp53zzggqmd1gBS4FeOYpIig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:c1:53:5e:02:68:3a:56:00:39:ce:6d:4b:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Nov 4 04:01:19 2025 GMT
Not After : Nov 5 04:01:19 2025 GMT
Subject: CN=45e462e9d24fe1b911e216e7bd7ccda0330244bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:0c:22:01:9c:5d:08:5b:ac:67:10:81:91:
79:95:25:e6:ce:dc:0c:9b:67:59:f0:5c:76:c6:f6:
80:00:85:6a:73:15:7a:6a:79:05:55:73:59:ae:57:
c0:af:97:9d:9b:92:64:1a:a0:ef:47:02:7b:fc:a4:
a6:05:60:93:a9:a7:1f:99:8d:d3:44:96:91:26:ea:
2f:02:95:95:2c:81:e6:bc:fd:03:78:ce:4f:1b:a9:
a1:27:51:90:01:fc:33:04:e7:6b:e8:91:50:ee:16:
d1:72:2d:fb:71:74:b8:77:aa:5f:b0:a9:b8:a8:84:
38:8c:6c:19:61:00:25:65:09:02:b1:97:89:c6:90:
e9:3a:cb:d2:ad:8c:0f:c3:01:f4:36:af:b2:1a:da:
e0:b9:bc:40:3d:20:a4:04:44:2f:eb:11:d0:b4:5f:
ab:9a:67:12:c4:05:7b:e0:27:9b:24:0e:83:bb:1a:
b4:68:ba:2f:6f:5f:23:d6:88:d9:18:a2:7a:9f:9b:
ab:30:6e:fa:55:96:3d:5b:6b:3c:ea:28:86:bd:05:
c3:a5:3b:48:bd:7e:03:b6:5d:3a:82:1b:00:fb:4a:
2a:42:a9:b0:0f:f6:48:9f:39:1d:f4:68:79:c2:05:
22:3f:8b:9f:85:a7:87:a7:ac:e1:1a:1f:e8:b2:35:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E4:62:E9:D2:4F:E1:B9:11:E2:16:E7:BD:7C:CD:A0:33:02:44:BD
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:74:ea:91:2b:92:39:af:0e:e6:90:53:ae:2d:e6:67:f8:0d:
7e:f1:ae:e2:65:34:71:1a:5e:59:81:15:95:85:1f:77:0d:70:
17:c8:64:27:dc:bb:0d:0c:2f:80:91:df:3a:c9:65:a7:d4:75:
96:a9:f8:87:ab:c3:0c:44:1e:54:91:88:d7:29:81:dc:72:ed:
3f:b7:8e:56:0a:96:3f:97:be:25:10:45:b3:e4:7f:74:85:6c:
de:b0:87:ca:fd:9b:93:33:76:fb:58:63:6d:58:dc:af:e6:2a:
02:40:b9:d3:ad:9f:d1:b3:67:d4:3c:83:08:19:7c:6b:ad:96:
d1:ae:f6:73:6f:78:55:d7:51:3c:8b:50:23:1c:a0:d4:4b:3a:
07:10:65:43:9d:da:09:e4:1c:83:65:e5:92:80:56:c7:f2:0c:
fb:0c:6e:45:7b:57:25:14:e8:4f:fa:52:05:1d:b3:9e:82:ad:
59:d2:d8:18:ec:e7:75:f4:bb:91:69:18:fa:12:d0:12:ae:56:
6b:9a:d9:11:36:52:64:5e:ae:74:02:90:cc:f9:d5:4a:e0:fe:
3f:00:dc:4b:9f:45:62:f3:3b:36:fd:68:1e:69:3a:e8:cc:3c:
f2:dc:dc:0c:8a:c1:43:01:89:4e:d6:c2:e3:73:0e:f7:34:e7:
52:e2:80:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:49 2025 by rpki-client