Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: MCGzWzfYw9r4LiRKGbqDd3T72FURzgucTS9af9hxdHI=
Subject key identifier: B9:88:D9:A0:EF:8F:9A:B0:63:16:7F:04:FC:74:C3:D3:90:10:09:8F
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 019A5307EFFFF169A8F5E64A52981830C6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 093E
Signing time: Wed 05 Nov 2025 08:00:20 +0000
Manifest this update: Wed 05 Nov 2025 08:00:20 +0000
Manifest next update: Thu 06 Nov 2025 08:00:20 +0000
Files and hashes: 1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=)
2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: A8pY0kSHH2wxCaqFp9dRDNlVQb1aoZ6J4i5/ffIRihc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:ef:ff:f1:69:a8:f5:e6:4a:52:98:18:30:c6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Nov 5 08:00:20 2025 GMT
Not After : Nov 6 08:00:20 2025 GMT
Subject: CN=b988d9a0ef8f9ab063167f04fc74c3d39010098f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:32:9c:34:39:d7:55:ce:2e:96:7e:9d:ad:
1e:4d:b6:52:43:90:a5:59:30:a5:c3:6a:71:e8:c8:
1f:2c:80:5a:43:20:f0:c9:2c:54:f7:bb:60:6e:dc:
05:30:75:31:72:e7:9d:d1:08:d0:63:9e:3a:28:53:
b9:62:06:f6:84:88:ba:62:20:8d:0c:d4:7c:04:0f:
5e:02:ed:05:8c:89:cc:c0:28:06:a7:ae:90:09:0e:
93:50:2b:f5:34:c5:4b:9a:cc:4e:46:d4:41:c4:c0:
e6:3f:09:ae:79:d0:1a:5a:9d:d8:64:70:6d:1a:ac:
04:e9:a0:79:00:4a:f2:3c:e3:4b:a2:09:de:28:ac:
a0:b8:79:12:ea:c4:12:99:8b:a0:da:e9:37:1e:ca:
4e:0b:c5:93:bd:65:43:4c:97:ee:64:a0:25:fb:60:
d9:be:3b:80:9a:15:44:72:c5:81:6a:26:f1:80:84:
04:b3:8b:4c:24:a1:60:9f:64:3d:db:20:77:23:1d:
24:28:19:84:c9:ba:a3:ff:d2:7d:47:1b:19:e7:e0:
f6:27:33:10:55:5a:cc:a2:7b:50:af:d5:d0:92:0a:
92:f9:12:84:2d:c8:e2:13:71:97:38:24:e1:0a:8e:
46:a3:ae:c7:2e:1e:01:a6:2f:68:3c:75:e4:c4:76:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:D9:A0:EF:8F:9A:B0:63:16:7F:04:FC:74:C3:D3:90:10:09:8F
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d6:9b:e3:e9:a7:07:ff:19:98:65:c1:c7:36:c8:03:03:48:
3f:8b:4a:45:03:10:c4:6e:91:08:c4:4e:21:e4:90:5c:60:0f:
a1:f5:f6:87:ee:f8:f6:58:3e:5b:16:b2:94:ce:2c:c4:07:e4:
f3:d8:9d:d1:70:bd:05:9d:ba:68:7b:94:47:16:fa:96:7c:8e:
d3:af:c8:0b:93:8d:aa:84:86:2d:28:e9:63:1b:f7:4a:ce:35:
4d:14:e1:23:17:6c:a9:e6:d2:be:d9:77:27:a2:c1:03:83:d3:
f7:a4:68:cc:08:a4:3f:0f:91:cc:95:b7:1c:aa:64:b7:50:17:
e1:51:dc:cf:aa:7f:73:18:76:ca:b3:ef:29:aa:ba:c9:c0:e5:
fa:16:13:12:9d:1c:f6:6f:58:33:4b:34:2d:5a:5b:ae:e2:0c:
a9:d8:3c:27:86:a6:a9:38:8f:d1:15:96:52:2a:0f:fd:59:9d:
3e:c7:59:8d:ae:9d:c6:7f:d7:1e:80:7e:3b:48:1c:9b:6a:78:
15:b8:66:b0:ae:1d:25:4f:67:32:d0:03:1d:73:09:53:33:e9:
2d:d4:49:af:72:37:64:b1:95:be:c7:3f:37:ca:cc:26:ba:a7:
66:3c:3c:4a:d8:bf:1e:59:f3:73:af:66:c3:6c:9d:6c:f6:1c:
51:bd:a6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:41:03 2025 by rpki-client