Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: UqIWdkl37IPh0onqYrfe8JQV/yUdwdrhRaIamxeBi/M=
Subject key identifier: 8C:EE:3C:E4:04:66:86:F7:6D:A4:BB:A2:37:DD:F0:31:AF:91:05:CE
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019A4DAAE03277185BBF9E47D400CC243D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 07:00:35 +0000
Manifest this update: Tue 04 Nov 2025 07:00:35 +0000
Manifest next update: Wed 05 Nov 2025 07:00:35 +0000
Files and hashes: 1: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
2: Jd9KhT8D9dzrmclXzaM2LsTcdvk.roa (hash: Xz0hJFnyzCZED2jN3f6gRmu551al736EIaABcjiPvLQ=)
3: Ms_pDtAjK9tb1e5h7bLoQWbyHs8.roa (hash: cL+zxxB8p9BDEROGB77OysHEV8P4dX2U5M5xqP9Q6C0=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: m4RMpiK3RYN2SsutayLFlkwWxGXbr1177YAqZgYoQ7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e0:32:77:18:5b:bf:9e:47:d4:00:cc:24:3d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Nov 4 07:00:35 2025 GMT
Not After : Nov 5 07:00:35 2025 GMT
Subject: CN=8cee3ce4046686f76da4bba237ddf031af9105ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:ce:fd:c2:c1:58:a5:d9:e9:0c:a1:b6:b0:
7a:a2:d3:70:92:08:ca:e8:08:86:86:e8:6c:35:f9:
5b:55:4b:a1:1f:22:92:75:e7:08:59:74:07:0a:21:
9e:a5:73:8b:f2:67:97:68:1c:a3:77:41:cc:0e:63:
ee:15:60:e2:78:c0:24:1b:0e:cc:1f:62:18:54:af:
02:86:ba:d1:31:18:96:8a:f3:20:66:fe:59:75:76:
2c:58:03:2c:4d:8c:ea:b6:9c:27:69:a4:bd:5a:58:
6d:a7:6d:e5:e3:4d:d0:36:48:c2:70:5c:8e:80:8d:
9a:1c:a2:dc:25:a8:37:f6:7e:08:50:08:c4:7e:2c:
8b:ec:39:d8:9f:83:17:db:bd:3a:8b:56:c8:a0:38:
41:f6:81:89:7a:cd:32:39:85:8e:29:07:23:c4:5a:
93:67:72:97:a2:a2:a4:48:a9:9c:62:90:f7:1c:44:
9d:75:88:c9:84:fa:52:8d:66:f0:cd:64:e1:ee:14:
17:ec:7e:0f:95:65:8d:29:ea:b9:71:cf:36:3b:c1:
da:99:56:49:9a:42:5c:b9:e2:f7:ab:1f:fa:37:5e:
bf:f6:30:51:bf:fc:a0:05:3b:d0:f7:76:6b:64:bd:
eb:f0:4e:d0:09:ca:b0:24:ff:91:96:bc:0f:fa:7a:
48:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EE:3C:E4:04:66:86:F7:6D:A4:BB:A2:37:DD:F0:31:AF:91:05:CE
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:46:6e:3c:a5:d6:f6:c7:22:7b:d6:1d:28:43:82:aa:89:73:
a0:82:43:c6:f8:28:d6:4a:d6:4b:b5:5b:14:5d:e4:38:e8:53:
74:fd:ea:a9:5b:18:ce:9c:03:30:d4:55:25:ae:e7:e8:8f:fe:
43:97:60:26:1a:35:14:68:c2:61:f8:02:34:3a:a0:49:41:32:
95:6b:ce:81:b9:da:f4:10:ed:cf:8c:4e:fe:54:d4:28:0e:f9:
58:5b:15:85:4d:8d:da:d2:5e:4a:55:2b:a9:a6:10:fd:b3:a3:
f7:61:4d:37:49:09:fe:42:1a:df:b0:fe:8d:b7:22:e6:4c:1e:
c5:e8:56:f9:32:ad:6b:0c:21:d8:d7:9d:13:78:15:52:ad:b1:
ea:cd:f1:6a:e4:25:d8:41:dd:2c:ab:1e:8f:18:2a:22:33:ed:
e9:b6:bc:cc:19:bd:dc:4f:5f:27:89:d6:fa:b8:0c:70:ba:5d:
0c:00:a0:b5:31:ab:1d:22:f3:fc:e6:73:7e:a9:6b:df:a5:0e:
bc:d5:32:51:89:76:fd:5c:01:91:35:7b:dd:1e:e4:fc:eb:01:
a8:29:f3:34:f0:08:dd:2d:8a:f5:ad:20:b8:8f:55:2e:11:ea:
78:9f:28:b9:63:52:ca:ce:ce:39:03:e1:65:0d:61:e2:44:90:
43:67:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:32 2025 by rpki-client