Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: ZlJpytS+xE2ObjM8TVFS4d8qJUk9lWkFhJ0/gg8XhPw=
Subject key identifier: E6:68:5B:08:74:28:7F:CE:C7:8B:B6:52:7C:0F:BB:9F:25:27:BD:0E
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 019A4EF43B8B3199B26741CD5AB215AA9F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 1458
Signing time: Tue 04 Nov 2025 13:00:19 +0000
Manifest this update: Tue 04 Nov 2025 13:00:19 +0000
Manifest next update: Wed 05 Nov 2025 13:00:19 +0000
Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: ZMLvt0gPiby+7zrN5UGD7/lCp181X2R3Z9U1+VikG4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:3b:8b:31:99:b2:67:41:cd:5a:b2:15:aa:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Nov 4 13:00:19 2025 GMT
Not After : Nov 5 13:00:19 2025 GMT
Subject: CN=e6685b0874287fcec78bb6527c0fbb9f2527bd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:3d:cb:1f:7a:ba:b3:27:db:91:53:35:7b:
32:f5:14:1f:93:f0:29:68:48:ce:05:4e:39:70:04:
16:51:55:f2:a2:20:bd:6e:f9:38:f9:b3:df:88:2d:
5a:a4:31:0d:ff:95:bd:b4:9c:20:b7:40:48:6c:dc:
7e:77:f4:b1:bf:f3:ca:b2:18:a5:f4:e8:4c:07:aa:
6a:a9:07:54:4c:2a:1c:88:f4:e1:fe:3e:e9:60:51:
bd:53:57:ac:4a:08:38:46:f2:33:ee:65:67:44:d2:
4e:af:c4:6a:76:f5:36:75:5d:d1:d5:d2:a6:5b:fa:
09:c8:07:16:c2:9b:e1:62:bb:7b:ba:96:1e:cc:1e:
9f:f3:b1:b0:40:27:e0:ce:b1:64:c5:c7:2b:5c:21:
1a:64:5b:20:4f:7b:24:cb:06:bf:cd:e7:a7:f7:c5:
0a:ba:37:54:31:8e:3f:4e:46:c7:93:dc:60:68:e0:
5d:05:bd:f8:38:f2:49:54:f1:22:5f:8d:e5:74:c8:
9e:f6:c9:cc:d9:9c:e5:09:ba:b6:f3:0b:22:fe:01:
e0:28:30:e6:64:02:5b:c7:b7:f9:3c:81:b0:af:1b:
df:6a:d6:30:f9:ee:83:b0:ba:d4:ec:d0:47:d6:72:
0d:31:c8:75:2d:e5:ab:f1:16:bd:76:40:4b:b1:5f:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:5B:08:74:28:7F:CE:C7:8B:B6:52:7C:0F:BB:9F:25:27:BD:0E
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e4:e9:2c:3b:48:ae:bc:98:1e:33:84:f1:80:2f:ed:5d:47:
de:1f:a8:6d:e6:0c:bf:57:1e:7f:eb:00:30:f9:8d:5f:36:3e:
5b:28:97:bd:05:1c:99:5a:e8:0e:79:27:f2:73:1e:36:ec:5a:
41:4b:4c:4f:06:8c:2a:80:8d:8f:d3:37:21:77:9f:57:f6:38:
1a:e9:19:2a:6b:c4:94:01:58:37:91:94:31:79:5a:92:7a:37:
c8:24:f1:42:29:b4:23:10:22:f8:01:a6:e8:7b:82:fd:f1:f0:
c4:20:ec:d2:52:3f:df:00:e0:8a:b0:76:4e:99:5d:d1:40:de:
9e:73:c2:a8:38:5a:84:81:7a:7b:ee:76:2b:7a:8a:ff:9a:bb:
86:69:97:c6:b1:2f:42:7a:48:b1:ae:79:79:4d:c5:2a:be:b4:
5e:e8:c2:4f:91:2e:6c:01:93:3c:19:50:06:d5:1c:f6:d2:a9:
74:d7:0e:e7:aa:64:9e:13:74:98:c0:3f:68:d3:7a:e2:0d:1c:
a3:90:11:eb:68:2f:a9:1a:1e:37:50:65:52:bb:03:7c:f7:83:
ea:61:a7:5f:11:90:ac:72:fc:e4:30:8a:41:7b:d3:f8:9b:ef:
9f:24:c9:58:cb:aa:0f:af:1b:fd:7c:4f:ee:11:a9:11:7c:0e:
47:3a:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:41 2025 by rpki-client