Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: CtMhd5Mti1pBK2qk1JvZJc86P8HNRB4MIf8Ot3pxiC0=
Subject key identifier: 6A:F2:D9:B0:D8:90:38:B2:2E:3F:BE:4F:C3:26:CD:56:DD:FA:C4:D1
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019A54F67EA8E09E5B77A174AE7F6F4A75DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: 0112
Signing time: Wed 05 Nov 2025 17:00:31 +0000
Manifest this update: Wed 05 Nov 2025 17:00:31 +0000
Manifest next update: Thu 06 Nov 2025 17:00:31 +0000
Files and hashes: 1: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (hash: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=)
2: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (hash: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=)
3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: vmo/wX51/kpd+tvffwLMwywYrCzmNymU4TAMHIKa+1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:7e:a8:e0:9e:5b:77:a1:74:ae:7f:6f:4a:75:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Nov 5 17:00:31 2025 GMT
Not After : Nov 6 17:00:31 2025 GMT
Subject: CN=6af2d9b0d89038b22e3fbe4fc326cd56ddfac4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:64:98:39:47:a4:95:78:c9:31:73:8f:d2:
84:10:f8:f8:4a:b7:c2:df:6d:5d:7d:13:b0:76:88:
33:e2:26:0b:94:b5:92:34:a7:2f:1c:bd:89:69:02:
d4:de:e5:6f:e7:62:6d:6b:8c:8f:94:9f:f9:e6:c3:
6e:48:54:db:60:0f:9e:a4:7c:4f:41:41:b3:66:5c:
f5:56:2b:83:47:d1:38:4c:b1:2f:7f:fe:70:cf:61:
53:12:9e:f5:d8:fe:e9:bb:36:54:4c:55:46:94:b8:
c6:b2:61:41:2e:b9:8b:b8:0b:36:25:90:10:08:35:
b8:ab:c8:be:5a:cb:4b:71:08:1d:b7:26:f0:00:fc:
cb:77:81:09:58:28:54:94:21:14:04:3e:77:1f:38:
05:31:13:54:d3:de:f3:d5:52:1e:c9:d6:63:f1:43:
16:07:24:40:d2:20:c6:8b:7d:b6:52:39:3b:4c:27:
b3:ce:37:4e:51:9a:aa:dd:cb:b6:bc:4e:51:f4:77:
f9:45:94:a8:24:cd:29:8c:b6:b9:e0:53:e3:bc:dd:
95:15:e4:dc:cf:11:9e:10:12:96:6e:84:4a:73:3d:
dc:ae:91:bf:06:29:fe:87:40:34:1c:ad:ce:b1:14:
58:42:16:42:cb:70:b0:63:a8:18:2a:5a:7e:30:d1:
76:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:D9:B0:D8:90:38:B2:2E:3F:BE:4F:C3:26:CD:56:DD:FA:C4:D1
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a8:11:fa:67:fc:75:0f:7b:6c:f3:67:60:91:ab:96:c0:92:
ec:d5:10:40:90:8c:8a:4c:0b:33:b3:87:dc:d8:c9:61:39:1f:
9d:03:fb:6d:34:c8:c6:5d:57:07:38:ec:16:88:b4:0e:cd:f9:
93:6d:08:5c:e4:ac:6d:1c:d0:78:25:de:b7:5d:65:69:dd:b5:
39:99:77:68:4a:de:fd:67:7a:71:6f:68:40:17:ce:d7:95:89:
ef:93:8b:54:44:9e:c3:84:b8:d1:68:b3:c6:a8:58:c2:d1:2a:
c5:ee:a1:a7:de:5f:e6:7f:2f:89:fb:37:49:aa:c7:18:26:60:
47:4d:e6:e9:5c:a1:5e:fa:6e:b3:40:d8:ea:a5:ba:f3:19:5c:
86:fe:05:1c:a5:79:89:ca:f6:64:d7:de:3e:60:fb:f3:36:83:
71:45:1a:fe:58:f3:d8:b9:a0:69:98:e5:ff:99:22:f4:f0:bb:
13:4c:58:58:c2:9b:ea:5a:3b:bc:2e:46:c7:dd:ae:c4:da:e6:
6d:fc:dd:f8:6e:84:8d:53:21:17:c5:2c:68:88:82:33:ac:45:
01:7f:31:5f:bb:57:27:70:91:9f:68:1a:49:72:52:bb:42:9b:
0e:73:12:e3:17:2b:d4:f8:43:c2:eb:a0:75:58:10:be:24:ad:
98:bb:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:59 2025 by rpki-client