Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: zlqtJOFL6eWvR/HH3tArDV9jHaEW4RrNWuq0ld+DGN0=
Subject key identifier: 22:2D:CF:63:D7:4A:63:16:4D:1D:CB:55:A0:44:25:C2:09:AD:D2:13
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 019A4E4FFF4A16AE6DCC60AE460B82CA0873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 11EA
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: /CRVotW1m3kUoR6CEKKpDygBDeBwAmu7CSB56gv9708=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ff:4a:16:ae:6d:cc:60:ae:46:0b:82:ca:08:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=222dcf63d74a63164d1dcb55a04425c209add213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:88:27:9e:0d:10:0f:49:f9:06:b6:ff:89:
de:48:ee:92:a5:df:3b:67:8f:6c:b3:cd:f4:ed:24:
c7:4f:7f:01:a4:e1:10:3f:3f:23:18:cb:a4:1e:0c:
a0:04:d6:19:3a:26:3c:86:34:26:e9:a9:1d:3f:0a:
d4:af:69:b6:16:a4:7b:0e:b5:ce:40:ae:17:f4:8d:
f2:38:33:8d:6a:f2:6a:44:6d:09:83:ce:62:6f:3d:
a4:7e:3a:b3:bc:32:52:1a:d9:61:f3:56:e6:45:53:
65:fd:b2:0f:c0:03:df:09:12:d9:c2:de:7d:cb:b4:
ea:4b:2b:9b:9c:d4:7f:f1:93:87:fe:6a:06:a2:a9:
3f:26:8f:7c:43:9a:92:c4:1e:15:c6:b5:40:14:39:
1e:17:47:35:29:59:17:a1:d0:c0:ab:25:df:fd:23:
73:07:f4:be:a1:84:61:58:db:0f:b2:33:5c:79:ed:
9c:4a:01:c3:1a:62:a8:6c:73:98:b1:37:e5:9d:2f:
1a:2b:f7:9b:6a:d2:39:bd:2b:1e:4d:ac:1c:80:21:
3a:68:52:ad:08:3a:f5:22:47:43:03:4d:23:82:59:
8e:bf:be:bb:ea:4a:c2:f8:0e:49:bf:8b:84:1f:fd:
99:fe:82:2d:f3:c6:df:d6:85:0a:84:ae:0b:24:bd:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2D:CF:63:D7:4A:63:16:4D:1D:CB:55:A0:44:25:C2:09:AD:D2:13
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e1:5d:8b:ec:01:72:af:33:00:8f:cf:0c:2d:16:89:87:4b:
b4:0b:d7:fd:55:1c:07:11:78:3a:83:49:d3:9f:de:d7:ef:b7:
66:f4:05:f2:8b:e9:32:bf:f4:f5:33:72:af:c9:4b:89:16:88:
98:75:8b:9c:a8:0e:91:ba:bd:6d:76:10:39:24:47:8c:31:45:
5f:ba:10:2e:26:fd:07:fc:f6:8f:19:d2:b8:c0:8f:7c:b7:be:
4e:ee:19:06:fe:17:23:78:0c:19:d9:90:ec:4e:be:4d:04:53:
d6:8c:33:d3:8a:73:15:d1:6b:69:a9:60:4d:19:3e:a0:c7:0c:
30:14:f3:c1:85:de:71:f0:00:ad:41:c6:20:b6:f3:e6:a5:36:
04:e4:62:5c:01:6b:9d:19:91:cf:79:73:df:a2:83:dd:56:b5:
fa:2b:cb:2b:e5:b9:a6:33:78:ff:43:e0:86:05:ac:30:ff:02:
1c:4b:39:13:1e:44:fb:9b:f0:9b:17:ff:b6:af:59:76:e5:fd:
6d:cf:59:1e:e5:f2:31:e4:da:3b:2a:c3:a4:64:7d:49:43:7f:
12:1b:a5:72:b1:e9:4a:ec:95:6b:d4:8f:93:33:1b:8b:a1:27:
d0:64:92:94:00:f4:a6:4c:97:46:1a:b5:b4:b1:8c:46:17:a4:
02:ed:96:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:59 2025 by rpki-client