Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: 912mWEDl3IPLJlO86TpAV+KuMuAIzfytTX5AOWNKqu8=
Subject key identifier: 49:A8:1D:BD:36:2B:46:22:D1:C1:A0:A4:E5:B6:B0:9B:10:9C:FB:BA
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 019A53084DF15DF23FE89F245D5FB6D9009C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: DC
Signing time: Wed 05 Nov 2025 08:00:44 +0000
Manifest this update: Wed 05 Nov 2025 08:00:44 +0000
Manifest next update: Thu 06 Nov 2025 08:00:44 +0000
Files and hashes: 1: 6-EX2htJlHImEHBSvQOybhHaeO0.roa (hash: 1ZsDmzKZ+zRhoeIFPi5/Pw5pQ/dfpTV0ipC/YNmanno=)
2: fl64q3w812YfzXLS36kYEo550Os.roa (hash: FCrMbgS1Qp2Ghje1H1/gJu/F21+3Pg9qcnIqWk+O48U=)
3: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: nyFXDWiDkIAsvVWx4vlUaxY0KAuj4+o14NXdMt8TRkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:4d:f1:5d:f2:3f:e8:9f:24:5d:5f:b6:d9:00:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Nov 5 08:00:44 2025 GMT
Not After : Nov 6 08:00:44 2025 GMT
Subject: CN=49a81dbd362b4622d1c1a0a4e5b6b09b109cfbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:fd:1a:26:00:f1:f4:37:2c:2a:be:3b:cf:
5e:a3:1d:d2:56:99:c8:0c:f9:3c:e1:ef:5c:06:04:
90:c5:2a:33:19:2f:2d:d5:e0:d4:4e:6c:4a:77:1b:
c3:a7:e6:0c:21:6d:c3:5c:32:90:7d:dd:a3:40:c2:
87:ca:a7:46:9c:89:a1:45:2d:58:87:ae:4f:d2:5e:
61:38:97:f2:08:fe:07:c1:2f:7a:fd:c6:91:4b:84:
13:b1:36:ab:1f:0d:1c:c7:3b:f2:c3:b6:c1:b6:34:
fb:8c:ca:c9:64:31:9a:06:21:49:48:7b:13:1d:66:
bc:0c:54:11:73:34:83:03:1b:8f:37:be:5d:39:a2:
04:f0:7d:90:77:63:ea:16:56:9b:df:60:c1:84:3e:
7e:cf:20:9a:bd:59:af:f1:57:ef:f7:77:83:7e:7b:
dd:1f:97:e8:ee:06:c1:1f:8a:6a:54:2e:93:f7:41:
04:9d:c3:54:5b:02:a9:a0:de:05:53:93:59:5c:78:
f2:3c:95:92:7e:cb:f5:0f:2e:5b:63:a5:ef:65:bc:
74:9e:ec:49:ef:fa:30:8b:ea:f6:48:43:ad:06:48:
96:76:c5:fb:dd:0f:f0:69:55:d4:1a:e6:72:a9:fd:
4a:06:9e:e9:e8:1b:7e:02:fb:f3:59:2d:e3:d2:ac:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:1D:BD:36:2B:46:22:D1:C1:A0:A4:E5:B6:B0:9B:10:9C:FB:BA
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:19:84:cf:d9:12:39:1c:01:28:c4:88:89:e1:11:ef:84:ae:
46:a2:6b:01:30:48:14:38:eb:6b:38:7b:fb:37:94:bf:36:8f:
0f:4c:21:b7:f9:ff:bd:0b:a0:66:c3:21:97:dd:87:d3:44:86:
27:52:08:44:77:18:62:5b:ec:3a:a0:44:88:94:f3:97:2d:aa:
dc:62:6c:ef:b5:33:9d:09:d9:46:12:3c:7e:58:c3:68:e9:2a:
0b:4c:54:d8:53:a5:84:6d:5b:c3:64:80:00:fe:27:a6:0d:1a:
fc:f9:d1:7f:57:2f:3d:57:b4:f2:6f:10:25:38:ce:43:26:c0:
2f:e7:8b:cc:90:fb:cd:ff:70:02:0a:6d:5a:f8:19:6c:85:93:
dd:83:59:3d:a3:aa:59:f6:a9:0e:7d:fd:c0:f8:c2:20:ff:01:
34:68:ff:1e:fc:00:96:e4:66:83:1d:4c:d9:c8:8d:75:75:20:
66:5d:d4:c4:e3:21:b0:a2:b4:2c:84:f0:4f:c2:ab:54:0d:90:
04:e1:4e:9a:b7:f2:27:21:28:bd:5f:c4:e0:42:f8:a1:d2:be:
2b:d4:ee:8d:16:79:3e:a3:f1:f0:c4:c2:0f:db:3c:ac:2f:0c:
7a:3e:06:29:ab:06:bc:57:e4:64:dd:bb:36:5d:fc:4e:3d:31:
b7:9b:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:41:53 2025 by rpki-client