Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: fwtLViWilQATEl4oCbRzhlhZdUbQdTWIbpdW8QCUJzs=
Subject key identifier: 7E:8F:CD:4D:58:0E:C0:1F:C6:C9:2D:1B:C6:4A:F2:6A:BB:F1:2D:33
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019A51879CBDF29F22CFB905459661DF1E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 0612
Signing time: Wed 05 Nov 2025 01:00:33 +0000
Manifest this update: Wed 05 Nov 2025 01:00:33 +0000
Manifest next update: Thu 06 Nov 2025 01:00:33 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: _hwoOnSYlfjUaTComm-3hBe2zs0.roa (hash: PBuw/FbCVTJ5hqhxHvWYLj5Cm4bbcUK+XRb8x/VJhJI=)
3: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: 29T5DE1x2EGikrH7M0VQLEMGCpafIVlxYPUpaNakEk0=)
4: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:9c:bd:f2:9f:22:cf:b9:05:45:96:61:df:1e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Nov 5 01:00:33 2025 GMT
Not After : Nov 6 01:00:33 2025 GMT
Subject: CN=7e8fcd4d580ec01fc6c92d1bc64af26abbf12d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:39:43:f6:f2:a1:f6:72:a3:79:c7:27:a4:
78:5d:48:67:8d:7e:a5:4e:6e:f0:19:a5:dd:dc:5d:
b5:14:b7:25:ce:40:12:ff:03:c7:bb:6d:db:8b:fc:
98:df:bb:c6:88:ba:81:89:c0:e3:4d:fb:97:5c:fd:
3c:7b:c1:a2:0e:d6:71:4f:b3:b8:7a:23:9f:ee:bc:
65:cb:fe:cf:38:6a:44:1f:44:78:bd:87:93:df:e9:
c1:e7:f0:17:a1:47:fd:8a:e9:09:a5:a9:f7:24:61:
8d:8d:af:56:a9:e7:b0:a4:aa:7a:ad:a2:aa:c1:1b:
bd:16:67:9a:c3:90:33:5c:b1:68:0c:05:9b:14:f9:
c8:03:87:c8:bc:65:fa:df:d5:1a:97:d6:64:f6:ce:
68:50:78:1b:4d:dc:33:74:4c:9f:ec:49:92:2e:05:
83:23:e8:3e:6a:22:4e:9e:3d:87:eb:d1:7e:1c:28:
e0:a3:b1:96:c0:ae:bd:15:7f:d9:6e:5f:a7:c3:9f:
e3:60:48:99:53:13:b3:c3:53:32:c9:9e:82:a0:28:
f5:60:ff:d0:d7:f3:94:ba:38:d9:81:2b:13:f4:7a:
94:a9:6c:a0:e7:9e:ee:5c:5f:f5:4c:da:1b:f9:ed:
d8:7d:96:27:0e:01:8e:1b:be:4b:44:b6:78:21:fb:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:CD:4D:58:0E:C0:1F:C6:C9:2D:1B:C6:4A:F2:6A:BB:F1:2D:33
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3f:85:53:ab:1f:90:c0:7e:7c:5d:38:8d:88:f3:8c:3a:0b:
25:34:ed:c7:2a:0c:f7:64:e6:5a:f5:7f:98:86:5d:70:ed:b5:
5c:55:80:4c:d2:d6:8b:e8:22:e9:c9:f4:05:1b:43:d8:67:0b:
75:4a:ba:87:6b:18:06:f8:c1:b0:03:df:2c:db:04:96:4a:bf:
3a:7a:95:1c:38:c6:d5:5f:87:5f:2f:c7:86:4c:c2:5b:6f:bf:
2a:5b:c1:92:c6:bf:60:33:5f:eb:1f:3d:c1:f6:38:44:11:eb:
d2:17:9f:1b:fb:28:dc:5b:53:87:cc:4d:e7:96:c2:8c:ae:3e:
06:c4:6c:57:30:6a:1b:29:ab:6d:98:6f:9d:aa:3a:23:63:49:
49:72:a0:dc:3d:f5:86:e7:d5:52:1f:85:0c:50:da:db:84:a4:
0d:56:82:f9:bb:58:e6:a5:d7:76:2f:b1:84:7e:8a:ad:19:fc:
e4:30:73:c8:81:cb:7c:80:3e:5c:9e:b8:16:0c:f0:cd:ff:32:
d6:39:c5:4f:fc:38:59:75:0f:c0:a3:a0:76:a1:5c:bb:a4:89:
14:b1:0c:2c:16:d3:b3:7c:da:c2:30:e9:db:86:d8:47:67:ec:
1e:69:89:3b:e0:67:b2:cb:11:80:3a:d5:77:34:c9:a4:c3:18:
ae:f8:14:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:32 2025 by rpki-client