Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: PGr2+H6TcKDTDCJcokThqlaD5LCQbGV/v7wMmEdp0xo=
Subject key identifier: 6F:09:CC:F1:8C:E4:94:D0:B9:23:FA:87:9D:3D:DB:2E:0E:5F:05:7E
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 019A4DE18EFD55946D70655D4A0152ACEFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 141C
Signing time: Tue 04 Nov 2025 08:00:18 +0000
Manifest this update: Tue 04 Nov 2025 08:00:18 +0000
Manifest next update: Wed 05 Nov 2025 08:00:18 +0000
Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: x2jP7gWL8g5v2wosKUTkulRm/+0ITCaGTmB0UXYjJGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8e:fd:55:94:6d:70:65:5d:4a:01:52:ac:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Nov 4 08:00:18 2025 GMT
Not After : Nov 5 08:00:18 2025 GMT
Subject: CN=6f09ccf18ce494d0b923fa879d3ddb2e0e5f057e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:62:72:bb:56:60:9c:0d:9e:d5:d9:9b:2d:
6f:1e:7f:56:74:78:67:21:20:4c:92:bb:17:11:00:
93:91:87:ad:56:33:0f:e4:86:72:5d:17:25:9f:02:
97:c7:4f:d2:d5:ae:97:8e:3d:7c:25:42:7e:ef:a9:
d3:8d:e3:42:54:1a:27:2b:db:e4:87:b4:c1:6f:84:
0f:d4:80:6b:68:49:fa:a3:de:17:33:3f:ba:de:78:
23:ba:94:5d:a1:ad:24:52:7e:2d:e7:63:9c:e5:c3:
b8:6f:f7:bb:06:80:ab:1c:3a:4a:9e:07:5b:48:05:
2a:69:53:af:94:43:2a:23:9c:b4:9b:29:bb:c8:cf:
39:16:c6:0c:84:23:46:1b:f1:36:ba:98:c1:3e:de:
33:01:90:34:db:30:78:e0:fe:15:bb:58:47:34:42:
79:c0:fb:ee:49:a9:6f:4d:60:88:bb:6f:3c:e3:8f:
75:90:51:ad:1f:62:86:12:79:00:81:3a:a6:86:aa:
a5:46:63:79:1f:4d:ef:a1:2f:39:ec:c1:6b:99:7b:
16:e5:7d:97:25:e3:5f:d0:8c:97:04:85:f9:ec:0c:
f4:3a:ea:0f:39:03:32:86:f5:81:50:ae:2c:b5:4e:
10:b7:b6:e8:3b:8f:ac:67:1e:56:b6:d0:6a:0e:13:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:09:CC:F1:8C:E4:94:D0:B9:23:FA:87:9D:3D:DB:2E:0E:5F:05:7E
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cf:17:5d:5a:79:89:8d:cd:c0:a6:10:6a:4a:c0:ac:b6:02:
e9:0b:a2:b0:5f:87:45:1c:1e:bf:96:87:73:ae:d1:3c:e7:ca:
b6:00:18:9b:1c:20:bc:46:53:9d:69:0d:7b:85:ab:57:63:3b:
e5:56:72:34:1e:6d:d5:15:70:ed:c2:fa:32:96:65:aa:a6:fc:
98:33:58:8c:8b:0c:ae:d6:f3:8b:c1:93:76:bd:4f:de:e9:70:
bc:86:d4:2d:cc:3f:c8:91:19:89:70:0e:a1:3f:fd:61:28:ab:
de:0e:9f:fb:14:17:78:63:11:6e:16:05:08:0e:25:80:7d:23:
24:7d:88:7b:14:5c:d9:79:6c:2e:1b:f3:6f:d0:e9:97:f7:0c:
59:dc:4d:14:8c:4e:83:17:4d:aa:bf:d3:58:b6:43:cf:4f:6e:
79:3d:8c:7f:a3:e4:53:d2:e4:50:49:ce:5a:ad:ed:70:22:c1:
47:8c:46:ce:61:5e:52:ce:9a:aa:23:f6:c2:f4:5d:06:64:25:
0a:7f:c2:23:c3:f1:85:e1:4a:e2:c8:d7:21:58:f0:1e:3c:ba:
54:a8:ff:e0:12:31:1a:f4:a1:06:1f:52:50:91:7f:b1:1c:3d:
76:7f:e6:48:5f:26:c3:ba:c5:db:ce:f0:4e:71:8e:50:5b:f3:
42:10:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:24 2025 by rpki-client