Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: kxcq2QBWDnrcRkEI5GF2guNRZ+pcLn5L5oPLVQWClhU=
Subject key identifier: 01:A4:EF:51:A1:4C:26:48:09:7B:FF:C3:97:CE:70:89:3A:B6:ED:62
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019A5150EE4689672FB9F0318CDBD4E4112C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0DA3
Signing time: Wed 05 Nov 2025 00:00:49 +0000
Manifest this update: Wed 05 Nov 2025 00:00:49 +0000
Manifest next update: Thu 06 Nov 2025 00:00:49 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: yZ2lgUK3S2nY9RhGYN6Y8psIZY9t0aTGnByFzBK53UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ee:46:89:67:2f:b9:f0:31:8c:db:d4:e4:11:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Nov 5 00:00:49 2025 GMT
Not After : Nov 6 00:00:49 2025 GMT
Subject: CN=01a4ef51a14c2648097bffc397ce70893ab6ed62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:b9:e8:b5:5b:b0:dd:ec:d8:f4:64:35:d1:
6e:6d:ee:43:96:f9:e0:9a:c0:fc:39:d7:d5:0f:ac:
a2:1a:8c:74:08:11:01:04:35:b9:41:f5:4a:04:5d:
6c:73:c1:5c:58:3e:b9:f0:2a:9d:11:6b:da:06:d1:
e4:bc:bb:23:1f:29:2c:9e:4e:ad:55:f1:da:f3:c1:
14:9d:a4:7c:5c:31:1f:77:3e:f0:c1:ab:12:4c:a1:
12:af:5b:1b:c6:0e:cc:f9:93:a0:c6:1e:7b:5c:85:
66:b6:38:21:91:07:4c:02:9e:dc:7d:db:f4:9b:6c:
12:a2:5a:f9:ef:22:93:6c:ee:26:62:16:5b:84:7a:
73:36:aa:a9:40:dd:97:8c:d3:5b:96:1b:49:41:16:
db:40:b2:61:c2:ad:3b:1d:5b:48:07:27:02:89:b0:
1d:f5:c6:0d:ec:cc:ae:71:4e:d7:e5:07:0c:18:d8:
96:65:a1:ae:fb:17:39:73:06:6b:34:d7:c6:56:94:
03:d1:61:3c:31:de:b0:20:1a:aa:61:bc:3e:ca:c3:
eb:7b:79:c7:f3:9c:59:75:98:fe:73:76:cd:10:1b:
22:49:7a:ad:c8:e2:30:c4:48:a8:4f:ab:0e:5b:1b:
da:c4:b3:8b:4f:87:7f:96:73:34:2a:49:a3:1e:bf:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A4:EF:51:A1:4C:26:48:09:7B:FF:C3:97:CE:70:89:3A:B6:ED:62
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d6:24:95:58:98:bf:2e:64:06:05:b7:90:44:69:50:4f:c7:
6a:62:7e:3f:a7:b0:d1:49:35:f6:bf:d2:ea:8a:dd:09:c5:4a:
32:30:12:04:d7:1e:f7:9c:07:cf:32:56:62:01:0e:c5:f4:c4:
08:f6:3f:82:4a:73:fc:3d:8e:a6:d2:31:46:7b:4e:5c:99:78:
03:cf:d8:32:19:a3:ed:fc:94:00:51:32:fd:6d:4b:23:7a:79:
9a:b9:43:af:d3:27:c0:4a:e0:2d:25:a5:ac:68:c7:e9:8b:01:
45:5f:fb:f2:7d:f6:b4:f9:31:3e:0f:ee:38:d3:48:ac:8b:33:
88:fa:b9:18:04:04:db:b3:6a:1b:af:08:da:2b:93:a9:8f:f9:
f8:ec:3e:31:19:d1:cd:17:2b:44:5f:30:be:f3:3a:91:fe:24:
76:6c:07:0d:37:a1:d4:4e:51:c9:b7:aa:2e:67:91:9e:f4:b2:
c6:01:c5:44:be:0f:9e:ea:d9:81:3d:d7:4e:14:0b:13:ef:ff:
5c:3a:8d:cd:7d:3a:b2:e7:bf:97:8b:36:86:8c:dc:1d:72:86:
39:e7:42:a4:02:05:98:9d:fb:1e:d0:60:81:ec:93:75:a4:e6:
bd:fa:0f:05:c2:c7:0e:08:19:97:e1:70:ce:7d:1e:5d:7d:50:
60:ee:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:12:42 2025 by rpki-client