Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: /Bm3a0zNuvO6pNFoMwhrn7Q/s8IC9DKgKWBEtocfvIo=
Subject key identifier: E0:89:16:55:1C:F8:50:49:0C:01:7C:D9:48:5C:44:D5:33:06:EA:52
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 019A52D25919AD38D7D75FDF4FB939C7D5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 08E2
Signing time: Wed 05 Nov 2025 07:01:48 +0000
Manifest this update: Wed 05 Nov 2025 07:01:48 +0000
Manifest next update: Thu 06 Nov 2025 07:01:48 +0000
Files and hashes: 1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: KYhI5rFhXFZH5BaM8HLMrL2cxALJN2rUwwwqdiu21ZA=)
2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:59:19:ad:38:d7:d7:5f:df:4f:b9:39:c7:d5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Nov 5 07:01:48 2025 GMT
Not After : Nov 6 07:01:48 2025 GMT
Subject: CN=e08916551cf850490c017cd9485c44d53306ea52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:cc:44:50:74:d9:d9:14:97:d5:4a:2c:75:
8c:34:92:a6:4e:b0:a5:52:8f:d6:a9:18:b5:94:a4:
09:66:bb:34:b3:6f:53:30:f5:7a:2e:0b:59:96:7e:
ca:39:0b:ed:0b:b7:e0:26:64:45:4f:45:75:a3:5d:
ac:8d:1c:69:6f:57:80:16:92:27:cf:8c:05:64:dd:
c6:2b:d9:df:20:de:99:54:7b:a8:92:e5:db:9e:8a:
18:1e:61:cc:0c:af:62:56:f9:b7:9d:aa:89:90:5c:
58:e0:36:b3:3a:9e:a4:a5:43:69:cd:72:29:0f:8b:
0f:86:e4:81:56:f8:7c:3d:c0:27:ff:9e:6e:79:da:
a0:e6:b1:17:5e:c0:ec:38:92:a9:2f:ea:44:af:bf:
7a:07:ec:d8:1d:f0:79:d4:40:33:76:d3:66:b7:dd:
da:23:21:79:ce:79:7d:62:13:4e:5a:4e:55:c7:de:
a2:9d:8d:43:f9:c9:58:4c:0d:70:fc:2d:97:b1:de:
8a:c0:15:96:bd:d9:9d:49:c4:ed:c2:0e:10:5f:fc:
18:91:11:ec:fa:e5:c2:9c:70:d1:37:e3:47:73:44:
39:b9:cf:ab:46:83:36:f6:9e:79:b7:dd:d0:7c:ff:
c6:d2:35:ed:7d:d5:37:6a:41:3d:dc:9c:1b:96:4d:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:89:16:55:1C:F8:50:49:0C:01:7C:D9:48:5C:44:D5:33:06:EA:52
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:68:7a:c0:23:e2:c5:09:59:48:53:cb:de:be:68:81:15:da:
5a:43:0a:0c:76:4d:6b:7d:6b:10:3a:cd:45:a7:e4:ca:d8:74:
c8:b7:5c:ea:41:e0:ee:c5:8b:65:e0:c5:e1:99:c4:df:99:f2:
96:bd:0a:2e:8b:72:ff:00:7f:d8:db:79:45:86:1b:68:d8:71:
8b:3b:6b:21:d2:78:df:02:6b:c6:86:93:65:76:81:66:41:c0:
b7:1b:c6:cb:22:3e:c7:35:b2:2f:51:fa:92:4a:5a:bb:a4:36:
d9:80:2b:2c:15:0e:47:c7:b0:f8:a8:18:f7:88:f3:7d:c1:30:
79:23:bd:3e:95:3b:2e:54:1a:0f:25:13:12:b5:4e:94:70:be:
47:fa:03:c9:ee:35:f6:dd:a4:e7:27:c4:e8:39:71:50:44:31:
a1:c8:33:42:b0:1f:1c:41:ab:d3:5c:bd:a0:df:0b:f7:26:8a:
b1:c1:83:ad:ab:1e:9d:f2:6d:b3:bd:9a:b0:29:c7:92:5a:b6:
59:eb:76:d8:cc:e6:5a:51:2b:a8:f0:cc:98:9f:ec:a9:66:86:
0d:d5:54:42:69:b7:ce:84:af:0a:26:0a:87:f7:e7:23:1d:eb:
a7:b7:d3:14:f0:c7:38:f4:2b:5e:03:a8:d4:96:9a:c7:21:48:
0b:9a:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:52 2025 by rpki-client