Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: 6nyofjYDpm6SQVLgMESeQr0c87B8MSDa6QNASu9RsC4=
Subject key identifier: D2:FD:F3:72:0F:38:F1:6E:D4:DE:AF:46:E5:AD:C3:57:34:5F:DA:86
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 019A52639B863DC3147E0FDEAAE501D0A126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 0565
Signing time: Wed 05 Nov 2025 05:00:50 +0000
Manifest this update: Wed 05 Nov 2025 05:00:50 +0000
Manifest next update: Thu 06 Nov 2025 05:00:50 +0000
Files and hashes: 1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: o2mRPyAHx4suPt0JodemelwZ5ekzZRDbPDtT/zPrqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:9b:86:3d:c3:14:7e:0f:de:aa:e5:01:d0:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Nov 5 05:00:50 2025 GMT
Not After : Nov 6 05:00:50 2025 GMT
Subject: CN=d2fdf3720f38f16ed4deaf46e5adc357345fda86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:b4:82:08:ab:c9:13:70:4b:08:7d:cc:3b:
ce:04:e8:59:cb:dd:2b:cc:54:49:ea:55:e5:ab:cb:
b7:d9:57:66:ae:18:29:1a:8d:e5:4b:27:71:f3:5d:
e2:01:d2:95:05:0d:a4:af:de:14:07:e8:ef:7e:17:
09:fd:78:89:5f:54:66:7e:41:e7:60:f7:83:d7:52:
87:e9:a1:64:68:5f:48:9f:95:96:c2:9a:b1:81:93:
86:91:a0:db:c7:09:b1:ac:6b:27:36:ff:c2:d8:53:
40:fb:4e:f6:66:16:a9:d0:c7:26:b6:ca:e0:4e:b3:
d7:51:1f:c9:63:f4:b5:c0:ac:c3:87:be:ba:0d:14:
97:93:28:68:44:39:63:3b:2c:54:7c:88:eb:77:64:
8a:cf:03:e4:03:68:d1:12:1f:e3:8f:a1:e9:70:43:
e7:7c:53:0a:52:b9:05:37:7a:51:17:ee:ec:62:ac:
e8:85:29:bb:8d:36:5a:21:61:14:24:ab:7e:d9:77:
2a:20:d5:bd:11:7a:2d:00:ea:cf:53:97:53:99:82:
f5:b1:96:8f:d1:b2:8e:1b:37:93:53:1a:ad:a5:78:
cb:3b:0b:fa:f4:cf:1b:f4:30:53:41:30:c2:fb:48:
12:3e:53:55:b0:69:cd:08:b2:66:14:c6:7f:0c:a4:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FD:F3:72:0F:38:F1:6E:D4:DE:AF:46:E5:AD:C3:57:34:5F:DA:86
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:f1:f2:d8:7d:38:32:cd:5f:6c:d0:7e:d2:38:bc:4d:35:
d8:70:d8:37:aa:4e:76:2d:40:b2:68:cc:b0:ce:c9:17:df:29:
24:3b:e8:fa:e2:e6:07:d6:3d:56:39:d7:ae:c2:0d:af:2c:97:
4e:89:49:a0:d5:6e:e6:be:c6:c9:2e:e3:50:24:08:ee:8a:44:
b4:39:cc:24:d6:c8:f8:37:0a:6d:38:57:77:35:4b:68:0e:4f:
61:cf:73:cc:1f:80:52:dd:ab:f3:39:5f:94:93:b2:43:22:fb:
5f:2d:e6:11:44:03:a2:40:12:88:5f:f6:f9:46:2f:99:9a:1a:
0b:f5:8b:67:84:f6:42:65:b8:22:8d:92:35:80:31:1e:4c:af:
74:bf:0b:b7:eb:ac:b0:7e:a4:76:2c:21:2a:d7:b6:06:b6:3c:
3a:8c:b8:4f:51:45:6e:17:09:01:42:13:26:a5:11:dc:1d:ce:
fb:b9:be:6b:ed:d0:c9:9b:1a:9b:2c:e6:43:31:58:20:91:e4:
03:05:e2:78:03:82:0a:d6:1e:3b:c5:49:46:0f:af:ec:b7:33:
28:ae:9e:d7:ea:44:7d:75:c8:d0:6d:b3:af:cd:b0:58:84:1d:
00:ca:16:56:28:cf:f7:8e:ac:e6:68:6f:a9:11:de:64:60:e4:
92:e8:d4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:18:32 2025 by rpki-client