Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: afhjb8DP90yTgoq2/BM3RYfd1ceAzE+9LhZE3ADfzBw=
Subject key identifier: AD:EC:34:D1:DE:26:BD:58:91:6F:C4:63:3E:D0:DD:E8:AF:02:64:1F
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 019A4F625AD438F43102A624C3B6B733D146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 102A
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: xdPKa+9o3YuduCsxHWOrDARr5uvS/MIrj+Rk7Q+SGR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5a:d4:38:f4:31:02:a6:24:c3:b6:b7:33:d1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=adec34d1de26bd58916fc4633ed0dde8af02641f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d5:cd:2d:28:3c:a3:48:ab:de:f1:ae:e9:5d:
0a:80:8c:a4:96:c6:9b:5f:f2:98:c9:ce:bf:ce:bc:
e0:f4:bc:ad:64:e5:43:0c:6d:5f:ed:78:71:f0:c9:
48:76:27:07:4b:bd:07:e7:14:d0:1f:8e:0e:f9:e3:
c2:35:74:fd:64:d0:c1:79:34:63:c5:d9:e5:52:81:
1e:f0:dd:63:77:1c:5b:b8:78:94:4d:17:6b:88:06:
d6:87:e7:8c:1c:2d:15:54:ab:b4:84:54:6f:27:d9:
74:62:9d:50:83:6c:2c:33:91:9c:e8:b4:1b:8f:7e:
a0:52:b5:da:ac:20:9a:20:48:39:fd:23:bb:76:f9:
1f:6e:6d:36:0e:b7:08:32:2b:4c:42:97:2e:b4:4d:
78:f8:c5:70:28:c3:02:a2:25:2b:5b:5b:11:0f:db:
da:aa:c8:c8:d3:b8:f2:b6:56:86:40:e8:c8:38:c8:
4d:11:31:c7:0d:49:32:f2:35:4b:d6:f9:2f:cd:a3:
45:f8:50:ba:ae:59:68:44:d6:25:46:08:ea:46:eb:
65:4a:8e:91:8c:4b:10:e9:9a:80:33:a0:fd:0e:c7:
f7:60:48:8f:93:b6:e6:de:2e:f3:7d:f3:e5:14:8f:
fd:e3:fc:af:d0:14:6b:a7:ab:28:05:e4:ca:31:0d:
e5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EC:34:D1:DE:26:BD:58:91:6F:C4:63:3E:D0:DD:E8:AF:02:64:1F
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ce:d3:6f:2b:1e:0f:d2:04:5d:3f:17:63:26:5b:1a:91:44:
26:11:c5:ba:f1:d9:d8:bc:e2:be:2e:a5:da:9e:00:0b:50:79:
8a:91:69:24:14:5a:78:c1:43:e6:e6:6c:b4:ba:78:01:92:8f:
a0:08:a4:8c:48:0e:5f:65:90:9f:7f:2a:38:de:8d:9d:2a:2b:
fa:20:84:d9:73:06:25:18:79:82:96:14:e8:d3:d2:13:17:a8:
05:a5:55:a9:4c:e6:91:d3:cb:d9:10:92:70:6f:68:24:3e:31:
54:c4:89:11:58:78:f0:1d:d9:a9:47:86:97:5d:10:81:c1:63:
16:25:fb:13:ec:c8:6c:73:3d:b7:b6:95:b9:7a:7c:1a:45:a7:
f7:eb:31:5e:b1:46:b0:ff:b8:e9:3c:bc:b8:7e:84:5b:e2:75:
1e:67:a0:ed:5a:24:a0:26:03:a1:5f:03:c1:8f:b4:d4:9c:16:
ab:3a:7f:c9:09:1e:f4:9b:fa:23:7a:5a:43:3b:84:37:b3:f3:
1d:c1:e5:88:87:9b:52:f2:13:43:d4:68:7f:80:0f:ac:4e:ed:
0d:01:46:fc:7f:96:d0:17:dd:9b:11:3f:41:e4:48:9a:c2:0e:
f5:75:af:e0:44:65:01:47:e5:79:a8:b2:42:b3:e5:c0:93:2a:
4c:21:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:26 2025 by rpki-client