Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: cSkimeQgln8+3yv9SgLr6Wvph89DRDOPX2Mcq54c6vQ=
Subject key identifier: 79:63:3B:A7:79:EC:B8:D3:48:4D:82:49:52:65:AD:F1:6F:A1:12:DF
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 019A4D74451852FFAA869EDA4204344B6598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 1569
Signing time: Tue 04 Nov 2025 06:00:56 +0000
Manifest this update: Tue 04 Nov 2025 06:00:56 +0000
Manifest next update: Wed 05 Nov 2025 06:00:56 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: vObbjgT3r/+vQO5/ca16jCZvq5Dx1kl0LaDZ7+p9Ib0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:45:18:52:ff:aa:86:9e:da:42:04:34:4b:65:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Nov 4 06:00:56 2025 GMT
Not After : Nov 5 06:00:56 2025 GMT
Subject: CN=79633ba779ecb8d3484d82495265adf16fa112df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:8e:13:c5:22:02:c5:cb:1f:1b:3c:75:cb:
e7:8a:85:29:4d:7b:e9:02:85:50:27:60:7d:20:c5:
84:31:e5:7e:18:42:a9:33:ee:88:3f:5d:1d:db:fe:
e0:12:70:8c:76:12:48:3b:83:20:4f:74:b2:76:a3:
25:d3:1a:47:9d:c9:08:22:d7:f5:e6:b7:c8:83:9e:
88:47:21:86:ef:fd:25:54:04:a4:4e:6a:a5:a6:ce:
4a:67:1a:8b:4d:3c:d1:53:a4:63:df:6d:ea:2b:1a:
84:64:e3:92:f3:3c:bd:0d:24:8e:5e:a3:e8:80:11:
3a:df:1e:a6:ae:a9:4c:80:2d:cb:df:b8:1a:36:42:
15:69:2f:8a:92:2d:7f:87:8f:7e:61:bd:ff:da:c6:
23:a9:cc:62:9b:1d:c8:66:d9:b3:f0:c0:87:51:7e:
81:f8:8d:52:0c:b4:dd:8b:a4:d3:da:be:45:65:e4:
f1:6e:6f:11:b0:82:2b:20:b8:c2:d6:92:fb:4b:1d:
e6:ba:e5:98:4f:7f:fc:99:4a:18:57:71:65:48:63:
13:1f:e2:52:e3:13:9e:b2:0b:85:48:bb:ce:38:75:
63:97:7d:47:dd:ce:d9:39:f0:7e:2c:93:07:1e:be:
f8:91:95:4b:3e:ce:de:26:76:ea:5e:73:04:90:c7:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:63:3B:A7:79:EC:B8:D3:48:4D:82:49:52:65:AD:F1:6F:A1:12:DF
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cd:17:7c:ff:44:73:b9:8d:10:c8:bc:0a:d4:1d:db:3a:71:
97:d4:03:1c:70:c0:57:8d:7d:67:87:08:c7:9a:6a:50:5a:2b:
45:b4:a7:82:ee:8c:93:39:79:ac:52:87:69:e6:b2:65:95:cc:
ca:e8:7d:af:bc:5c:70:76:d9:d9:5a:5b:61:2f:a4:fb:47:d0:
b7:03:20:0d:b8:46:81:f7:3f:b5:17:61:d3:e1:de:65:57:56:
c1:44:f2:ed:7c:96:32:d1:69:ad:9d:21:19:15:3b:75:57:98:
8e:60:76:30:4c:d7:42:c0:21:d1:4a:9d:2e:1f:45:77:9f:50:
d2:69:61:51:11:da:b0:88:b4:a4:24:1c:87:43:bf:d1:df:d3:
56:c5:14:59:60:28:e6:e4:ba:a1:e4:ed:8b:97:93:03:29:61:
36:5a:a3:b6:3f:8a:f1:90:74:0b:95:18:1f:92:8d:c0:ce:bd:
da:f7:2e:55:7d:32:5e:5d:c0:16:a7:ba:a5:1b:c8:d4:85:2c:
05:a5:67:6f:8d:2f:3d:f9:79:48:3e:d8:a3:ca:22:13:e6:ea:
d5:93:8b:db:85:f1:cf:56:1f:8f:98:53:d3:69:b2:f0:a7:e7:
86:c6:d7:a9:3b:02:68:b0:6a:5d:d2:aa:39:46:cd:4a:ef:1e:
44:6a:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:25 2025 by rpki-client