Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: yvKYEHFy2dsEULs2ERu+cR518ecZ1il25vwPPYD5t04=
Subject key identifier: 52:BE:E3:E4:D5:64:13:83:1C:1C:C7:1D:0F:DD:E2:C8:09:D5:DE:FC
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 0199FC58B21F00C2863704F38E9C1783E81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 076E
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: X7eVY85Sk3coix4AbJ0+fEf+L9ecHbc/TTY05xXEEA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b2:1f:00:c2:86:37:04:f3:8e:9c:17:83:e8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=52bee3e4d56413831c1cc71d0fdde2c809d5defc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:2e:b3:ce:62:83:8f:8a:20:b2:da:96:1d:
4a:ea:26:1c:d6:82:d9:6d:10:84:2a:d2:e3:c3:eb:
f7:8a:2e:52:0b:85:de:ec:fd:03:3c:76:3d:bf:7f:
7b:ef:5a:23:bd:76:46:e1:40:ec:14:f1:da:44:2a:
fc:8f:6f:34:0a:77:19:83:dd:8a:4e:65:b6:fd:da:
3b:e3:27:cc:82:cb:c3:9a:50:27:6a:48:2e:b4:74:
5c:b0:38:32:45:ff:9f:8d:63:f6:d4:ce:69:35:cd:
b4:6a:19:e7:b4:50:6f:38:ec:19:f7:ce:54:d9:e4:
3e:3c:72:3c:7d:a2:7d:9f:ba:d4:b6:85:fb:6c:51:
73:1f:00:96:a9:f5:e2:16:fd:99:5e:65:03:fb:4e:
6c:d7:7e:d1:40:43:2b:73:e4:cb:97:b9:cf:8e:79:
e8:9d:cc:d5:c2:a8:9a:95:4c:65:f1:91:66:62:94:
57:66:a5:df:39:a1:40:7b:a6:4a:83:b6:c5:f2:63:
d1:1e:61:a6:04:f5:6c:24:8b:db:76:7d:3d:91:72:
04:41:af:f7:ae:ae:3f:d8:28:15:d9:aa:65:2d:24:
5f:2e:c8:ad:57:c1:91:21:84:67:96:50:12:75:e6:
40:bc:10:92:fd:e1:8b:e6:9e:a5:c2:4c:10:12:fd:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BE:E3:E4:D5:64:13:83:1C:1C:C7:1D:0F:DD:E2:C8:09:D5:DE:FC
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5a:00:5a:40:b8:24:bb:00:e9:ff:c2:0a:e9:f6:7a:be:a9:
cb:96:aa:fc:eb:a2:fc:af:ad:21:2c:e4:66:1f:0a:b4:35:97:
ad:09:f0:6d:a5:ab:86:22:94:df:80:89:6f:be:cc:5f:9f:11:
e0:41:2f:4a:e5:f0:72:4d:79:e6:3e:30:e4:f3:98:c6:00:0d:
fa:73:55:b2:57:c9:32:ab:bf:39:cc:0e:a7:79:e6:ab:55:72:
51:ff:a3:5b:d8:22:86:4d:6c:b9:46:1c:27:62:c9:6e:33:04:
b3:a3:5f:6b:b0:b0:0c:e2:1c:49:8e:76:17:a1:5f:47:9f:9f:
13:98:e6:c5:a7:37:69:de:2f:9a:f8:3b:ed:d9:f8:c9:f2:a2:
58:ca:b3:47:1e:46:bb:32:8a:c5:79:af:44:11:8a:b7:72:bb:
b6:e9:4b:88:9e:91:a7:d8:b9:e2:c0:81:c7:4d:e5:8c:92:af:
88:0b:ee:aa:d5:5e:aa:ad:13:69:67:af:c1:87:cc:3e:39:cf:
27:2c:fb:e8:46:39:48:14:4b:ad:a8:37:f8:77:30:8f:5f:a3:
92:9a:a5:d2:a8:81:65:b7:7a:48:45:7b:6f:c9:c4:e0:f4:60:
35:b2:ed:70:27:ea:7e:33:f5:86:17:32:2f:e6:17:3b:31:8a:
39:66:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:05 2025 by rpki-client