Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
File: qPSR8hDFe_RvtS1K8i5-z29M2oA.mft (raw, json)
Hash identifier: Z4Hb0lD0b2x7ryWzq+64RjlkV/xmHMBBdNLM0d77lrw=
Subject key identifier: 23:60:9F:19:07:8D:5C:A2:14:8B:FA:67:50:9E:7D:E8:BE:84:9E:E0
Authority key identifier: A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
Certificate issuer: /CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Certificate serial: 0199FB7CAE489A0D86AF142685B86F335245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
Manifest number: 0CBE
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: ZZqXGnxEBhLfDD9lB7yOqiX8_H0.roa (hash: AmgNgGv8HaEfNgQu4ILsUPklwcafU90+t65Aj2bSX9Y=)
2: qPSR8hDFe_RvtS1K8i5-z29M2oA.crl (hash: MchoCLs6c1NF0OlmU2M5RIoAdudHEsr7iWgLluLOi5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ae:48:9a:0d:86:af:14:26:85:b8:6f:33:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f491f210c57bf46fb52d4af22e7ecf6f4cda80
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=23609f19078d5ca2148bfa67509e7de8be849ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:cd:d4:14:23:c5:f2:78:3c:be:ee:95:15:
a4:9c:66:1d:7f:6d:a2:8e:08:54:71:1e:f5:67:a8:
50:7d:42:0b:51:6f:8c:41:4e:18:d5:0a:0b:7c:cb:
d6:71:cd:04:38:c7:1a:fd:8a:25:b9:d6:5c:a7:55:
7d:5f:9b:63:4e:f9:b1:11:ce:1f:37:ec:94:d6:50:
69:f7:21:0d:94:5f:42:8a:20:b9:94:87:82:bf:73:
ea:38:bd:40:68:c7:e1:2e:df:df:46:27:12:d4:85:
4a:37:82:b0:a5:7a:20:58:f6:a1:37:16:94:77:57:
1d:46:cf:eb:e8:ec:ba:20:65:87:91:15:c3:66:d7:
c7:bf:10:56:ff:ad:44:0c:5f:2a:67:55:d0:78:9c:
fb:99:ca:e1:4c:e9:ce:5e:fa:50:ed:54:ef:87:2c:
44:33:e8:f5:55:0f:8e:3b:4f:f2:ae:48:cf:99:54:
22:c8:96:03:02:6c:47:f5:34:f5:64:3d:4b:52:4e:
7a:00:e5:47:27:c2:b9:5d:c7:b1:89:05:88:3b:74:
c8:37:ad:5a:99:e3:7c:74:a9:91:46:5d:e4:0b:5b:
20:09:8c:f8:13:40:f5:cb:21:74:b7:6b:01:39:65:
65:61:78:f6:f6:fc:65:0f:29:0b:3c:99:b7:99:ce:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:60:9F:19:07:8D:5C:A2:14:8B:FA:67:50:9E:7D:E8:BE:84:9E:E0
X509v3 Authority Key Identifier:
keyid:A8:F4:91:F2:10:C5:7B:F4:6F:B5:2D:4A:F2:2E:7E:CF:6F:4C:DA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPSR8hDFe_RvtS1K8i5-z29M2oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8fbf5c-ef51-4fd0-9d3a-330b8ad424bd/1/qPSR8hDFe_RvtS1K8i5-z29M2oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:81:30:16:f7:c0:93:c0:f1:5d:2d:28:b2:23:39:6f:7a:0e:
b5:05:6a:48:6e:f6:bf:cf:b6:bd:b7:84:7c:7a:29:b4:7b:54:
31:3a:32:54:9d:3f:78:39:ba:db:02:b5:7b:46:42:2d:51:56:
46:31:b1:8e:78:2c:04:f4:a0:9b:5c:62:da:60:77:2a:e9:16:
b8:66:59:91:58:81:c2:13:44:75:73:d8:44:2d:d6:3b:92:69:
66:94:74:40:f1:a9:80:19:49:7d:61:95:4b:93:4c:0d:2c:27:
36:f2:f2:75:c7:3d:f4:88:c6:2f:61:6e:a7:63:83:68:4f:9e:
75:51:fb:e8:fb:12:8b:0b:4c:84:b5:66:ca:b1:cd:06:f7:9c:
cf:9d:aa:51:29:ae:a9:d7:fb:fd:6c:dd:d1:a6:2b:30:a4:8f:
60:69:77:ed:ec:87:93:fd:6c:ee:84:f1:43:6b:a5:79:51:75:
54:3a:41:0c:e0:56:e1:05:b0:41:0a:7d:b8:d7:09:80:bd:4e:
11:de:00:b3:90:ac:eb:4f:49:91:bc:19:40:05:31:5a:9d:56:
2d:5c:8e:59:79:18:fc:59:a5:59:aa:58:a8:0f:53:3b:ac:dd:
ad:67:ac:ad:c4:1a:cb:00:04:9f:e4:ee:14:59:df:9a:5f:86:
6c:72:04:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:54 2025 by rpki-client