Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
File: qMbzkzUMd1mMEhrNPJL3BIV274k.mft (raw, json)
Hash identifier: WSeWUHkw8df3sWyDfPc3mHoFQFuNSwqk6ieVscGKRw8=
Subject key identifier: 8C:48:D2:15:F6:47:5A:38:B6:23:7A:B0:11:77:1B:D0:82:C9:CB:2C
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 0199FBEAD199D7CB79C1F34F269E0389B1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
Manifest number: 0E18
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: eOh7otVHHrYHGXBG7XugLjFkG3I.roa (hash: jBij6Zpdi8PdzGdFEr+QptijCvWCfUOl+3jki1c2vMs=)
2: lCDqNprGOb5vTF01oJ8hwQqZCRE.roa (hash: mFZkrlVA4mVLiefirb6z2hXCAJmumM9YtxbYwU/yy10=)
3: qMbzkzUMd1mMEhrNPJL3BIV274k.crl (hash: OjMpm5XDO3i4nQT8TtohubSEe3YPxF1DNkUIETkDoGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d1:99:d7:cb:79:c1:f3:4f:26:9e:03:89:b1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=8c48d215f6475a38b6237ab011771bd082c9cb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:46:61:ae:56:83:75:15:c8:5a:56:eb:e1:00:
95:40:97:dd:42:0b:c1:6c:d6:b5:1e:a8:af:21:c0:
9f:bb:31:4d:27:8d:7f:32:8a:b0:46:31:24:23:17:
46:dd:82:e2:44:c0:55:a7:96:22:4e:f6:a5:8f:a8:
c3:d1:8a:0f:eb:2a:1e:42:62:76:2f:b1:51:34:4a:
f2:e1:0f:23:6b:19:01:5c:38:22:0b:ff:d0:5e:ff:
fd:33:0e:04:12:08:eb:c5:d1:db:e8:46:f5:61:b3:
85:f4:b8:5e:f2:39:81:5c:0a:e7:d6:3e:58:f5:ed:
c5:88:19:19:39:4d:61:58:21:b7:27:96:4b:e5:12:
bd:20:11:b0:67:00:5d:f0:e1:5a:66:00:b9:18:0f:
d4:27:7f:8c:f2:ec:53:81:d6:49:dd:5d:1a:f6:f0:
a7:03:d5:d7:d6:41:51:5d:01:89:9c:6e:26:b0:49:
08:64:af:11:84:94:ad:78:66:26:9b:b6:7d:d7:80:
3f:5a:1c:27:3d:1f:f3:ca:94:15:f9:e2:51:14:66:
ad:a3:14:4c:68:9c:f0:ba:8e:14:c7:fb:64:23:f6:
70:af:4b:bb:fa:1e:91:38:e6:c8:2a:86:26:46:30:
dd:41:91:24:7f:aa:b7:3f:23:21:d4:b3:69:a2:6a:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:48:D2:15:F6:47:5A:38:B6:23:7A:B0:11:77:1B:D0:82:C9:CB:2C
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6e:0b:c0:93:8c:48:03:4b:0f:d8:4e:7f:96:25:fb:63:33:
d2:b3:b0:5b:3a:35:67:c9:1d:31:79:d4:a6:d7:44:f6:60:03:
6f:66:0c:c5:92:de:f0:1e:a8:d6:6e:23:00:9f:6c:a7:16:24:
96:de:dd:fc:bc:c0:87:b9:38:3f:1d:d4:41:9c:01:07:68:86:
79:f4:a7:4b:9b:8e:e7:e1:0f:3b:4f:45:b1:67:53:6b:7d:91:
2f:04:39:57:71:75:32:5c:bd:06:c6:b4:53:58:2e:30:c2:c3:
8d:7a:56:ad:0a:95:b0:f7:0c:56:f1:44:8e:8d:02:f6:ca:61:
83:a4:83:81:e8:2b:2e:1e:ad:cd:4f:f9:0a:b1:13:f2:0a:a7:
06:73:67:d2:35:bc:d6:f8:43:04:a5:02:99:17:b7:7d:6d:ed:
56:ed:e8:64:90:54:fa:25:bf:e6:f1:4f:7e:bf:99:4f:14:f4:
c0:d4:9a:95:ff:f9:da:d9:8a:cd:f1:9a:d3:68:97:eb:53:42:
4c:91:34:33:4b:be:9c:18:8c:17:f1:27:53:4d:d1:c1:01:f6:
a2:d6:6d:6d:8a:b6:7e:b4:b5:a5:23:36:f5:e7:44:ee:6d:72:
20:c9:be:e2:d7:52:9e:4d:e6:c3:90:e6:ab:25:46:cb:27:4b:
7d:17:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:06 2025 by rpki-client