Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: qy3Eu5D0o7iOc0Kz6YuVbssZe1X7zVrdYdInHBPUBRg=
Subject key identifier: 6C:02:6E:95:D5:18:3C:87:AD:CA:2B:08:81:95:60:9F:48:8F:2B:A9
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 019A00355A9F15DD86C9E2379171E2C96167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 12BF
Signing time: Mon 20 Oct 2025 06:01:27 +0000
Manifest this update: Mon 20 Oct 2025 06:01:27 +0000
Manifest next update: Tue 21 Oct 2025 06:01:27 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: ce5XdEIyDKHKg5ymAcH/i7bUL9+Qchvn3Kwbz6AFRZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:5a:9f:15:dd:86:c9:e2:37:91:71:e2:c9:61:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Oct 20 06:01:27 2025 GMT
Not After : Oct 21 06:01:27 2025 GMT
Subject: CN=6c026e95d5183c87adca2b088195609f488f2ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:48:21:a1:4f:08:0e:6d:2d:b4:55:9c:5c:
e1:d9:ef:86:ce:e0:b1:c6:cb:9a:fc:67:34:dd:bd:
9e:9a:03:95:af:f7:65:aa:d2:a9:4a:b9:98:9a:43:
17:6a:10:c8:d9:98:49:19:a9:b6:b9:d0:3e:59:83:
e8:57:95:b6:a8:92:24:8a:cf:8c:5c:f2:e5:99:04:
3b:c1:fb:79:07:0b:9a:3b:06:91:6d:1d:55:55:8a:
25:77:89:3c:0e:9f:e6:ae:0f:ac:c8:1d:86:46:3a:
e7:ca:09:e5:9a:3e:a6:43:71:c2:ec:83:c0:2a:a5:
3f:5e:6c:83:d0:4e:b8:98:b3:a5:91:5a:68:44:1c:
f6:9e:30:8a:fa:38:2e:00:9f:79:d4:37:cf:7b:07:
dd:46:ef:1c:40:e2:9d:ad:bb:cc:d5:94:f5:a2:d5:
5e:c9:15:d5:9e:ad:96:06:e1:39:51:97:31:91:59:
83:93:bc:52:b9:41:3e:25:0e:e9:90:64:71:07:21:
a5:db:99:37:0f:52:91:20:b8:05:db:f7:34:46:cf:
19:d9:c2:6b:a1:bd:09:eb:0e:6f:9c:b4:18:62:bb:
43:b0:6f:c5:2c:b2:af:da:8b:d7:71:ae:37:7c:0c:
1c:8c:53:8f:2c:9f:27:1d:a0:f4:57:4a:d7:10:bc:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:6E:95:D5:18:3C:87:AD:CA:2B:08:81:95:60:9F:48:8F:2B:A9
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ab:00:c2:10:b2:9c:1a:42:50:2a:de:85:8f:1d:d3:5c:42:
2f:b1:68:d1:cb:3f:ef:43:e1:ae:4e:85:81:17:02:4d:6e:4c:
fd:ff:42:bd:c5:8c:74:a4:5b:cd:22:d9:71:3c:b2:36:f3:5c:
dd:02:db:cd:2d:80:ad:d4:59:15:4f:bf:ec:ff:22:42:e7:17:
69:1c:b9:b7:f1:e9:47:19:9b:8e:27:5c:bd:48:22:44:a5:c2:
57:f0:76:92:1e:b7:c8:83:9e:3c:10:ff:86:79:64:a7:0b:88:
ff:10:c9:0f:2b:fa:89:53:0f:f5:3c:23:ce:1d:56:63:2e:3f:
b6:a0:45:b5:44:49:b9:d6:35:e4:15:5c:69:2d:40:90:a6:7a:
1b:3f:db:e1:05:cd:8c:20:c3:34:c2:eb:b5:4d:73:e0:14:5a:
ae:ed:6c:b1:c4:1a:4b:f6:8b:2b:1b:9a:bf:dd:c7:9d:fe:4e:
ec:f6:ab:11:f0:a3:29:b7:99:7b:e3:68:b3:d6:3c:89:41:20:
2e:15:b5:f2:e3:2b:7f:8c:bd:3b:39:e9:8a:1a:72:dd:29:1d:
f7:3b:87:c0:ac:03:df:7f:ab:eb:8b:e3:23:5d:10:9f:4c:ca:
06:f6:9f:87:2c:74:a8:1a:04:19:df:71:37:2a:b8:25:55:3c:
54:0e:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:55:41 2025 by rpki-client