Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: bfqeyrqlibUEibdc7f5K50qp8rH6gv6tqzsNTqJCnNQ=
Subject key identifier: E6:80:62:2E:72:D2:0F:BE:32:82:3C:19:54:B1:FC:44:F8:FE:92:73
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 0199FDD9EF36F1D2E96B42DE5398AF7B22BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 1375
Signing time: Sun 19 Oct 2025 19:02:22 +0000
Manifest this update: Sun 19 Oct 2025 19:02:22 +0000
Manifest next update: Mon 20 Oct 2025 19:02:22 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: BMieDC078oujgFM/myZtt7D92f8N3P9YXVGBncX4lhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ef:36:f1:d2:e9:6b:42:de:53:98:af:7b:22:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Oct 19 19:02:22 2025 GMT
Not After : Oct 20 19:02:22 2025 GMT
Subject: CN=e680622e72d20fbe32823c1954b1fc44f8fe9273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8f:ea:2b:0a:0e:ad:9e:9b:f2:a1:8e:5a:e8:
b4:58:70:a7:6a:80:38:7f:56:00:21:ba:34:b8:6c:
f7:11:69:64:20:b4:94:e0:1b:21:65:02:95:59:04:
8e:b6:1d:bb:35:ec:cd:9a:3c:2b:70:7a:d8:1d:d2:
3a:e7:7f:f0:4e:7b:7d:2a:ad:b3:bb:d9:a7:5e:f0:
32:29:5e:ac:3f:a4:9c:2e:89:24:cc:36:85:11:c7:
a3:3d:20:a6:da:dd:0d:6b:16:bd:71:86:8c:cb:8e:
ab:07:bf:16:22:d7:1d:b1:d6:98:ca:f8:4b:75:06:
e0:67:61:f4:ff:bc:21:8d:21:9c:4b:5b:b9:ee:08:
fd:30:c3:cf:58:e5:1a:70:11:00:3f:1b:1c:e4:89:
f3:cf:c9:51:28:5c:16:d3:63:0b:7e:69:b5:7c:65:
1c:fb:d7:7c:95:3a:d2:70:e3:fa:78:c6:f4:5d:c5:
b5:a5:30:d5:53:de:2e:60:c7:53:50:e4:a2:b4:5e:
82:2b:72:ff:72:a8:1e:64:2d:be:2a:04:a1:56:82:
a5:9a:46:a5:64:90:de:12:a7:2f:67:a8:b3:02:da:
f2:9b:ac:ab:e8:91:cf:95:fa:15:82:94:27:df:73:
db:6c:41:e3:0d:0c:be:52:89:9a:50:55:e1:64:e4:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:80:62:2E:72:D2:0F:BE:32:82:3C:19:54:B1:FC:44:F8:FE:92:73
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ba:a7:75:3a:c4:73:81:54:08:25:a0:7b:ba:f1:22:96:56:
93:e4:9c:6a:03:5f:e6:af:2c:bf:81:88:63:04:0c:19:3e:d3:
2e:36:6b:7e:2c:bc:07:3d:8a:a6:00:c4:66:40:8d:fe:c2:19:
47:31:43:6c:0f:cc:3f:e5:0b:7b:d0:1d:5f:f1:dc:53:07:1a:
a2:51:d3:13:bf:55:5f:c7:63:0c:20:25:eb:9b:9a:3c:d7:38:
dc:ee:42:e3:b9:12:6f:71:7c:5e:0d:6c:f8:34:fa:ad:c2:3a:
50:50:7e:43:e9:5f:4f:53:60:e7:cc:9b:c3:75:8b:cb:0a:24:
a5:f7:c1:fa:cf:a9:1f:b0:32:4f:98:00:02:e2:3f:05:7c:70:
f3:5b:9d:ba:d6:29:f5:a1:1a:41:fc:cb:a6:1c:53:fd:e7:6b:
15:5a:b2:63:38:b9:f9:3a:bf:5c:42:4d:03:8d:21:6e:15:30:
f8:cf:ed:77:79:8a:67:18:77:ad:ee:91:4c:e6:d0:42:a6:75:
97:ea:44:e0:ff:a5:4b:df:0e:b4:20:b5:50:c2:0a:ab:67:ee:
d9:49:2b:19:b0:b5:b7:3e:18:d9:68:36:1d:5d:04:e5:ee:db:
db:f4:b5:79:49:43:53:8e:20:76:e0:d1:b4:59:72:6a:d0:08:
e1:75:ee:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:20 2025 by rpki-client