Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier: dSTY2ZRkzZ0Ph1bhSvhii3Mn0pwhdOrul2sqjsffRnk=
Subject key identifier: 84:DB:CE:5E:97:65:D8:C1:37:1F:28:43:90:87:D5:3B:5F:7C:33:90
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial: 0199FD6AFD77874689B6B7548C9725FC6279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number: 044F
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: 5lkgevE67JqLPCJiuIVDQvx8C9s.roa (hash: TbV0l1n+K1FvkmmG4RWk4U+vij9oLV2Tx8NUa3IQ8as=)
2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: NUtirFbcu0cdV3Dof7wflZEfulwjiVRuQsUuiJna2r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fd:77:87:46:89:b6:b7:54:8c:97:25:fc:62:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=84dbce5e9765d8c1371f28439087d53b5f7c3390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:2d:38:69:63:5a:24:5a:20:65:27:ff:ac:
77:b4:db:c8:ba:7c:3e:3a:1b:81:58:fc:3d:55:e2:
1d:70:f8:92:fe:98:67:19:03:a8:dc:93:86:68:f8:
2a:be:fd:a0:9a:8c:b9:35:b5:66:d1:b4:f6:ac:c8:
b0:2b:a9:43:e5:47:b8:fd:ba:65:58:93:0a:ab:75:
d6:5e:fd:d1:92:ec:06:32:38:35:4d:7c:f9:a0:d2:
cb:b5:45:68:e7:5c:d0:66:ea:8d:9e:05:38:94:2b:
ed:8c:31:66:ff:a6:25:fc:23:83:ae:26:8b:91:3d:
ed:78:64:e1:ad:b0:cb:36:f8:b9:7e:16:10:ef:69:
5d:b9:ff:89:55:fa:a6:cf:5f:b5:a6:27:21:89:d1:
41:27:06:1a:8a:23:28:51:35:98:00:f8:4b:aa:0f:
a5:de:60:98:b8:6f:bf:4a:46:04:3f:ee:6e:6d:13:
a7:bc:1a:91:1b:ee:e9:46:d1:ef:9a:dd:25:2c:58:
e3:15:d5:a9:9e:34:f0:0c:11:b8:cd:df:c3:f0:e5:
a0:73:e6:7d:2c:40:85:c1:8d:a3:9d:5b:d3:a6:bc:
ac:3a:a9:a1:f8:51:4b:36:e9:08:48:b9:9b:15:6f:
48:b4:e1:5f:5f:4b:db:cd:b1:0d:b3:ab:e5:18:ed:
4b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DB:CE:5E:97:65:D8:C1:37:1F:28:43:90:87:D5:3B:5F:7C:33:90
X509v3 Authority Key Identifier:
keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bc:8f:a3:75:29:97:10:fe:1c:26:65:07:5b:e2:c0:77:31:
68:fd:87:a9:42:91:d8:cc:63:bd:cf:c4:a3:65:de:fc:18:38:
74:c2:e9:db:64:19:2f:6c:06:8e:b3:fa:aa:c8:3a:dc:25:14:
0e:b9:f9:d2:32:76:b5:45:d6:e4:9b:85:a2:c8:ed:fa:e4:92:
a7:19:f6:88:2e:fd:8e:4a:66:29:46:d5:bf:98:4b:0e:e2:f8:
fc:9e:5d:81:ca:a6:3f:59:4f:a1:a6:cb:57:b3:c9:2b:2b:97:
50:73:2b:94:5c:3f:b5:4d:63:19:f1:55:83:83:96:de:23:62:
43:33:dc:80:26:d1:db:ec:52:a7:88:ba:d9:4a:6a:1f:1e:2d:
49:c1:4a:80:6b:fe:84:76:53:9e:ff:f1:52:45:af:5d:73:bd:
d7:fb:2d:f9:18:da:fb:76:79:07:c3:04:41:8c:70:d8:02:ac:
f8:26:e1:ea:29:ab:8a:d5:79:9c:f1:5a:97:d1:8e:0e:9d:7d:
e2:2b:30:5d:d6:a8:50:a4:16:6e:70:76:0e:d4:17:05:62:d7:
bd:0f:cb:00:4c:66:6d:cc:8c:9d:32:8d:e9:91:a5:f2:80:37:
a6:38:f9:ce:51:3f:93:91:1d:a6:1b:1a:64:56:01:83:cd:f9:
17:00:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:22 2025 by rpki-client