Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: jaohrNIzGn5XxH5EKIjgngO2Nv9Qo35wbtxzFR2TK+4=
Subject key identifier: 13:3F:56:38:2C:F3:D5:F4:F8:F4:2F:EC:1D:C0:C0:CE:10:3A:03:39
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 0199FB0F27BC37C93F68F208ACFEA9684C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0C24
Signing time: Sun 19 Oct 2025 06:01:38 +0000
Manifest this update: Sun 19 Oct 2025 06:01:38 +0000
Manifest next update: Mon 20 Oct 2025 06:01:38 +0000
Files and hashes: 1: cTUW6h8O7oJIMmgLFdy8XjEMwQM.roa (hash: GWLeGo5Tx1NQYnIt9PV3FBH+YZ+jq0YpS9g5boQS2IE=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: MxSiZe5PhHItF6D4TU4kUmhGYvdpA+8JraO/cgcr/Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:27:bc:37:c9:3f:68:f2:08:ac:fe:a9:68:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Oct 19 06:01:38 2025 GMT
Not After : Oct 20 06:01:38 2025 GMT
Subject: CN=133f56382cf3d5f4f8f42fec1dc0c0ce103a0339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:2e:01:71:b9:30:82:da:e4:df:6d:a5:bc:
24:0e:4b:cf:d2:3c:62:99:ae:1c:7c:11:f4:18:b4:
02:cb:32:34:7d:ed:a6:58:6a:e5:07:05:ee:a5:08:
4a:03:60:63:d5:4e:64:a8:e9:1d:44:d5:5b:09:de:
f7:10:f7:75:b5:11:b4:52:2a:5c:b2:ee:3e:78:bf:
74:36:6d:d0:a8:bf:07:f4:04:23:0b:e9:31:ac:ae:
a8:2e:d4:4e:06:7b:24:fc:e7:e5:73:8f:64:61:42:
1c:37:98:c4:1d:11:6b:0d:50:e3:d6:dc:6f:8d:d8:
26:80:ea:6f:4e:9a:00:c1:0d:d9:f7:2a:7c:a3:62:
63:c7:ac:cd:71:32:12:56:f1:b1:c0:a9:7b:4a:7b:
f0:8c:8b:7b:1c:a7:06:01:ad:3d:e6:2a:1e:fb:a9:
66:7e:b8:d3:0c:86:24:aa:38:86:ff:9c:f4:09:94:
c4:9b:e7:73:fe:36:55:17:bf:65:7a:36:c6:04:47:
a9:4e:98:ad:62:20:ce:d6:eb:a7:a5:fa:32:0f:ae:
7e:5a:ed:b2:6b:21:ca:1e:7f:e5:e2:61:3d:85:1b:
b9:d0:65:5f:2c:bd:48:7a:40:bd:5f:74:3c:a4:54:
4d:6e:de:0a:87:a8:34:ba:ab:ad:94:a4:af:9b:ae:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3F:56:38:2C:F3:D5:F4:F8:F4:2F:EC:1D:C0:C0:CE:10:3A:03:39
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:84:57:81:78:40:1c:2c:dd:78:2e:72:13:3c:15:90:00:70:
53:cf:af:8d:0a:5c:f5:71:d2:52:eb:e0:de:64:20:9f:2f:d7:
9b:d4:94:e8:3f:b0:b4:ae:57:48:18:05:8a:a4:c4:e5:a2:bb:
85:db:22:a6:43:a7:ec:82:ac:7f:f4:86:66:29:f3:60:62:02:
de:81:83:df:80:af:c3:da:bb:28:a5:6e:0c:c5:26:4f:bb:8e:
90:73:6f:f0:c2:e8:df:cf:8f:f2:7f:68:d2:c1:ce:be:ac:a2:
ff:8a:57:cd:bd:f5:25:8f:1e:8b:d5:70:f7:17:03:19:51:66:
ee:4e:9d:64:0c:a3:02:44:15:98:59:36:63:59:19:82:c0:e1:
95:f5:5b:18:f3:aa:ce:ff:65:d7:6a:b7:f3:1a:1d:f2:09:4a:
f1:b9:3a:a4:8d:05:ef:6e:30:34:65:29:68:59:eb:4d:96:af:
28:2c:d0:fb:fd:a1:57:b6:c6:e9:69:18:6b:03:6a:cd:31:ad:
94:cd:69:f7:ce:08:13:05:8f:a1:67:e5:1b:72:c5:47:67:7b:
4a:ca:40:7b:7d:1c:7a:ee:3c:17:4e:80:dc:85:d8:fe:42:af:
72:d4:49:d4:64:d9:2a:f3:90:53:d7:70:80:4a:50:30:d7:9c:
67:2a:35:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dye8N8k/aPIIrP6paEx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MDEwY2ViMjBmMmUwNzZhM2YwMDAyNzFhNWMzNzU3NjFi
ZWMyZjUwHhcNMjUxMDE5MDYwMTM4WhcNMjUxMDIwMDYwMTM4WjAzMTEwLwYDVQQD
EygxMzNmNTYzODJjZjNkNWY0ZjhmNDJmZWMxZGMwYzBjZTEwM2EwMzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh8uAXG5MILa5N9tpbwkDkvP0jxi
ma4cfBH0GLQCyzI0fe2mWGrlBwXupQhKA2Bj1U5kqOkdRNVbCd73EPd1tRG0Uipc
su4+eL90Nm3QqL8H9AQjC+kxrK6oLtROBnsk/Oflc49kYUIcN5jEHRFrDVDj1txv
jdgmgOpvTpoAwQ3Z9yp8o2Jjx6zNcTISVvGxwKl7SnvwjIt7HKcGAa095ioe+6lm
frjTDIYkqjiG/5z0CZTEm+dz/jZVF79lejbGBEepTpitYiDO1uunpfoyD65+Wu2y
ayHKHn/l4mE9hRu50GVfLL1IekC9X3Q8pFRNbt4Kh6g0uqutlKSvm65DTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBM/Vjgs89X0+PQv7B3AwM4QOgM5MB8GA1UdIwQY
MBaAFKgBDOsg8uB2o/AAJxpcN1dhvsL1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMt
NDlmNjVjNmE0OGJmLzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNDQ0YWEtYWU4Yy00ZDE0LWEzYTMtNDlmNjVjNmE0OGJm
LzEvcUFFTTZ5RHk0SGFqOEFBbkdsdzNWMkctd3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASIRXgXhA
HCzdeC5yEzwVkABwU8+vjQpc9XHSUuvg3mQgny/Xm9SU6D+wtK5XSBgFiqTE5aK7
hdsipkOn7IKsf/SGZinzYGIC3oGD34Cvw9q7KKVuDMUmT7uOkHNv8MLo38+P8n9o
0sHOvqyi/4pXzb31JY8ei9Vw9xcDGVFm7k6dZAyjAkQVmFk2Y1kZgsDhlfVbGPOq
zv9l12q38xod8glK8bk6pI0F724wNGUpaFnrTZavKCzQ+/2hV7bG6WkYawNqzTGt
lM1p984IEwWPoWflG3LFR2d7SspAe30ceu48F06A3IXY/kKvctRJ1GTZKvOQU9dw
gEpQMNecZyo1VA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:59 2025 by rpki-client