Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: XU98HPo74GkVtLFINhU9/pWvwcewOLhl0+XMeEpFW+Y=
Subject key identifier: 01:BC:80:D8:0C:47:7A:14:8F:DC:D8:52:4B:61:7F:99:B9:84:41:34
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 0199FDDA126AA56BBF540FA1725C1E33C080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 142E
Signing time: Sun 19 Oct 2025 19:02:31 +0000
Manifest this update: Sun 19 Oct 2025 19:02:31 +0000
Manifest next update: Mon 20 Oct 2025 19:02:31 +0000
Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: Qyijz0YGIGjKysellyo+aVOz0SgUFKXvUs6hOiTGvJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:12:6a:a5:6b:bf:54:0f:a1:72:5c:1e:33:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Oct 19 19:02:31 2025 GMT
Not After : Oct 20 19:02:31 2025 GMT
Subject: CN=01bc80d80c477a148fdcd8524b617f99b9844134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:1c:8e:5a:ff:de:ac:1f:f5:fb:d3:91:ec:
3b:ad:b4:2d:84:3f:4f:c9:ca:1e:0b:a3:1b:2a:7c:
8a:43:01:1f:70:58:f9:4a:e8:0b:ad:15:23:8a:1e:
df:50:ff:a8:1d:78:b9:24:aa:35:6d:4f:72:04:20:
21:b7:63:5b:b3:c2:31:7b:94:de:e2:7e:51:02:f4:
ff:13:6b:06:2b:45:15:76:5a:bb:04:76:3f:d1:2d:
64:bd:ff:78:df:0d:4b:fc:51:2e:35:36:ed:60:b5:
e9:67:08:1d:69:77:be:7e:9f:8b:c2:11:9d:0b:81:
96:55:07:e9:1a:c4:8e:69:63:ff:7b:b5:5a:c5:32:
20:09:db:09:08:e1:fb:56:18:14:9f:53:79:5b:97:
4d:a9:7c:38:2b:5d:4d:9c:d1:96:b2:29:30:3a:e3:
10:77:2f:1d:36:94:d6:51:90:fb:4e:2a:54:fe:47:
58:7d:8f:71:1c:2f:65:98:ca:f0:ab:68:5d:b7:79:
9d:41:d5:9d:0d:39:a6:cd:28:ee:5b:c2:9e:57:d5:
e3:10:ae:26:e1:97:00:53:00:73:84:81:ea:e3:89:
3b:14:f0:02:c4:e5:32:ab:cd:60:d0:70:85:17:aa:
2b:3f:e8:34:1d:84:b0:92:70:33:1d:ca:a5:d7:10:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BC:80:D8:0C:47:7A:14:8F:DC:D8:52:4B:61:7F:99:B9:84:41:34
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a6:e2:35:7f:a4:28:6d:97:8b:9b:85:69:29:99:44:df:7d:
ed:44:27:b0:ef:61:03:1c:e8:a4:c8:82:e1:cb:b7:5f:cd:28:
f0:4e:b7:cb:73:f6:66:fd:d4:d1:df:36:91:bf:56:d0:91:e4:
11:19:ea:a9:a5:a1:66:1b:e6:e2:4e:06:27:c8:c2:ba:20:85:
6c:9b:34:7d:a2:cc:a4:07:73:0a:d5:05:39:36:12:ef:f8:05:
ae:25:1b:06:8e:ba:92:4a:59:0c:6c:4e:a9:ec:ce:34:62:6f:
7c:fd:2d:7d:f3:4e:b0:e5:a9:71:5f:4c:70:94:9b:ee:a4:6e:
9b:7a:ea:8f:65:91:b2:84:a8:d5:75:1d:eb:15:fa:64:86:cf:
9d:52:f8:a7:44:0a:a7:28:bc:c7:43:f0:14:ca:e0:44:88:1d:
87:63:4d:04:81:69:53:03:7e:5b:5d:92:2d:25:ee:22:75:e0:
14:76:08:c6:56:78:c0:e7:c9:d3:85:fa:93:b2:09:0c:ef:fb:
12:81:9a:de:21:0a:c5:7b:95:71:b4:2f:27:7b:4e:de:ed:13:
bd:79:0b:bf:08:4a:f9:e2:3d:95:9c:00:b1:63:00:17:6f:c0:
86:4d:08:68:30:de:7a:d4:5c:be:20:85:fc:35:da:37:34:b1:
2e:6d:b6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:45 2025 by rpki-client