
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File: qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier: ERUgQb0zkDk+KySl9Am5hlyeM7LCNQhcoatRQlPaw3Y=
Subject key identifier: 2E:73:70:DF:EB:26:0E:88:47:DD:29:3B:B9:D5:DD:7E:ED:D4:80:FD
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer: /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial: 0199FC58B597F944BB54F39A76ABAEFEC845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number: 09B0
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=)
2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: WwnAikBBvUViUSMBIJrmNTnU7X6ukzFoN2S3mEyfo2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b5:97:f9:44:bb:54:f3:9a:76:ab:ae:fe:c8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=2e7370dfeb260e8847dd293bb9d5dd7eedd480fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:50:a5:ae:cf:e7:9a:e3:d1:39:51:6b:eb:
71:f0:e1:52:d5:9d:6b:4d:35:ad:83:d4:a8:ce:40:
09:0f:e0:03:c6:23:8c:26:73:94:18:73:23:17:aa:
63:f5:b8:ee:a4:24:74:34:87:6d:09:34:b8:05:d6:
a3:85:e8:f0:bd:6e:05:f2:f1:d0:63:81:de:c1:13:
7d:5c:c5:53:9e:ec:77:71:bb:50:ed:ef:9a:2d:d4:
03:79:c8:7c:2d:72:03:d4:f0:9c:11:57:6f:09:51:
66:4a:6e:0f:e3:3d:85:5d:96:bc:03:67:af:50:86:
39:ad:64:63:82:3b:0b:ea:c0:c0:3f:7c:d5:63:d7:
5f:d9:40:d0:38:41:1d:1d:4b:ff:65:8b:de:57:75:
ad:82:1f:22:1e:66:35:22:74:13:2c:ac:2c:e8:d0:
44:ce:66:07:d2:7c:89:1e:a8:0d:10:b7:4e:6c:02:
ab:e0:dc:52:fc:33:b9:10:ce:f4:dd:36:a2:b2:c3:
ed:ff:c0:ad:ed:17:fd:43:db:d5:b4:60:0d:cb:e6:
88:e2:97:34:43:2d:9a:c7:ab:fe:01:21:d0:78:e9:
8d:5f:e4:77:cc:57:b2:17:09:f3:50:24:ac:9e:67:
b6:2c:66:5b:d7:51:15:a9:cf:ea:76:98:46:e1:70:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:70:DF:EB:26:0E:88:47:DD:29:3B:B9:D5:DD:7E:ED:D4:80:FD
X509v3 Authority Key Identifier:
keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:38:27:5f:b3:9f:98:85:0f:3e:3d:1e:b6:80:ce:d7:b5:20:
29:33:23:88:46:ca:09:95:49:41:6b:04:86:c6:20:4d:f1:6d:
80:9f:00:18:83:9f:cf:2f:d7:92:b3:51:30:db:3e:08:ff:39:
53:5a:2d:1d:00:8a:a1:12:61:a9:ac:a0:43:19:48:c0:fc:e0:
27:ef:41:7a:6c:8d:f0:f5:79:92:62:5c:15:c3:08:a4:8a:e1:
e6:82:45:01:be:f6:0b:44:1b:ad:83:1f:66:95:e8:a3:18:4c:
b1:ce:ba:f3:51:f7:3f:db:35:3d:aa:2a:b1:08:43:65:4d:c6:
b6:78:5a:83:6a:c2:a3:89:2f:cc:66:60:5a:84:c3:0f:0b:d9:
4f:c5:f5:63:25:cd:4e:55:c2:ad:29:a5:80:ce:05:26:c9:71:
d6:6b:97:9a:10:93:56:25:53:cb:dc:24:0c:b4:10:bc:fc:e2:
54:cb:c9:0a:04:6d:0a:5a:ff:28:cf:c6:f6:ad:28:f8:3d:86:
54:8d:2e:83:8e:b5:0a:2f:44:7f:8c:b8:5c:c9:10:36:2e:a2:
69:48:20:53:73:e6:99:9d:e3:3b:b4:ce:a2:ef:dc:f5:44:79:
45:6f:c4:e0:7c:e3:81:b6:64:73:95:be:55:87:76:d0:78:13:
93:ca:df:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:30 2025 by rpki-client