Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: qxkL/7iwogaYzpaNMBwftQKQj9cHCZPWXDY9JGZe4rA=
Subject key identifier: 9D:4F:41:3C:C2:2A:F8:04:67:0C:E8:B3:F4:AC:EC:8D:32:36:83:A2
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 0199FCC6715269C34D4AE17A571C00CD02D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 11C5
Signing time: Sun 19 Oct 2025 14:01:27 +0000
Manifest this update: Sun 19 Oct 2025 14:01:27 +0000
Manifest next update: Mon 20 Oct 2025 14:01:27 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: OjMNXJUzuNFbtNGvuPOTYgpAjp7SzVPfOXOGXGcXEFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:71:52:69:c3:4d:4a:e1:7a:57:1c:00:cd:02:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Oct 19 14:01:27 2025 GMT
Not After : Oct 20 14:01:27 2025 GMT
Subject: CN=9d4f413cc22af804670ce8b3f4acec8d323683a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:98:ec:cb:db:6a:63:37:9c:c9:7e:6d:67:0d:
01:73:54:f9:18:b4:a3:4e:25:05:5b:e0:7b:a4:78:
79:b1:35:1d:ba:c1:9e:76:48:52:be:ee:8c:e0:10:
2d:9f:f3:0b:5f:81:2b:31:b9:09:55:1c:10:68:07:
54:3b:94:45:3b:9c:4e:2a:be:8c:c5:7a:41:df:7e:
e9:4a:d7:53:29:db:fb:3b:8d:0a:02:e1:7e:d5:68:
2c:6e:04:38:b9:b3:69:06:30:b9:03:84:2c:f3:81:
a9:2d:0d:c6:ee:92:d0:cf:e7:2c:3b:96:f6:2b:c4:
eb:36:6c:4f:8d:f3:98:23:c7:c8:41:b2:db:cf:09:
e4:94:55:4e:10:9a:1a:32:c3:a6:c3:19:80:d6:0d:
a6:54:c9:4a:c0:c0:2d:9a:da:06:75:c8:44:42:05:
6c:80:4a:6b:96:93:0b:e7:f0:37:94:bb:6d:ce:20:
91:98:d2:8e:5c:68:91:de:72:c4:d2:6f:85:c9:21:
cc:8e:2d:01:4f:f5:c0:81:b5:10:b6:30:5f:2d:be:
f3:19:d2:54:c6:e8:12:63:51:22:01:a7:76:3d:a1:
db:37:e4:c3:98:73:8c:13:4d:ee:1d:1a:57:37:22:
58:83:cb:9c:ed:ff:d0:c3:1e:f2:37:77:3d:2b:4d:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4F:41:3C:C2:2A:F8:04:67:0C:E8:B3:F4:AC:EC:8D:32:36:83:A2
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:42:d7:21:69:4b:11:92:0f:c1:59:4d:0b:ad:60:e2:d9:7c:
c4:d0:6c:85:ab:73:82:0c:bc:e2:5f:df:1a:44:bf:4e:f5:75:
61:e1:4d:71:d7:ce:5c:04:fb:93:99:96:6a:a2:5a:49:4c:61:
fb:3f:d7:37:15:0a:f1:d1:f4:14:7d:de:f5:5f:94:6c:12:bb:
6b:19:a2:88:70:1b:de:e0:7c:5d:b8:64:82:7a:a1:53:03:da:
5e:05:8c:ec:40:7e:8d:a8:4e:2b:78:08:96:b5:3a:e3:9e:cf:
b8:a1:95:08:34:3e:25:08:15:ac:ef:86:bf:ef:7e:f4:12:21:
7e:0f:f9:d2:aa:e4:27:86:a7:74:20:75:07:b1:ce:43:de:c0:
31:39:ed:80:12:45:af:ef:7e:17:4f:c1:e3:ea:0f:a1:39:93:
2e:32:02:ee:86:85:b2:e7:63:2d:37:58:89:28:d5:ad:13:65:
89:a1:7d:94:32:69:4f:b2:0d:4c:14:46:99:95:3d:19:d9:0b:
05:17:c9:90:e6:6a:56:fc:10:c8:88:6d:c7:91:c1:cb:03:6b:
b4:05:28:35:1f:07:88:87:ac:8d:fd:96:91:05:7d:f9:15:ba:
73:70:f4:16:1d:07:e2:0e:91:2f:3e:35:9e:75:cf:e0:a4:a7:
46:55:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:42 2025 by rpki-client