Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: UIOwywY+nNiDtYJJSmw0nxrS7dTrYGxVtANea4ijNeg=
Subject key identifier: E8:E3:0A:B4:27:16:1C:89:BC:B8:74:03:9F:12:30:F9:A9:82:19:64
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 0199FD3412A2EB834663317AFA7669466FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 11C0
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: 2DXqAPjihFj34PBpiQk60T3uetUqUVc2SJvDASF977U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:12:a2:eb:83:46:63:31:7a:fa:76:69:46:6f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=e8e30ab427161c89bcb874039f1230f9a9821964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:59:05:ee:c9:b5:a5:49:18:a0:e7:8f:c4:
8b:b0:bb:d5:59:d8:b4:09:54:61:fe:45:d8:26:69:
20:6a:64:bf:c8:72:9d:6e:e7:e7:9b:01:f3:e0:e6:
b3:06:59:30:1a:40:69:55:2b:a4:af:95:3a:a2:3a:
d4:68:fa:63:3d:97:c4:e1:07:ff:08:4f:a8:fd:ad:
55:79:7e:7a:57:8e:92:72:62:71:75:60:d8:99:90:
b7:cd:1e:8b:06:10:86:67:69:dd:07:65:67:c5:04:
c3:f1:9d:1f:f9:b8:15:30:f0:f1:dc:ca:96:15:70:
44:92:6f:19:e3:77:44:0c:c6:44:2f:ed:39:a3:2f:
ee:e4:96:7f:79:bc:12:2b:d3:60:6b:fc:58:61:b9:
58:a6:ce:d4:ff:b9:80:44:de:c5:c9:5c:cd:18:ba:
26:8f:a9:0f:95:bc:e5:51:05:39:47:fb:3b:2c:8a:
b5:4a:e6:bf:8b:59:36:cc:a7:13:6b:ff:33:d3:e6:
05:25:d7:78:f8:22:70:eb:06:d9:76:28:e0:78:18:
d4:3c:a4:a9:48:3a:98:31:d5:b7:39:62:c3:9a:15:
d0:a1:7e:62:76:4c:34:18:1b:5f:a1:e1:13:bf:c7:
a5:0a:8b:10:e7:b5:be:75:4c:7a:04:64:c3:6e:82:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E3:0A:B4:27:16:1C:89:BC:B8:74:03:9F:12:30:F9:A9:82:19:64
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9f:e9:58:53:fa:36:89:63:0d:d4:fa:d8:20:a3:88:62:ca:
a8:5d:8c:b6:ea:55:87:21:94:54:22:7b:c1:10:93:91:76:d2:
aa:be:1f:66:d1:2c:85:2b:e9:b2:9f:97:85:91:42:8c:cf:31:
10:16:8e:bf:92:9b:10:36:98:69:68:ef:59:df:b9:4f:f5:15:
82:0e:06:fc:a9:ea:27:94:1b:9d:d3:8c:36:c5:50:9c:e7:17:
26:ff:f1:61:60:b8:7d:f7:61:59:57:53:ea:fe:4e:bb:c7:e8:
dc:6f:89:b7:ab:5d:6f:7b:1f:3b:e1:fd:fa:24:d0:b5:c5:21:
a1:54:79:dd:bf:de:8d:80:4a:da:b2:04:22:e2:bb:16:31:44:
8b:bf:0a:97:3f:f9:28:72:1a:92:e1:5a:27:2f:1f:82:b8:f5:
b7:42:50:fe:01:20:5e:1a:87:03:f5:4c:9b:2b:7c:ce:20:0d:
fd:b7:91:fc:da:fb:e8:6f:fe:9a:b1:30:cf:18:5b:04:a8:91:
c6:9e:65:c4:5f:d7:9c:48:e5:ba:2e:5b:a0:7f:fa:26:ab:9d:
66:9a:c0:cd:43:fc:2a:c2:11:81:c1:1a:a4:08:7f:01:73:27:
44:32:54:49:69:f2:6b:02:f2:29:71:56:70:b3:10:f0:38:25:
19:f3:5c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:11 2025 by rpki-client