Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: UY6ejIlmCcuWaDY7C3i534dElzoLnq1JU6Wgpx9yrc0=
Subject key identifier: 52:44:F3:80:8D:42:84:78:0D:01:4D:17:7E:12:08:13:60:25:75:1D
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 0199FFFE43F2751B6A57D559D16E924CF6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0E5F
Signing time: Mon 20 Oct 2025 05:01:17 +0000
Manifest this update: Mon 20 Oct 2025 05:01:17 +0000
Manifest next update: Tue 21 Oct 2025 05:01:17 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: /RvU33RKNvNXBaehoytY2r1R0St08PgRd5yYEKpB0uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:43:f2:75:1b:6a:57:d5:59:d1:6e:92:4c:f6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Oct 20 05:01:17 2025 GMT
Not After : Oct 21 05:01:17 2025 GMT
Subject: CN=5244f3808d4284780d014d177e1208136025751d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c8:ed:0d:d6:fe:8a:b8:84:47:18:59:32:68:
8b:a9:71:17:14:91:1b:e1:ac:d2:01:14:0c:3a:df:
60:fb:ea:c0:50:c8:b5:7c:46:d1:f4:38:5f:77:41:
26:f7:86:cf:d9:8a:e0:e0:29:04:21:37:52:69:24:
ff:d9:be:0a:99:19:c9:20:2f:7a:60:b4:16:25:be:
d0:2b:af:e3:54:80:c8:03:9d:bb:85:27:ca:42:a1:
b3:a4:2a:01:e4:98:4e:5f:58:03:ff:b8:04:28:53:
bb:5a:9f:3d:25:b1:16:93:c8:a0:45:2c:ca:03:76:
e5:74:ea:8d:5f:92:f1:43:f1:6a:9f:fb:46:a9:bd:
18:99:0a:f7:58:e0:85:52:9c:c7:0c:f8:9a:48:b2:
11:23:5a:89:c8:4d:6f:0a:0a:54:53:56:a8:51:94:
48:a0:19:f2:45:fb:d9:a7:86:e1:1d:6b:88:ab:e2:
d4:2a:4a:c8:43:13:97:51:b2:d5:2a:38:37:ac:59:
98:5b:c7:93:7d:d0:e5:79:56:6a:16:32:31:a8:1b:
46:82:25:3e:d1:b1:f3:d2:e3:b9:ee:39:7d:f2:06:
db:58:8c:3a:96:e0:37:03:b8:4d:d8:08:ad:6b:ca:
c3:94:7e:22:27:44:7e:a7:74:f1:2c:91:73:a6:7c:
ab:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:F3:80:8D:42:84:78:0D:01:4D:17:7E:12:08:13:60:25:75:1D
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cb:e3:d0:34:7b:22:12:02:24:8b:60:62:5e:c8:48:03:89:
56:d1:8e:a3:3f:e4:4d:59:ba:06:5d:44:b6:40:29:e2:2e:a4:
b7:22:b5:c5:3f:10:42:55:9f:40:b8:f7:29:cf:1c:00:25:4c:
f2:8f:29:12:41:c0:73:29:96:9a:4d:64:07:15:fa:22:ed:b4:
1a:7c:84:a2:cc:56:3b:67:1b:82:aa:35:93:19:0b:c5:f0:22:
ad:45:30:6a:33:0a:26:c1:c4:99:9d:f3:36:84:fb:e7:46:84:
4f:35:28:1b:5a:b3:d2:a3:c7:03:88:d1:05:01:28:03:62:82:
5b:9b:a0:72:b9:60:0d:a3:ec:de:51:56:6c:23:63:8f:75:7d:
c4:fd:39:d4:29:d1:a2:50:84:3e:c6:dd:2b:6e:f7:2a:2f:d6:
86:72:82:ba:99:04:4d:26:3f:5e:d2:3d:63:94:1a:73:ea:94:
d3:b3:d5:54:d5:9b:64:85:0c:a3:68:3e:aa:77:f8:e3:5e:1d:
b9:dc:e6:bb:75:59:e9:c1:a7:c3:4e:ed:5f:21:21:94:9f:fb:
0d:17:97:a9:76:74:98:ad:f9:13:48:41:50:03:b0:a9:c9:7a:
cb:50:aa:aa:68:48:75:9a:4a:f9:59:32:ed:10:f2:3c:ae:ef:
60:d1:7b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:41 2025 by rpki-client