Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
File: qTnMFiHuMBCumOEnvSVKeDP9KCc.mft (raw, json)
Hash identifier: G80UmPxp9bGoOBWEk+vqsKHMb9R8ibncNWyhiDJ1ox0=
Subject key identifier: 93:2D:6E:94:3F:53:99:20:B4:5E:9C:04:5B:8C:6C:3A:D8:D6:B0:66
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 0199FC58A42E9A658BD0D2DE1BB74CC14CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
Manifest number: 0FFF
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: I8M09wEb8pPy5aE1tmLVBA1QjII.roa (hash: H2KzL98idyYXiGDF46vhI9MdVSfKRRTkQwlTKnfvbNE=)
2: kE5clAT_On1-sKoap2EGHHtO9ks.roa (hash: 2Gqvz4gyypjZzZQdA4iyMYqLbiLT02xiEIZm2TleSrU=)
3: m8QWxGjBijSQKviqiwGPDVQObsM.roa (hash: 0nynt3B6pt+z65wp6r175QdY0trgb8BxBMo+4Klvl7g=)
4: qTnMFiHuMBCumOEnvSVKeDP9KCc.crl (hash: StD2lY90EerkrRQ6lfvbngBLzBlfrPA4pnJIXU5zuto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a4:2e:9a:65:8b:d0:d2:de:1b:b7:4c:c1:4c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=932d6e943f539920b45e9c045b8c6c3ad8d6b066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:7d:ba:d2:de:d8:64:ea:eb:0f:e1:b1:e5:
76:da:6a:52:99:20:85:7e:f2:ed:df:da:92:48:c7:
65:20:61:73:d1:8d:9e:39:eb:f5:f3:94:66:74:11:
d4:1f:b8:14:54:8e:59:71:cd:90:6c:a9:1d:dc:e4:
36:5e:2f:51:6e:21:25:5f:f5:1a:86:b8:d9:4f:5e:
f9:26:0b:2f:ac:2c:c9:56:a5:f9:41:4a:29:ea:52:
6e:8b:dd:94:4f:d0:48:4b:d3:a7:d5:ad:30:a3:ad:
f4:68:0b:1b:1b:46:4e:47:d6:67:a9:7c:13:40:58:
d4:50:1f:b3:06:29:63:d5:9c:5e:fd:7e:72:40:07:
1a:ab:43:a2:9f:6d:d0:8c:34:ae:cd:d2:ea:9b:42:
2f:4b:fe:f1:75:a8:72:c7:6f:44:2d:a6:eb:b9:54:
cf:3b:87:bc:fd:f7:06:e2:ef:ac:a2:5a:a1:32:86:
e7:70:0a:76:66:54:2d:b3:30:87:9e:f5:46:4b:fd:
d4:18:5a:fb:12:ed:00:9c:98:a4:85:01:8d:c4:ae:
89:24:68:a8:ab:90:2e:64:da:e4:c1:22:ee:85:12:
0c:fb:02:c4:69:fb:ad:cd:42:59:61:43:e8:ed:a2:
fb:45:7f:ee:58:3c:66:49:cb:84:e2:9a:76:41:40:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2D:6E:94:3F:53:99:20:B4:5E:9C:04:5B:8C:6C:3A:D8:D6:B0:66
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:0c:31:fa:77:1b:0b:5f:15:9a:10:c2:ff:89:be:71:7e:
2d:ab:69:c4:c1:fd:cd:98:8c:88:c3:48:02:c9:8e:f7:1d:ea:
01:2c:ca:f0:aa:34:15:ac:39:1b:b9:64:e5:f3:98:f6:84:c6:
80:5c:6c:7a:40:83:6e:cd:6d:49:a1:dd:09:d9:22:a2:b5:0b:
29:48:06:55:5f:86:17:8e:0b:b3:20:c4:bd:38:f3:9c:5d:ec:
57:54:95:30:4b:57:40:ca:01:32:2a:1f:d4:ea:aa:45:f1:17:
22:57:12:a0:80:d9:19:b1:e8:16:36:9d:d2:a1:8d:ee:fe:5c:
36:13:5a:ab:ab:a8:a2:ef:dc:f4:64:9f:7d:05:c8:ba:d0:69:
af:2b:b4:1c:cf:be:a6:1c:d7:d6:b7:df:5d:30:88:c7:cf:9a:
3a:78:45:80:87:b6:b8:7a:62:a3:61:cc:e4:89:2a:39:28:ab:
a6:cb:38:c1:54:f1:d1:26:85:f5:32:8d:1b:d8:63:47:4e:75:
71:b1:c1:74:3a:98:55:4b:3e:6c:95:c6:84:9a:7c:b9:85:51:
fa:9f:9b:66:6d:be:38:5b:69:5f:fc:7f:b4:d6:52:e6:f7:0a:
29:47:42:eb:c3:09:1b:40:22:0c:1a:c1:ff:89:87:fb:67:db:
9f:4f:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:53 2025 by rpki-client