Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: kQwcVmt0dQUFgb6qdn8RaI5NjJn+uKemXoqjVOYd+48=
Subject key identifier: 95:6E:A0:5A:6E:33:9E:15:63:58:6B:BE:E6:3B:D3:87:12:59:BE:CC
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 0199FC584B33B228769769A2ED1E769261D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 153F
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: zJY4wI7v5Mgt7ljcgVWiUrdxEGNpwtFUa2d1D61TdcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4b:33:b2:28:76:97:69:a2:ed:1e:76:92:61:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=956ea05a6e339e1563586bbee63bd3871259becc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:9c:10:47:10:39:3c:5f:59:f0:f8:7a:10:
7d:e2:4f:fa:d0:e7:2a:de:51:7f:84:3c:b3:5f:41:
38:a7:65:11:9e:65:9d:9b:e1:c8:c2:62:cc:3c:f4:
53:84:14:62:d9:b1:49:c5:ff:fb:a0:3c:48:c7:14:
06:53:84:21:f1:03:17:8c:d1:0d:c7:a1:34:e5:ea:
44:45:f3:a2:75:81:74:00:62:8d:38:d3:c0:a6:b0:
bb:4f:d0:14:58:1a:88:63:f3:1f:33:43:ac:da:37:
d0:f5:3e:d4:2e:0b:fa:93:e6:4a:b6:4f:de:99:f7:
a8:5e:ff:17:e6:5d:a9:72:f7:f7:63:5a:49:c7:b3:
41:12:4d:74:d3:ad:78:1c:bb:64:15:64:ab:b5:cc:
d2:9e:ac:c7:5b:2e:7d:e6:42:a9:fe:c3:4c:18:f3:
dd:ca:80:75:8f:42:c4:56:9f:af:ec:e3:81:45:8d:
4c:58:0e:c4:6e:51:c4:ac:20:26:d9:f7:cb:01:45:
e4:b9:fd:4d:94:20:97:ce:d9:00:89:a5:4d:ee:33:
81:4c:a7:5c:6a:60:3d:97:9a:e1:fd:3b:de:ab:bd:
ed:25:d9:c9:ad:c8:42:0a:5a:04:7f:3f:08:5f:f2:
b5:db:48:3e:e8:0d:e7:79:08:0a:e0:f9:0e:c2:43:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6E:A0:5A:6E:33:9E:15:63:58:6B:BE:E6:3B:D3:87:12:59:BE:CC
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:49:42:4b:f0:fd:04:be:fa:2f:ec:9b:79:65:79:ab:5d:31:
3d:f3:4d:e0:41:6e:86:de:92:aa:41:72:22:19:e1:47:e2:de:
fa:90:cd:c8:76:e9:93:13:76:a7:40:d0:a5:71:9c:5a:12:56:
54:a2:f0:db:08:b4:f3:1a:82:48:6d:44:3c:90:2c:72:53:07:
6f:17:87:ee:a6:a8:e3:aa:53:4f:f5:ee:64:0c:ea:9c:80:cf:
27:2f:dd:16:0e:4d:5d:9f:f1:93:ec:d4:6b:8f:b1:8f:6a:12:
12:3a:c7:18:ff:64:6f:9e:98:ab:9e:cc:8c:fa:41:31:fc:60:
34:86:c9:92:8a:dc:e2:5c:31:f0:f8:a5:68:be:f4:fa:68:64:
19:48:3d:1e:21:27:51:5b:d1:ad:8a:6e:02:19:53:2f:a0:e8:
fa:2f:cd:79:e1:09:bd:9c:59:91:9d:57:4f:c9:86:aa:39:ab:
59:82:65:44:ba:10:d4:c8:bd:14:be:44:2b:cd:af:41:21:e4:
01:b4:66:7c:79:d9:d1:29:9c:a1:1e:db:50:a7:f0:f0:31:ed:
9f:dd:58:5f:f6:55:5f:27:4c:df:5c:a5:06:8f:e9:66:2c:ae:
c2:c5:2e:f2:58:a8:7a:af:14:f7:1e:85:0c:a0:cd:b1:88:c4:
ad:e7:1c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:35 2025 by rpki-client