Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: XrgzgYnduD/F+nA++tTLNWr4tROf+Qz5zsdbYsTV4d8=
Subject key identifier: 93:11:2A:F8:04:54:63:08:C9:95:0A:75:94:33:10:9A:AF:06:47:C0
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019A2A79CBC5B81E49972ECA680B15CEF532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 1294
Signing time: Tue 28 Oct 2025 11:00:16 +0000
Manifest this update: Tue 28 Oct 2025 11:00:16 +0000
Manifest next update: Wed 29 Oct 2025 11:00:16 +0000
Files and hashes: 1: 0TzJK__KWaWwj7IIFGxcW_zcy6A.roa (hash: zzUxvFov3vux2BIMLPpoZFjho4ThQjWHPRuDNEigsXI=)
2: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: mYL1xGH6MWhRfa85L4wPnSOk5JiNLInGQIMlXSVv1UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:cb:c5:b8:1e:49:97:2e:ca:68:0b:15:ce:f5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Oct 28 11:00:16 2025 GMT
Not After : Oct 29 11:00:16 2025 GMT
Subject: CN=93112af804546308c9950a759433109aaf0647c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:34:31:8f:66:74:d2:d8:57:91:f5:63:88:
2c:0b:16:de:b8:fd:11:b8:aa:3e:90:77:98:26:54:
e2:71:ce:e7:7b:b7:32:4b:69:55:c8:32:b5:2f:fa:
f8:f5:93:27:c9:3d:8f:c8:f8:63:8c:19:22:2d:76:
1c:4b:f0:d6:cd:16:ea:47:b1:dd:fc:be:bd:d3:62:
a0:df:91:96:dc:f4:d4:08:4e:e0:58:a4:d5:94:59:
5a:1c:8b:8d:7b:7b:a0:59:44:a4:6c:7c:69:13:65:
a6:4e:45:7d:0f:13:0f:22:8e:bb:0a:3a:f6:e2:2b:
e2:98:e4:e4:28:0a:f6:cb:08:7a:bf:8c:e1:98:e0:
ee:59:62:b9:0e:b7:09:78:15:ff:96:6a:a0:fc:c8:
8f:d7:d0:28:f6:0a:10:d8:32:be:72:6e:ca:9c:94:
5f:dc:8b:c0:ae:94:38:8f:69:25:98:70:bb:f8:c3:
52:3c:8e:98:35:9a:67:b6:4d:d9:99:3d:c1:75:cb:
06:48:07:f2:e3:05:28:c9:0c:ed:28:a8:56:67:80:
d4:2c:68:f8:1d:69:d8:28:94:37:7d:ce:93:9e:8f:
3b:bc:9b:51:11:b9:e1:36:7a:3b:17:3d:10:57:9e:
64:c1:b8:0b:94:9a:3e:c7:16:e6:e4:2f:63:38:7a:
95:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:2A:F8:04:54:63:08:C9:95:0A:75:94:33:10:9A:AF:06:47:C0
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b4:74:6c:52:20:b2:48:db:e1:a8:ea:89:36:d7:be:71:6f:
5b:a6:6e:e0:0d:f6:8c:b7:31:4f:91:d0:60:1e:c7:8c:4f:5f:
ad:66:bc:ea:82:a1:52:92:b1:5c:b1:37:4e:d2:dc:3f:1a:b1:
c1:55:fe:54:35:ba:fd:3e:d6:28:bf:ca:b1:9a:46:8c:c6:39:
b0:04:d8:91:77:28:d3:96:82:d0:b7:ff:be:82:cc:fa:6c:63:
e3:f9:c2:cf:2f:d4:2b:4a:9d:25:33:9f:82:27:e1:9e:bc:3c:
bf:20:cd:3c:96:40:2b:25:ec:9d:22:28:6c:a0:3d:04:f3:d2:
aa:0c:22:98:7d:14:b5:49:ef:3d:dd:11:d8:32:b2:f0:d9:34:
bf:5b:09:1d:fc:67:fe:a2:49:cc:ab:37:b9:e3:2f:ce:27:6b:
16:52:d5:9d:d1:84:6e:6d:dc:2b:09:b4:a6:df:04:d0:1f:d1:
d0:fb:64:5d:f8:7b:95:06:32:70:51:65:9a:cf:4f:24:c0:19:
88:cd:95:0e:3b:d0:8d:78:d1:90:11:07:18:3c:ee:f9:d8:c1:
92:b3:d1:80:bd:40:4f:a5:11:32:21:42:0b:39:6d:0b:c8:0e:
cb:4f:42:e6:22:79:e6:ea:a1:d4:b5:f8:e0:ea:2e:41:fc:b8:
e7:e5:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:49:52 2025 by rpki-client