Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
File: qLMQBN8TWqGouUMDPbFGkbEaY90.mft (raw, json)
Hash identifier: OTmEptpxJAF65PE13SbLYRZ75CC+sL/JkKvqGCWxZbU=
Subject key identifier: 88:F6:40:0E:E2:80:45:7C:9C:94:2F:C3:9C:25:AB:97:4E:30:B0:B2
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 019A4EF45DE1BD832561FEDEC116E770EF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: 3OEik7tNKF16V3tqg6gfm44Pn9o.roa (hash: VkjODs+PPMDcywvy+ukOLTzmW2p5x8hOEfY1SjXF8hY=)
2: _DuyKPQbR1DkiE_RbE3bwhY5Urg.roa (hash: komYy8q7+/6pbFO69hkA1CXIqh7HDmdwPrOiVtmRueI=)
3: lbsbTqD_9mE7vY8Zyug_YVR-sD8.roa (hash: TyKDojoTZ/eLBbbwUhWYN2H/st4TZlYsWMMpDrArAgs=)
4: qLMQBN8TWqGouUMDPbFGkbEaY90.crl (hash: CE1qU2lXqCQrsZIaKirijuW2BHlyg4pUkciJSck/Spw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5d:e1:bd:83:25:61:fe:de:c1:16:e7:70:ef:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=88f6400ee280457c9c942fc39c25ab974e30b0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:95:73:4e:f2:9a:85:bd:58:0f:e9:bb:be:
77:08:09:a4:8e:8b:0f:ef:8b:78:1c:a1:e1:29:a5:
70:f4:58:02:61:1f:f6:5d:6b:fb:bb:7a:5b:5b:1d:
75:b2:43:4f:a7:13:fe:05:52:c9:d0:f4:58:77:d2:
c0:b9:24:bf:50:a0:45:c2:c9:3b:7c:b1:29:92:b9:
76:d3:42:d5:5e:33:85:93:d4:33:ae:67:29:78:d4:
65:14:6f:95:bd:f5:78:68:8c:0e:8a:87:d5:14:c7:
7c:95:9c:60:9a:f6:22:63:79:71:b6:3f:de:7a:31:
39:83:a5:85:da:69:25:cb:01:2f:d4:6e:51:3d:7e:
c7:d5:fd:41:58:24:fa:eb:f1:36:05:ab:62:71:f1:
34:ce:5e:dc:33:83:e6:cc:88:bd:87:c7:08:6b:ac:
a4:af:49:b8:73:40:a9:bf:1f:70:95:6a:1a:01:2f:
7d:8b:8e:7e:34:1f:5d:3a:b9:bc:67:8a:32:83:43:
9f:3d:82:56:a4:a7:a5:6e:62:ae:43:18:ba:2d:e8:
42:4c:54:c3:18:1d:0a:4c:24:c3:b6:32:62:ae:1a:
de:f1:74:57:07:3f:af:12:1a:c4:14:d4:79:62:18:
fe:c1:c3:33:5a:17:5e:af:64:b2:48:49:0a:e9:c9:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F6:40:0E:E2:80:45:7C:9C:94:2F:C3:9C:25:AB:97:4E:30:B0:B2
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e7:6a:90:31:9c:ff:3f:48:4b:b4:3a:ac:20:50:83:59:9d:
ab:32:43:58:31:55:12:8e:56:14:c3:55:0a:07:42:05:85:7d:
98:a1:e8:e6:fc:20:0e:4c:02:46:21:03:1d:2f:15:98:21:26:
a8:14:4d:11:88:9a:04:6c:6e:31:60:24:b3:70:ae:a7:25:2c:
cc:69:a6:12:7f:2e:72:f9:c2:c7:ae:b6:1f:21:90:dc:c3:bb:
71:8c:aa:8d:5e:60:80:ac:b7:0a:6a:bd:2d:a9:c8:89:96:2c:
e9:a9:6d:eb:c1:36:a6:67:42:e4:04:0b:06:f1:85:04:05:9a:
d9:cd:e3:30:5e:5a:70:16:c0:9b:73:a1:f2:4a:ed:b7:f6:2a:
c1:3e:b8:f4:7f:3f:04:14:d0:ab:8d:e7:dc:ae:ae:6c:dd:bf:
6a:2e:28:ef:2c:ab:27:d5:dc:cc:68:df:35:32:c0:af:74:38:
4e:92:59:5f:9d:a1:b5:2d:61:64:0f:00:ae:e4:27:96:92:0c:
60:47:75:0a:84:6f:5f:76:6b:95:8e:d0:bb:ed:15:24:da:94:
8e:ca:6b:8d:51:d4:88:69:68:7b:77:5b:78:f2:df:5a:88:62:
23:b5:6a:00:60:1f:e6:6c:5a:d4:bf:b1:2a:9c:f0:31:02:99:
b4:45:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:20:20 2025 by rpki-client