Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: t8IBG1iGtL2GIf/mCOcUtZKgIg3HwCC9qLc5HJ243VI=
Subject key identifier: 22:7F:B3:C2:50:BA:5C:24:5A:3B:0E:E5:FD:F2:E0:AB:CE:B1:7B:C2
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 019A72266CEF12CC3E53FDF04515285AC088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 12FA
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: lO3U7O5xn_SH8biBa02wbaj6rwE.roa (hash: Ur2/ddmmedYhTdeyhrYUxfNHrSlslVFvOy6wD+8Tc1U=)
2: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: 8zZn4m9T9ptyMMWmWt+aFwWeGOPNSRSAhwwHpFSJLWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6c:ef:12:cc:3e:53:fd:f0:45:15:28:5a:c0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=227fb3c250ba5c245a3b0ee5fdf2e0abceb17bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:4c:ea:fb:3d:dd:f0:a8:40:58:b9:5a:57:
cb:3d:0e:a2:c4:4f:97:7e:d3:69:67:ff:04:9b:40:
17:40:59:11:24:88:58:cc:75:fd:fa:2c:6f:d8:e0:
84:5e:aa:25:e3:32:1b:fc:aa:11:80:69:b3:19:c8:
2f:b1:0d:40:e2:41:45:6b:38:43:59:60:25:99:7d:
03:07:3b:c1:5f:38:50:c8:e9:bb:ca:68:99:0c:f1:
7f:9f:69:2b:08:40:6b:58:53:e8:03:a3:40:5a:97:
eb:2f:a7:02:67:07:b5:5c:d1:be:df:a2:90:12:d2:
f8:95:e8:86:1d:17:5d:76:ff:36:52:2e:a4:54:ec:
28:7f:ae:d2:8d:4c:4a:c8:75:b7:2a:b3:3a:03:7d:
29:a4:6b:64:ba:ca:a5:f0:27:2f:bc:a1:87:0d:57:
f6:e3:cb:c3:3b:06:7c:73:3b:6d:91:0e:53:22:86:
0e:7f:ca:4d:7d:6c:18:00:5f:71:07:9c:8f:b2:ad:
03:88:d7:93:50:5a:3a:02:cd:ae:d1:89:3f:47:9c:
03:4e:91:21:e5:b3:8e:e9:65:29:11:f7:19:60:a0:
5b:80:7a:da:65:60:25:19:3a:09:13:80:e7:3f:8a:
a8:fd:b7:e4:39:16:8f:6e:fa:2a:16:d5:1d:3d:87:
9d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7F:B3:C2:50:BA:5C:24:5A:3B:0E:E5:FD:F2:E0:AB:CE:B1:7B:C2
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9d:94:28:06:ae:98:06:90:8c:52:0e:8d:c5:7b:79:7d:eb:
11:8e:c3:8e:df:03:3c:c4:92:ef:1a:62:8e:8a:34:43:de:fe:
28:0d:e0:22:23:ff:8a:62:d4:70:a2:70:43:c2:81:d0:d4:a7:
e4:af:81:2e:af:f1:e0:b6:0c:68:54:2c:33:04:f9:b4:4e:d9:
51:95:b7:70:f8:3d:bb:9e:55:e0:b4:2f:01:b1:6d:34:e5:af:
42:c3:30:7d:df:a1:d6:d9:51:91:36:0e:1a:30:d4:bb:62:a0:
4c:19:e7:4b:7d:c7:62:0f:44:37:16:c3:e4:a7:2f:f1:9e:89:
44:91:35:23:05:95:8a:67:64:c7:80:89:a8:43:61:31:84:ba:
59:8f:a8:26:92:bb:e7:9a:0b:2d:0d:fd:c2:51:52:ae:97:89:
d8:7b:c7:c8:dc:d2:68:65:cf:71:3f:66:0e:93:1f:05:08:7f:
80:8f:87:d0:0b:2e:49:00:e9:68:f5:8d:9e:ad:66:8e:5f:fd:
51:b6:06:36:25:22:c4:1e:00:7d:a2:69:b7:56:cf:b9:cc:2d:
0e:06:a7:ee:08:09:a5:b1:32:e6:24:b4:d7:0d:ec:25:16:26:
d4:1a:e8:eb:cd:09:87:e9:64:0e:a5:7b:72:fb:d2:88:15:a1:
27:ce:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:42 2025 by rpki-client