Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: i1mQAaSmdVLxJ6OUbhDE6dXpJemVOChZs7q2otvIpIU=
Subject key identifier: 67:53:B7:73:0F:1F:27:F9:D2:26:D2:D7:CD:77:89:78:D5:45:EF:19
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 019A725C457CB5E9A18063A5280A26917C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0C94
Signing time: Tue 11 Nov 2025 10:00:40 +0000
Manifest this update: Tue 11 Nov 2025 10:00:40 +0000
Manifest next update: Wed 12 Nov 2025 10:00:40 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: 2Z2Z/WtZoZku0NhwVFrMf/lQgDtRWc8DmzBY4YIXbxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:45:7c:b5:e9:a1:80:63:a5:28:0a:26:91:7c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Nov 11 10:00:40 2025 GMT
Not After : Nov 12 10:00:40 2025 GMT
Subject: CN=6753b7730f1f27f9d226d2d7cd778978d545ef19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:07:68:62:c2:78:95:a9:c8:21:55:e8:a9:
4e:c6:2b:69:cf:47:42:10:59:b6:ce:86:12:ff:2b:
9b:b4:6e:28:0a:bc:dd:03:7b:31:cb:62:c4:e6:b0:
89:b8:b9:51:85:19:a1:98:2a:4c:6d:5b:96:36:e7:
a3:a3:a9:bf:1d:62:35:0f:aa:06:05:24:32:49:d2:
e7:8e:00:04:bc:fb:13:39:de:55:bc:a2:a5:96:21:
d9:41:b3:08:a1:f7:46:d5:b3:a4:87:fe:32:98:d3:
c1:42:65:29:4f:27:ec:13:3f:0c:21:eb:a0:e9:d0:
bd:f0:66:06:cf:b0:86:db:c2:43:18:44:06:0a:d4:
9c:79:a1:39:3f:41:18:7d:7d:35:9f:18:fe:b7:6c:
f7:03:64:f5:61:05:ce:ef:4e:41:52:1b:99:5c:fd:
3d:5c:ea:73:4b:84:7e:0b:82:c3:60:8e:e9:4b:b2:
1c:8a:4e:b9:4b:c6:33:f5:e0:8a:18:61:c7:3e:7a:
84:95:96:da:8d:93:ff:dd:15:cf:fa:8c:fb:f9:c3:
eb:8d:3d:49:4c:2c:64:70:3c:0f:08:53:b3:75:58:
7b:e6:6e:4f:da:e8:46:72:e3:3d:5a:c6:f7:2a:51:
71:50:a9:cd:78:1c:6c:8d:2e:72:2e:b1:1a:fc:4a:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:53:B7:73:0F:1F:27:F9:D2:26:D2:D7:CD:77:89:78:D5:45:EF:19
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:06:e8:52:75:f8:eb:22:c2:cb:11:76:e4:9b:2b:b1:de:e4:
b9:4f:d4:26:59:4e:fe:6c:4a:f1:44:ee:28:d0:ba:79:48:ea:
cf:21:09:f6:79:26:49:7d:75:c0:91:7d:e3:a9:ef:e9:e1:ae:
04:29:e3:55:69:ff:ee:57:ef:c6:3a:32:d5:19:19:33:f4:b5:
15:fa:01:81:83:c0:2e:a7:cc:bb:63:ab:3d:ad:51:98:38:4d:
6c:d1:e8:7f:fd:2c:18:ad:e7:75:8b:95:d2:c4:26:ef:87:0b:
07:9c:79:8d:06:a2:c0:0a:d0:c5:b7:38:16:58:eb:24:6f:17:
3d:04:e0:d2:3b:09:02:59:4b:65:88:b6:ab:cf:06:3c:62:d3:
6a:03:98:33:b5:6c:f0:9d:2e:f6:7d:a7:1f:c1:e4:64:37:31:
97:e1:ff:1a:9e:1b:3f:9c:50:38:81:55:a8:18:f8:19:b7:be:
fb:20:3d:5d:c6:a2:98:5b:2f:30:bf:09:e6:99:92:ee:ea:56:
70:af:26:3f:e6:0c:36:02:ea:67:f6:4f:4d:46:5d:b5:19:eb:
0d:cc:8d:9b:49:da:29:d6:a0:3a:9f:3e:f3:22:28:19:6b:76:
d9:02:27:c9:4f:86:92:09:63:f9:39:7a:42:78:a9:2c:36:81:
51:df:08:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:30 2025 by rpki-client