Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: gBafkh2ZPRYuZAbUjNIwbkRBejTDz93rG0QcLqp/QKs=
Subject key identifier: 8B:CA:3D:12:1E:87:7C:08:3A:49:DD:09:0D:46:BE:71:95:05:DD:F9
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 019A71B910D205B7DFE31230A5497AF17B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 13B1
Signing time: Tue 11 Nov 2025 07:02:25 +0000
Manifest this update: Tue 11 Nov 2025 07:02:25 +0000
Manifest next update: Wed 12 Nov 2025 07:02:25 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: 3ukvBZrev5TAUBC6c+a61/GBL1pOXUSjZLlUwCpQFD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:10:d2:05:b7:df:e3:12:30:a5:49:7a:f1:7b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Nov 11 07:02:25 2025 GMT
Not After : Nov 12 07:02:25 2025 GMT
Subject: CN=8bca3d121e877c083a49dd090d46be719505ddf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:20:4e:ba:1b:5e:ec:dc:74:07:b2:f9:18:
f0:c1:f0:a8:36:d9:82:d8:de:15:a5:c3:c2:45:ae:
be:70:17:88:e1:2c:8e:da:5c:84:43:cf:67:7b:d4:
db:d5:d8:b0:c4:a0:d6:d8:aa:a4:ae:0e:0b:b2:82:
80:ac:aa:7a:70:af:9e:9d:6e:86:29:38:b9:31:09:
8c:fa:6c:13:77:2e:e8:08:8f:7f:6f:9a:2b:f7:e7:
57:a8:45:46:03:b9:d1:5d:81:a8:97:f7:60:81:04:
30:c2:cb:e3:e3:a8:53:3e:71:f7:e4:c5:0e:be:59:
04:41:80:25:12:db:9a:d3:41:6c:5d:ff:09:1f:6d:
cd:22:d6:36:84:fb:65:7e:f0:99:96:cb:c8:bb:f6:
e5:6a:82:0b:b9:bb:6b:7c:11:e6:6b:ca:57:7c:38:
42:8e:2f:dc:2e:eb:3b:c0:8e:17:08:07:db:c0:69:
75:e6:94:36:87:b0:7a:f2:90:41:09:95:b9:4e:cf:
b5:9a:9b:ec:cf:1f:18:9f:09:c5:bf:f5:79:21:31:
b2:a1:52:3f:ec:5f:ed:f2:33:9d:64:63:bb:6e:0d:
1c:b3:9e:61:a1:83:e8:17:f6:0d:b4:81:50:38:e8:
6a:16:52:aa:5e:47:5b:9a:8a:7e:3a:d2:94:73:a0:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:3D:12:1E:87:7C:08:3A:49:DD:09:0D:46:BE:71:95:05:DD:F9
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:37:1a:a6:8e:4c:90:70:85:7f:0a:80:e8:22:52:63:17:98:
84:2d:72:bc:8b:8b:ea:b3:2c:31:97:6d:15:08:9e:48:25:7e:
3b:33:ff:26:59:56:3d:18:5a:2a:ee:7a:9b:89:e5:12:83:60:
69:f9:b6:9b:ad:97:9a:a4:42:a4:ab:28:52:55:ce:d8:e2:2b:
0a:94:84:d3:47:83:80:d4:fd:d9:a2:ed:7f:ba:17:f7:c6:a3:
d3:73:e9:75:3c:c3:ab:55:bc:74:33:0c:05:b3:27:3f:98:8e:
a8:56:9d:0b:61:b6:6e:ca:87:a6:e3:fa:00:88:1c:18:e7:39:
8d:8c:6d:a6:3c:ba:33:ca:05:57:50:07:64:c9:cb:71:27:79:
65:04:ed:40:dc:a4:16:2e:9f:73:17:5b:43:05:a2:d1:2b:2a:
0c:f0:bb:56:20:04:44:32:25:d0:f5:0c:05:07:8f:0a:9c:a9:
56:77:55:47:f3:57:1a:87:f7:dd:8e:c8:34:88:ad:16:80:61:
d5:6e:28:24:67:2e:c5:3d:dc:f9:15:fe:25:57:54:94:02:bc:
20:a1:e4:de:fc:40:9e:96:8c:9a:e1:06:41:b4:bb:77:2d:f1:
35:b7:93:e1:17:02:eb:79:a0:3f:b4:48:67:5d:3e:40:40:a4:
72:7c:76:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuRDSBbff4xIwpUl68XsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YTI1MTE0MDExNGM4ZmQ4YWQ1ZmI0NWI3MTg5YWJhN2Jj
NTA0OGYwHhcNMjUxMTExMDcwMjI1WhcNMjUxMTEyMDcwMjI1WjAzMTEwLwYDVQQD
Eyg4YmNhM2QxMjFlODc3YzA4M2E0OWRkMDkwZDQ2YmU3MTk1MDVkZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TIgTrobXuzcdAey+RjwwfCoNtmC
2N4VpcPCRa6+cBeI4SyO2lyEQ89ne9Tb1diwxKDW2Kqkrg4LsoKArKp6cK+enW6G
KTi5MQmM+mwTdy7oCI9/b5or9+dXqEVGA7nRXYGol/dggQQwwsvj46hTPnH35MUO
vlkEQYAlEtua00FsXf8JH23NItY2hPtlfvCZlsvIu/blaoILubtrfBHma8pXfDhC
ji/cLus7wI4XCAfbwGl15pQ2h7B68pBBCZW5Ts+1mpvszx8YnwnFv/V5ITGyoVI/
7F/t8jOdZGO7bg0cs55hoYPoF/YNtIFQOOhqFlKqXkdbmop+OtKUc6DXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvKPRIeh3wIOkndCQ1GvnGVBd35MB8GA1UdIwQY
MBaAFKiiURQBFMj9itX7RbcYmrp7xQSPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEt
ZjA5NDYyYzEyZGE0LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lZTRhNTYtZDVjOS00NjUyLTljZjEtZjA5NDYyYzEyZGE0
LzEvcUtKUkZBRVV5UDJLMWZ0RnR4aWF1bnZGQkk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzcapo5M
kHCFfwqA6CJSYxeYhC1yvIuL6rMsMZdtFQieSCV+OzP/JllWPRhaKu56m4nlEoNg
afm2m62XmqRCpKsoUlXO2OIrCpSE00eDgNT92aLtf7oX98aj03PpdTzDq1W8dDMM
BbMnP5iOqFadC2G2bsqHpuP6AIgcGOc5jYxtpjy6M8oFV1AHZMnLcSd5ZQTtQNyk
Fi6fcxdbQwWi0SsqDPC7ViAERDIl0PUMBQePCpypVndVR/NXGof33Y7INIitFoBh
1W4oJGcuxT3c+RX+JVdUlAK8IKHk3vxAnpaMmuEGQbS7dy3xNbeT4RcC63mgP7RI
Z10+QECkcnx2hQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:16 2025 by rpki-client