Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
File: qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json)
Hash identifier: 5+p1XDNbWKL1ShhxqXT5TGT/5uecTmhleWP+Dpe20dw=
Subject key identifier: 14:DB:F1:DE:33:76:D0:8A:41:47:74:A2:26:6A:3F:F0:8B:6A:39:DF
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Certificate issuer: /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial: 019A71B7DF4A2B54DC5A1DCAA9300A4B9BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
Manifest number: 10F0
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: Ga7xjXDSDjdOVNrcTGr_g6sBFW8.roa (hash: 8Y/Mjf2+mYXubhHwDguXMxh+k+JgGQC7Q5HSVi+iXpA=)
2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: 3DTGc9jbtAuydiswUlBz2b1Jr1PQJZnMk+Zcdzhje88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:df:4a:2b:54:dc:5a:1d:ca:a9:30:0a:4b:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=14dbf1de3376d08a414774a2266a3ff08b6a39df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:c4:8f:4e:7a:53:40:10:25:10:32:ad:6d:
8f:a5:30:d4:52:6e:5a:d5:c3:d3:09:0e:f4:d0:ae:
a5:b8:16:3d:9b:c7:9d:df:e4:64:96:69:2b:28:fd:
ae:b3:10:a3:ff:cb:15:d5:df:b4:0a:5d:5c:84:a9:
08:c9:cd:7a:af:9d:5d:67:0e:6e:be:da:01:b7:55:
c5:c6:e3:59:b7:08:fe:c3:fd:0e:0b:80:76:4f:34:
d9:a0:0c:da:9d:64:23:22:3e:4a:fc:a0:07:d4:99:
3d:e9:28:00:3b:35:cf:9f:89:af:d8:d7:42:38:22:
b4:a7:49:87:98:26:62:44:d7:e5:63:b1:ca:51:1e:
af:c5:62:ee:d8:12:85:6c:f3:9b:9a:b6:c9:9c:bf:
5d:9a:7e:e5:4c:3e:90:92:f3:1d:3a:cb:1d:d6:9f:
e6:73:84:d2:88:5d:6b:b8:73:1b:09:1e:b9:a2:50:
0f:2f:54:8e:57:9b:75:48:1b:29:83:ab:e2:b3:95:
4d:0f:4b:9f:e6:2e:01:13:76:0f:a0:9b:8a:3c:4c:
57:8a:0f:61:7c:10:23:92:48:05:b1:38:d0:a3:73:
82:ad:c6:07:9a:9d:2f:27:1b:b7:c5:24:d5:80:be:
17:47:6b:26:d0:ec:ff:b1:da:34:b2:15:00:ef:e5:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:F1:DE:33:76:D0:8A:41:47:74:A2:26:6A:3F:F0:8B:6A:39:DF
X509v3 Authority Key Identifier:
keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:df:c0:cb:28:3f:f8:6c:62:42:b1:48:5f:35:5a:03:f2:ed:
3d:31:0b:97:d1:93:72:8c:8d:c2:5e:38:67:ec:14:61:ba:df:
61:bf:90:f7:0f:43:b8:fa:4e:97:29:b4:fa:be:2f:37:97:32:
6b:ae:40:43:c6:4a:84:60:f7:c5:2b:a6:e6:5d:de:07:87:d2:
b8:72:ff:6a:76:b5:ec:f1:04:48:a5:1c:36:56:51:40:33:fa:
3c:5c:67:62:4e:a8:2e:c2:e9:e9:37:74:bd:71:d2:13:10:48:
6b:f7:9a:a9:00:b5:12:54:d8:fc:71:7d:a8:a5:9c:fc:15:8c:
e4:6b:11:59:71:fb:46:31:69:ad:2c:dd:17:f0:4b:b1:fd:0b:
5a:2c:71:a3:5e:1e:3a:6d:0d:2a:a7:fd:30:6d:8f:03:c5:ab:
a9:2b:92:81:c4:4f:05:81:ac:f5:e8:17:35:47:28:96:cf:45:
55:1c:9a:b6:56:52:df:46:ed:9b:64:da:f6:36:a0:d8:69:c1:
cf:d9:64:e7:a1:cf:c1:cd:65:07:79:48:e0:48:82:f8:fd:98:
e4:7f:be:10:cc:c6:75:13:e2:a1:9d:03:97:e4:79:5f:b7:7d:
b4:ec:03:ba:73:6d:d3:1b:e7:42:06:7f:0b:7f:45:23:74:29:
07:a3:a8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:00 2025 by rpki-client