Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: v/lNDm/9OtfG0TFgdKiogrq3T14V0FutPhrhEADjeZA=
Subject key identifier: EF:45:E3:4F:71:E5:C4:6E:D8:BD:FB:F1:CA:D2:DD:DC:63:73:89:1D
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019A1DD1249541F9126E0FE9F9668EA5A019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0C36
Signing time: Sun 26 Oct 2025 00:00:36 +0000
Manifest this update: Sun 26 Oct 2025 00:00:36 +0000
Manifest next update: Mon 27 Oct 2025 00:00:36 +0000
Files and hashes: 1: cTUW6h8O7oJIMmgLFdy8XjEMwQM.roa (hash: GWLeGo5Tx1NQYnIt9PV3FBH+YZ+jq0YpS9g5boQS2IE=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: UDDQMHpOZcn8030G616e/SM5oSBt2uzJxlhADtSK9B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d1:24:95:41:f9:12:6e:0f:e9:f9:66:8e:a5:a0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Oct 26 00:00:36 2025 GMT
Not After : Oct 27 00:00:36 2025 GMT
Subject: CN=ef45e34f71e5c46ed8bdfbf1cad2dddc6373891d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:b2:7e:1d:34:d0:5c:0f:f4:0b:92:50:8c:
4e:09:12:ea:9f:3e:9f:5e:87:ed:d6:9f:ea:3c:6f:
31:9c:e3:75:09:2d:34:65:4c:94:24:14:a0:cc:00:
e8:dc:eb:0f:41:76:06:d9:91:c0:c9:94:03:45:f8:
b3:37:4b:84:f1:b9:50:40:6a:56:e5:c4:d0:cf:fb:
5b:b4:51:21:c8:21:af:e1:7f:50:71:41:f0:bd:20:
0a:e2:bf:42:5e:e1:99:ed:41:2a:46:b1:cc:44:26:
1d:8d:58:81:b6:47:e5:aa:f1:f6:99:fd:77:17:63:
65:11:20:8c:3f:47:55:25:37:45:8a:11:d6:6d:cc:
f1:2e:8a:07:d1:d2:9f:c7:17:6e:33:2d:ec:01:e7:
32:5e:3d:20:00:e1:fe:78:f2:09:1b:c9:c2:81:61:
f3:5a:38:10:35:a0:d4:bd:ef:7f:9f:c4:d7:b1:84:
60:14:3d:67:86:92:b8:7d:54:b2:f0:62:dc:3b:88:
41:7c:f7:df:d8:77:cd:e7:32:63:e0:c0:10:80:a7:
9f:c8:be:54:de:d8:38:b5:11:ce:18:6d:d1:dc:99:
fa:20:2b:87:91:b4:c1:72:44:bb:84:7f:7c:70:73:
10:70:30:d6:99:d1:2a:94:c9:c8:f8:ce:e6:32:11:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:45:E3:4F:71:E5:C4:6E:D8:BD:FB:F1:CA:D2:DD:DC:63:73:89:1D
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c8:e1:4b:fa:7e:d5:54:29:9a:6c:0d:dc:a4:06:48:5c:25:
e3:6a:eb:3a:59:7c:7f:1f:00:bc:48:1a:14:37:30:10:ab:a2:
05:52:d4:c5:a9:a7:42:d8:95:3f:50:fa:a7:de:d8:a3:3f:5e:
64:57:24:8c:7c:4f:66:14:5c:ce:74:b8:61:92:5a:db:5f:23:
8f:74:78:88:33:97:e2:58:b4:75:33:5f:c9:36:be:eb:23:4e:
e4:30:18:2b:d2:db:c3:e3:cd:a3:59:58:ab:17:1f:2b:32:a6:
ee:f8:fd:f2:30:0f:11:1b:00:54:9f:e8:df:26:70:4f:a7:15:
e3:d1:a3:b4:02:f4:63:0c:cd:9d:e6:d5:f2:50:95:c8:c2:b5:
73:5c:f7:1f:1d:d5:90:3f:c6:25:54:48:d3:a9:db:1f:b8:22:
25:af:a8:35:b4:32:2d:2f:de:d3:d5:85:50:d4:5d:22:63:02:
82:99:03:eb:3f:34:63:17:d7:d8:a9:8a:85:a7:e4:a3:08:42:
02:1a:a8:12:27:2b:d9:82:ed:a7:55:d5:1c:cd:d3:7d:b4:ca:
b5:1f:d5:53:61:3c:e3:61:14:d4:a9:52:dd:4a:67:d8:8a:44:
98:fb:88:42:5e:a8:e8:f9:fa:5f:5a:58:d5:6c:b8:eb:a2:bc:
8c:5d:80:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:51:26 2025 by rpki-client