Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: bvAh3E2t62Al8q28VCGIrIU8cOHmuG9BlJs8/tZnQ5o=
Subject key identifier: 69:BA:CF:76:22:05:23:BE:8B:7C:76:27:F4:23:91:8B:BF:E4:4E:25
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 019A71B8E1B60A31F5AF6BD6F01AE071049E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 146A
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: dAVSxn9A98KVLUy6EVl5K32SF7o.roa (hash: SrvH5FePM3edQXYJk2ogbac68Gns4DWibjSZvY3sGPk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: UqITVULDWk5JFRM/aYEoD/UFamZsUGxioR4WNA3o8/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e1:b6:0a:31:f5:af:6b:d6:f0:1a:e0:71:04:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=69bacf76220523be8b7c7627f423918bbfe44e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:44:e2:ea:17:77:9a:4d:a4:d9:fc:49:28:
cf:c6:55:7a:03:56:df:06:0a:fe:8d:ed:8d:e2:96:
79:15:86:93:53:44:b9:19:1c:c8:6f:51:1b:b3:6b:
65:84:a0:f4:7d:19:5d:fe:c3:53:a2:b3:d7:b4:fa:
94:ed:f2:00:92:0a:f9:0a:02:d4:50:c6:87:7d:73:
9b:00:94:b6:3e:1d:17:e7:0f:dd:fb:f9:7e:6b:3a:
ff:dc:29:fd:b5:e4:a8:75:d9:02:d7:07:c2:00:69:
7c:7d:ec:2e:dc:e5:20:92:06:78:30:6e:3a:a9:3d:
43:3f:6c:6b:b7:19:e2:b6:d0:ca:d2:c9:38:1b:36:
0d:a0:81:07:f0:f7:97:ca:33:6f:db:84:42:bf:c4:
6d:07:75:08:83:89:6a:ef:81:84:f0:f9:27:8d:07:
3d:2e:5e:66:9e:71:f2:99:57:bd:6e:4b:fc:66:93:
47:f5:ab:fd:f5:8e:ac:7f:08:ba:f8:7e:a1:79:3a:
42:fc:0d:4d:a1:76:b4:49:03:aa:35:cd:2d:36:7b:
05:03:8d:17:d5:25:cc:b6:67:4d:1b:43:3e:fe:a2:
f4:58:bd:3b:b4:0b:a0:36:ea:b6:90:87:40:a0:e7:
95:52:d8:4c:08:5a:b1:62:f8:37:34:e7:f7:46:6f:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:CF:76:22:05:23:BE:8B:7C:76:27:F4:23:91:8B:BF:E4:4E:25
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b2:0b:2e:a0:c8:f3:8f:dc:14:b8:1b:7f:5c:1f:de:af:ab:
9f:ca:42:4b:54:63:7f:3a:26:f4:22:f1:8c:d5:0b:2e:39:fa:
44:2c:82:86:d8:70:31:ea:bb:ea:9a:e2:fb:e9:14:f5:72:b6:
d0:fd:33:36:7d:d4:a2:0d:f7:24:32:6a:0b:6c:9e:cd:1d:0c:
5b:6e:da:ff:de:72:e8:98:6b:5b:76:5a:70:08:a5:7e:d3:56:
40:2c:53:62:07:0b:62:28:1d:bc:05:85:54:ac:f3:97:60:5d:
cd:df:f7:a2:36:b2:93:a4:3f:2d:77:df:04:c3:cc:30:e9:e0:
04:36:e9:ce:cf:a6:bc:ee:e8:9e:9b:94:c3:68:0c:8e:ea:74:
08:03:2b:aa:88:e2:fd:48:2c:25:67:6c:fd:64:4f:c4:c8:03:
b3:7d:1f:7f:33:52:64:20:cc:56:31:af:85:11:4b:5d:03:b4:
20:19:ec:da:d6:e7:7a:6b:ab:6b:72:b6:4a:89:8e:34:4e:9f:
98:a3:88:1c:e0:8a:5f:48:26:57:cc:b9:89:44:d9:13:08:ad:
06:7a:71:f5:fa:9f:de:4a:49:95:41:f1:71:79:b7:ce:5f:ef:
4e:5c:af:0f:82:8b:02:89:53:f5:6c:05:7e:b3:a4:25:e9:dc:
92:b3:3d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:19 2025 by rpki-client