Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: kjZlPhrWTGcv7tVu3lHprDd/BBp3so388a6P54YjCXQ=
Subject key identifier: 8F:37:62:C4:40:1F:CE:09:F0:F1:4C:EF:74:C8:3C:09:15:DE:D6:BB
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 019A71EED54AE65FA3FFF7238E2BABB9462F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 02B4
Signing time: Tue 11 Nov 2025 08:01:08 +0000
Manifest this update: Tue 11 Nov 2025 08:01:08 +0000
Manifest next update: Wed 12 Nov 2025 08:01:08 +0000
Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: oMUQS9WKb8hFo78r4SgeT15x0FsrxlBADs7BX1kp0g4=)
2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d5:4a:e6:5f:a3:ff:f7:23:8e:2b:ab:b9:46:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Nov 11 08:01:08 2025 GMT
Not After : Nov 12 08:01:08 2025 GMT
Subject: CN=8f3762c4401fce09f0f14cef74c83c0915ded6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d7:72:81:52:09:b8:3f:bf:50:4f:75:cb:12:
0e:cd:73:8e:c2:1c:c0:e3:f3:ee:aa:ff:66:61:f5:
05:9e:c5:42:95:7d:1a:67:fe:a8:fe:5b:b2:79:b0:
b3:6f:8e:7c:d1:50:92:25:ed:41:68:79:05:a8:7d:
ea:e1:a1:df:54:f9:fc:38:16:e6:e9:99:5f:c0:fa:
2a:30:d7:0b:73:6b:c1:f0:5c:67:f0:2d:06:56:9b:
5e:fd:4b:1a:a6:f5:6a:35:55:75:0b:db:55:b0:ec:
fa:ac:e8:6d:73:39:23:0a:9a:14:0c:eb:46:66:a0:
40:0c:82:57:2c:df:90:3b:bb:9b:c1:69:58:84:fc:
61:ba:83:f5:4b:74:e7:04:26:13:29:20:75:70:eb:
de:bd:57:91:ec:68:d5:d1:e3:50:b3:d8:62:a4:6e:
96:72:e2:f9:40:df:4e:05:28:c2:80:83:ae:8d:31:
ac:43:ca:42:60:f8:bf:81:19:43:bd:d5:5c:e8:89:
c2:70:5e:c4:6b:3a:71:ad:54:48:b6:b7:56:64:2c:
99:26:08:db:0f:1a:6a:32:fc:ab:36:bb:f8:6f:41:
f5:eb:a8:3b:87:a5:cf:e0:4f:13:d9:5a:e5:f9:2b:
d4:0b:ba:89:13:e6:e1:35:38:3f:5f:26:c3:98:ef:
53:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:62:C4:40:1F:CE:09:F0:F1:4C:EF:74:C8:3C:09:15:DE:D6:BB
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:59:6b:d0:64:50:b2:65:de:5c:04:17:a5:03:15:48:81:75:
6e:fa:ff:b0:b8:5c:0c:91:41:bd:df:5a:5b:95:d0:db:ac:2a:
06:5a:6f:3a:a1:dc:50:d8:45:85:41:b3:10:2b:40:ff:1b:a6:
b9:55:be:e0:eb:0f:d8:29:65:e4:6d:2c:50:20:38:b4:0a:2d:
9a:83:9f:20:72:92:4d:5c:49:7c:33:61:9e:54:81:24:75:61:
36:81:57:b3:b9:42:de:0e:21:8e:a0:56:7f:0e:e0:c8:74:a2:
c4:19:ee:7c:50:53:56:c7:e7:43:aa:72:74:09:c9:94:b8:58:
10:e6:5f:d4:ed:45:2f:95:47:96:58:32:48:ad:62:ea:a4:73:
74:79:79:f8:38:ed:df:03:2d:13:9c:75:e7:d8:dd:b6:f7:79:
b2:05:59:45:c5:44:0b:fe:ce:21:18:d4:20:37:ff:63:2e:08:
54:39:bb:8c:7f:20:3c:1e:7b:67:70:8f:32:6d:7f:2a:60:40:
8a:c0:3d:b4:10:64:4a:9a:1e:40:e1:a4:c8:d3:03:12:19:23:
b8:9c:34:7f:1c:45:66:65:e0:eb:f3:ad:98:32:f6:85:98:aa:
c9:22:bd:e0:4f:4e:9b:98:19:2b:4d:a8:fb:c3:10:c6:31:8a:
fd:70:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:37 2025 by rpki-client