Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: /ciKz/IKxez669P0jomuXF5R3TBdIf1EdMtmwLoVF7c=
Subject key identifier: 3E:06:99:80:55:60:83:98:59:A3:ED:C3:97:41:91:28:27:74:A7:C2
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 019A153BEF524EEF095926FDE2ECDBD40B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: F1
Signing time: Fri 24 Oct 2025 08:00:40 +0000
Manifest this update: Fri 24 Oct 2025 08:00:40 +0000
Manifest next update: Sat 25 Oct 2025 08:00:40 +0000
Files and hashes: 1: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (hash: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=)
2: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (hash: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=)
3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: MWvvrot+79m+bEsztaBKJT/rLdNVmfJIs1DAjDY8JXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:3b:ef:52:4e:ef:09:59:26:fd:e2:ec:db:d4:0b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Oct 24 08:00:40 2025 GMT
Not After : Oct 25 08:00:40 2025 GMT
Subject: CN=3e0699805560839859a3edc3974191282774a7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:02:7a:8a:75:ef:7b:7a:a7:a7:bf:c8:f9:f9:
69:78:84:fd:99:3b:14:75:c6:38:6d:c8:6c:91:12:
ba:c1:cf:31:bd:7b:3f:68:16:fd:f9:21:da:9f:cc:
d9:cb:5e:94:58:af:b8:73:59:e3:91:98:32:2e:36:
1d:bd:f1:36:2f:ae:bf:e4:bf:19:f6:a3:de:30:e9:
de:35:ba:8b:0b:0c:25:fc:b8:5a:7c:2f:68:28:c8:
f5:88:ed:1a:13:35:0b:bd:be:3f:75:5e:88:92:25:
aa:cd:8c:f9:33:b5:f3:d8:e5:04:b3:9a:8f:e7:1d:
2d:89:ee:f9:d9:d6:64:b3:9e:84:d2:d7:25:ff:37:
28:c0:40:fb:85:c9:c1:19:31:b3:a6:87:25:7f:25:
c7:8f:3e:1a:26:c0:a2:a1:ef:af:21:14:3f:df:e3:
c5:52:30:67:2b:60:f1:43:7d:be:01:7c:b3:c2:22:
d5:a1:d8:b8:62:da:14:54:86:a2:6a:a7:96:a1:28:
0d:e2:7b:0e:5d:58:17:68:c4:58:3f:7f:8c:32:86:
5d:b8:16:f4:d1:0e:02:62:dd:6d:ca:23:6b:2d:cb:
f0:90:0e:bb:9e:9d:6d:55:dc:54:6d:3b:92:71:f8:
97:e8:29:8a:75:4d:5b:03:a2:04:b7:3c:58:05:ca:
45:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:06:99:80:55:60:83:98:59:A3:ED:C3:97:41:91:28:27:74:A7:C2
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:54:dc:1f:1c:3c:d6:55:f5:15:74:f4:f5:d5:50:d5:33:af:
01:da:8e:d2:fb:99:06:3d:d8:93:ce:ec:44:d1:ad:57:0b:c1:
ba:70:e3:5a:d6:cb:ea:a5:bc:59:d2:01:c4:1f:73:18:51:ff:
e0:be:f8:40:d3:75:06:70:b2:c5:76:b9:14:24:1d:1e:32:a7:
2f:77:d1:9c:d7:23:f2:61:76:4a:33:f6:e7:47:d8:82:4e:97:
88:be:9b:cc:d5:95:66:c6:7b:cb:89:aa:ea:fb:32:a5:de:dc:
a0:03:61:59:19:70:aa:1d:5f:7e:5b:ce:86:c7:56:f9:f4:bd:
ff:71:c2:58:cd:96:26:ff:b8:58:d4:73:59:c8:92:de:68:5d:
3b:4e:b3:a0:14:93:c8:c5:7b:b5:7e:40:80:67:29:1e:d5:dc:
9b:6a:6b:05:bb:af:40:72:dd:84:ef:70:94:6b:4a:dc:9c:b9:
c2:6a:80:30:9b:ac:8e:d8:39:20:00:cb:c8:62:5c:87:f1:6b:
de:ae:e3:2f:ca:d8:0a:39:89:82:09:20:32:c3:58:98:db:92:
7e:6f:31:fe:97:58:e4:8c:a9:9c:8b:18:11:94:ea:ad:c6:e4:
51:10:f4:b3:93:65:1f:1b:6b:42:a8:e6:0e:18:8f:b9:db:c2:
d7:70:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 14:35:23 2025 by rpki-client