Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: VY8GHDB/jXH0ksxyeCmd2p1tuZr7sTfEXHgCYpyclF4=
Subject key identifier: 06:15:8A:FC:1D:A1:B7:FF:2B:BC:B1:3B:B7:13:90:78:37:98:1C:A1
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 019A2930843CC66E210EA6CD61D0E97D6CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 11DC
Signing time: Tue 28 Oct 2025 05:00:36 +0000
Manifest this update: Tue 28 Oct 2025 05:00:36 +0000
Manifest next update: Wed 29 Oct 2025 05:00:36 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: Qi7rdK6yUXaN3j4Kgy+907klul43gNES5mlFuMktCOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:84:3c:c6:6e:21:0e:a6:cd:61:d0:e9:7d:6c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Oct 28 05:00:36 2025 GMT
Not After : Oct 29 05:00:36 2025 GMT
Subject: CN=06158afc1da1b7ff2bbcb13bb713907837981ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:e8:31:3f:88:2d:3d:6a:71:ea:da:e6:e6:
ec:ce:31:c1:e3:10:6d:64:5d:4f:8f:b4:14:97:98:
2a:49:3d:db:2a:ce:2d:ac:bd:a8:c3:d5:cf:3e:47:
c0:97:d7:a4:6a:d0:90:44:99:48:14:73:ff:54:fc:
33:16:1c:ad:ff:d0:2f:8f:55:1f:f1:d2:e2:72:1f:
60:5d:6d:e6:a4:d6:cc:7c:b2:71:97:51:94:fc:bf:
8c:d0:b3:b7:2c:cc:1e:aa:ae:69:4c:6e:94:eb:c0:
20:69:da:41:11:d0:aa:ba:84:9c:de:f1:53:0b:b1:
2f:22:75:1d:23:46:0a:a8:f7:1d:91:87:4a:5b:a3:
ce:d7:8e:b1:53:b0:ac:7e:d6:99:5f:77:c3:c4:52:
0a:19:a6:b2:86:3f:8e:1d:52:53:f6:a7:7f:01:f5:
6d:d5:2d:6d:58:92:2b:1d:53:37:49:23:0e:ea:54:
ce:71:f5:12:91:70:d6:a0:6b:60:a8:c0:8c:f6:42:
ef:d9:a2:42:dd:89:73:40:ed:7e:48:ad:0d:dc:d9:
ea:c2:84:6b:12:56:30:aa:7f:29:e3:89:7f:bd:fd:
07:40:ee:74:96:2a:2a:14:85:ac:fc:fd:69:49:03:
de:ed:06:36:4e:1b:9a:88:e5:28:bb:a5:12:10:d3:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:15:8A:FC:1D:A1:B7:FF:2B:BC:B1:3B:B7:13:90:78:37:98:1C:A1
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0d:d4:34:bf:44:13:ba:11:dd:63:8f:d7:45:70:0d:cf:66:
e5:72:be:4d:c3:d1:7c:de:49:93:49:2e:94:eb:97:41:2d:30:
81:81:5c:82:14:d4:74:4a:26:4e:3c:58:63:c8:67:01:9d:c6:
a2:ef:bc:de:55:e5:f3:48:57:b6:f7:67:e7:b1:d1:23:ca:50:
58:ad:92:ce:6b:a3:3d:6a:ad:4f:6c:8d:c8:42:7e:d6:01:69:
ab:f3:9f:7f:fa:8e:72:6a:3a:f8:e9:01:45:cf:d3:26:ca:ca:
aa:1d:a8:95:73:46:02:b8:89:1a:35:87:b8:e9:0e:5c:6c:26:
c1:7c:dc:b3:ec:cf:c2:86:27:21:90:14:7b:fe:99:1c:75:01:
ba:51:93:26:02:2f:ef:31:09:de:79:9b:da:3e:8d:99:bd:c0:
a3:ad:8b:e7:02:33:20:f1:d0:46:01:0e:71:d2:64:20:e9:7f:
7c:49:d3:ae:76:a4:f1:78:19:72:f4:53:8f:9b:f6:c9:b9:d2:
4b:f6:9b:0b:b3:24:49:d3:d7:be:cd:c4:70:44:b0:45:dc:cf:
eb:35:af:29:b0:5e:10:8f:ce:84:52:97:98:33:bb:2e:3a:2e:
e3:0e:f6:9f:db:38:3c:22:3a:a4:7b:48:9f:74:f8:53:4d:32:
94:95:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:09:15 2025 by rpki-client