Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: Qo/DCFkkQcYs/G6lhroBX314pTw/VnibPFYn92Rv6IA=
Subject key identifier: D3:A1:3A:0D:4B:14:45:EE:7C:0B:80:8B:B2:0B:90:FC:E5:67:65:1D
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 019A70A565102F45DEFE4B3350735315A93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 142E
Signing time: Tue 11 Nov 2025 02:01:18 +0000
Manifest this update: Tue 11 Nov 2025 02:01:18 +0000
Manifest next update: Wed 12 Nov 2025 02:01:18 +0000
Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: owQgyyFbHFhqsCd3NW38ipk/bB+y6I920TPMxYuT5ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:65:10:2f:45:de:fe:4b:33:50:73:53:15:a9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Nov 11 02:01:18 2025 GMT
Not After : Nov 12 02:01:18 2025 GMT
Subject: CN=d3a13a0d4b1445ee7c0b808bb20b90fce567651d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:a1:dd:2f:7f:d3:b1:6d:b6:48:88:1d:50:
90:15:73:7e:52:f7:f9:13:c2:b9:07:c9:6e:46:80:
9a:ac:cf:92:31:18:bb:ce:0b:24:20:91:ae:cd:bf:
ed:c0:cd:dd:56:5b:28:47:4b:0c:0a:8d:63:d8:3d:
56:2e:0c:bc:0b:0e:71:15:9f:06:fd:9f:57:1a:d5:
cd:bb:59:ad:be:54:f3:c3:2d:53:84:29:8d:49:6d:
0c:34:5e:a0:19:52:12:f3:ad:d6:13:55:01:7c:ae:
12:d6:dc:b2:ff:fa:bc:9b:f4:65:80:29:44:f8:e5:
0e:97:22:68:18:de:e5:72:ac:9c:be:ff:85:d1:d2:
c4:99:2f:09:27:66:97:e1:e3:d6:b8:7e:12:16:86:
22:b1:9d:4f:fb:16:09:19:16:0f:d0:66:4f:50:8f:
ab:ac:93:a4:07:9b:8e:23:0f:74:9e:3c:7d:07:6b:
db:cd:f2:cc:3f:d4:95:bb:9d:b0:99:2c:42:23:e4:
d3:9d:69:c5:8c:c5:c6:a6:a6:aa:93:f7:44:6e:76:
1d:6c:bd:83:d0:f0:eb:b0:8e:93:2b:6c:f6:62:0a:
8f:14:75:f0:85:88:29:82:91:44:3c:d0:d6:22:64:
e6:72:aa:f0:2b:e9:b9:16:84:4f:d8:e4:94:c3:a1:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:3A:0D:4B:14:45:EE:7C:0B:80:8B:B2:0B:90:FC:E5:67:65:1D
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:03:45:d2:a5:f3:76:c8:78:6d:bd:12:b7:e3:c1:cc:3a:32:
ee:66:a0:58:e2:3b:b0:3e:00:9d:9a:4e:9f:5d:26:01:f4:68:
4c:d7:b9:7b:9f:b4:63:b6:de:9c:17:de:08:66:79:69:b0:57:
28:67:b6:01:4f:b2:44:a6:42:e3:26:e0:12:cc:7b:1f:d8:5f:
0d:7c:f3:a5:0d:ed:25:4c:19:75:4e:1b:33:66:99:5c:a8:03:
ea:fa:a7:65:39:5e:ac:f0:d5:0c:8e:15:d7:e7:2e:4f:a7:5f:
c1:5d:8b:4d:1d:1a:de:8e:b5:00:d5:4d:35:de:46:80:cf:40:
e9:95:ef:76:a5:56:4a:30:b9:e7:20:56:49:b2:4b:52:a6:6a:
fe:9c:48:c1:39:50:ba:65:ef:ae:12:f5:5e:2f:e2:d8:e2:f6:
94:5e:22:cf:24:6c:91:16:e5:af:45:2d:5f:b2:52:b9:b9:03:
e7:bf:8f:7c:3c:d5:54:36:ed:68:42:0e:c7:d3:84:25:49:6d:
e0:dd:fb:73:98:80:00:71:e7:e8:68:7d:d5:73:a1:f6:71:2a:
d1:16:64:91:36:56:ba:58:fd:30:53:17:5f:8c:e5:cb:45:6e:
83:45:da:60:b7:c1:95:30:82:8a:a2:29:0e:2a:ba:76:62:db:
ff:e0:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:09 2025 by rpki-client