Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: Qyfh9q2KcObb97a5SZ2jSf35Tj8lY368CFILzF14nYw=
Subject key identifier: 56:4B:2F:C2:1E:1F:4D:D4:77:BE:12:35:C6:E6:A8:7E:4B:AC:6F:4C
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019A71EEB88D2275FE90ED74A5E9B91F8C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0E9A
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: /zb5kLEtwd6U3OzDwktwEbtIE4SNZuGFTEC3dXbv7B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b8:8d:22:75:fe:90:ed:74:a5:e9:b9:1f:8c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=564b2fc21e1f4dd477be1235c6e6a87e4bac6f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:ac:8d:95:81:6f:57:be:52:63:40:c2:b5:
50:19:24:08:b5:bf:cd:4b:2f:bd:03:90:c5:69:ad:
08:86:6e:22:90:b3:fa:be:34:f6:30:9a:f8:31:cc:
76:94:9f:7b:a5:b1:bb:ff:d7:54:35:a4:e5:6d:79:
2f:16:ff:f4:79:c3:1f:cb:cc:09:91:e0:d5:30:43:
4e:87:f9:43:ae:fb:ba:9e:0e:54:f2:cc:86:37:8f:
82:ad:19:6f:3a:fb:32:86:da:2c:13:3c:86:e9:da:
ba:96:28:32:12:b5:69:d4:e8:9d:6e:04:78:42:b2:
f9:39:8a:8f:53:4e:c4:04:66:f1:9a:51:8c:b2:2e:
4c:6b:e0:20:98:6a:fe:ba:81:1f:90:64:83:70:cb:
0b:23:17:f1:a0:a6:8e:b7:e7:20:f6:27:eb:b4:18:
c1:82:5a:ac:49:82:fd:18:98:e3:96:b4:46:34:84:
15:66:07:e4:60:46:d3:86:36:37:ec:af:43:b7:d9:
e9:01:09:7f:d4:56:d6:0e:60:ca:6e:2b:69:99:e0:
9d:63:13:22:a2:79:40:9e:f1:f2:59:63:0a:d8:be:
cd:4b:29:ce:3c:68:b8:0d:dd:40:24:05:85:71:88:
90:49:da:8c:3d:fe:cf:67:f8:48:34:d7:9b:0b:73:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4B:2F:C2:1E:1F:4D:D4:77:BE:12:35:C6:E6:A8:7E:4B:AC:6F:4C
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c0:1b:f5:09:54:69:35:5a:07:b2:62:76:3a:b2:a9:89:ea:
05:9e:8c:90:0b:64:d9:c8:04:ee:c9:3b:bd:29:2c:4c:6f:a1:
9c:12:9b:39:6b:62:ee:f3:49:6b:4d:cd:e8:68:c2:b2:21:70:
09:eb:a7:10:1f:7a:97:a7:0c:bb:14:4f:f7:1a:ce:2a:17:87:
c8:e8:e9:5e:ce:a3:cd:cb:19:90:b4:19:30:6a:c7:34:4c:e0:
fc:56:e1:be:5f:c4:83:18:4e:93:6f:b3:e9:db:6d:d9:16:71:
2a:16:b8:73:77:dd:e2:bd:57:99:e8:92:9b:92:b1:09:a0:27:
59:28:48:ba:60:15:8a:b9:0e:11:fc:98:fb:8e:48:09:1d:e9:
ea:7f:0d:bb:d8:16:c5:e3:e3:07:9f:d0:6d:de:ac:94:b6:e1:
55:fb:77:28:3d:b4:54:25:57:1c:1a:2d:a7:91:7a:c3:43:39:
49:50:a7:9a:ad:21:7e:cd:85:a0:42:a8:71:f0:ec:34:d5:90:
46:32:9b:40:fd:b3:e3:05:59:38:1d:9b:2a:1c:bf:a1:61:b6:
7a:ad:fa:1c:96:7e:26:13:c4:2f:9d:93:19:cd:e4:8d:2c:aa:
d8:d2:39:21:33:b7:a5:72:69:55:55:6b:9c:59:d2:a5:f5:f4:
46:03:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:24 2025 by rpki-client