Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: 1mMkL5Gu9YqaSwe+jZ/MGXwTsrgBZxcefQHgV89EBug=
Subject key identifier: E4:A8:70:DD:51:C6:8C:8C:9B:32:7C:CE:6B:52:FE:8B:CE:F4:BF:88
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019A7225CF35688404CA87A6593D5D1E831F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0DB4
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: oiux0O74/IBQlec6lW1uiuAYWP3XlXtG/pBqcFX6+SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cf:35:68:84:04:ca:87:a6:59:3d:5d:1e:83:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=e4a870dd51c68c8c9b327cce6b52fe8bcef4bf88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:32:0c:bc:77:1d:ef:28:32:83:b7:1b:3c:
22:17:03:91:50:ab:cb:f4:b2:1a:13:3c:15:1d:ed:
11:8b:41:ae:39:6e:d0:5a:e3:b7:df:45:16:f7:c5:
98:0c:d6:df:9c:ac:27:fd:c9:0c:54:7b:8f:9b:70:
56:b8:2f:ee:81:4f:71:30:94:d8:38:cc:a8:f0:da:
b6:6b:d2:5a:d5:98:3c:32:5b:61:35:c3:4b:4f:ad:
75:5a:c2:ad:24:ea:8d:a0:05:89:e8:bb:d2:69:98:
c0:39:91:62:42:75:ca:07:69:b0:4a:a8:78:d7:6f:
d5:e7:50:9e:68:22:f4:7e:4d:2e:5c:5e:b4:6a:4c:
79:6f:21:f3:f7:0e:2f:ed:3c:54:e9:f0:73:38:1a:
e5:35:27:32:19:05:f7:82:db:28:65:57:fb:f6:29:
6f:c1:0b:65:7b:8d:bd:e4:95:b1:aa:8c:79:62:6c:
fd:33:a5:12:56:af:17:95:1f:9d:14:27:c5:d6:1e:
93:e3:37:e9:38:a0:16:09:70:ce:75:55:1b:cd:ba:
f7:2c:78:2e:99:cd:21:b1:e4:8e:59:94:45:fe:a7:
f3:0b:1f:50:17:ae:ce:81:8e:bb:08:4b:da:f1:4a:
97:56:34:5d:b2:14:cf:a5:8e:ee:93:b6:d5:2a:6e:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A8:70:DD:51:C6:8C:8C:9B:32:7C:CE:6B:52:FE:8B:CE:F4:BF:88
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:89:28:7c:75:78:3a:9d:6f:1a:de:ba:98:69:cc:be:af:4d:
95:19:f3:56:aa:53:58:6e:92:7e:0e:48:f5:08:3d:a5:66:0a:
1a:f8:ce:81:fe:c7:70:0a:5c:6b:dc:5e:eb:b4:de:fb:b3:98:
a1:8a:17:d8:4a:2d:97:11:24:b3:3a:30:e7:4e:da:d3:2e:49:
6c:c4:91:c1:1b:9c:6d:40:6b:90:ff:b5:41:35:c5:50:19:cc:
35:33:ba:fd:df:35:bc:7b:91:cc:09:09:1b:d1:99:e3:d3:12:
f9:fd:35:c3:f6:a7:a6:ae:07:e9:26:3a:78:54:70:7d:7b:51:
59:cb:0b:83:8a:1a:7e:46:68:4c:23:36:d4:53:58:f6:d9:41:
da:9b:f5:ec:60:b3:72:2c:7b:89:cf:3a:8a:10:b4:e3:15:90:
9d:85:09:89:1c:74:85:e8:7c:88:ef:c7:5f:97:8d:31:67:6c:
dd:3e:b6:ae:6a:b1:da:4c:a3:b2:77:4d:31:7a:d1:0e:b4:79:
ce:30:b2:31:62:c2:27:31:e6:9d:11:c5:4a:2e:8d:e7:0c:d7:
ad:f5:a5:91:3d:e3:87:84:5a:a6:72:c1:5c:73:6f:13:d7:fe:
f1:52:8e:f4:da:0f:e3:e2:bd:f4:2a:bd:b4:5f:26:ea:9f:d4:
f5:16:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client