Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: aQDl2zPnq4CzKJ0QaiKnMpMj0jQA5oJnNIEGSgbhZC0=
Subject key identifier: 13:17:CE:A1:49:8B:FE:3C:72:94:53:8E:C0:B0:A6:BB:3B:0C:0A:0B
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 019A1A6258C0A8A6DA30EB9B7D5009331748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 0548
Signing time: Sat 25 Oct 2025 08:00:44 +0000
Manifest this update: Sat 25 Oct 2025 08:00:44 +0000
Manifest next update: Sun 26 Oct 2025 08:00:44 +0000
Files and hashes: 1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: K86lMV2+C/4vklhhveYxdf7E69Ak8B4D4985k0bLA98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:62:58:c0:a8:a6:da:30:eb:9b:7d:50:09:33:17:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Oct 25 08:00:44 2025 GMT
Not After : Oct 26 08:00:44 2025 GMT
Subject: CN=1317cea1498bfe3c7294538ec0b0a6bb3b0c0a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4c:0c:36:a3:54:a8:7e:08:4a:1b:09:f2:5c:
fe:7d:ae:74:74:d0:bf:3f:20:e4:d5:a6:c1:17:8d:
79:12:b7:7e:41:be:81:3d:f5:38:ff:1b:89:1f:4f:
13:7b:d7:ca:d8:27:01:e6:5c:e5:c8:51:d3:16:b7:
f2:d3:7b:76:ba:cd:ac:c6:e0:7e:be:8b:45:fb:7b:
7c:1c:f3:0c:e8:6d:ce:23:d8:66:49:87:a4:2b:ba:
a2:2d:32:c1:57:9a:17:1c:81:16:a7:9f:ae:fd:2f:
12:88:c5:1b:2b:22:9d:59:12:0f:98:78:fc:6c:34:
5d:f1:1c:27:94:89:b0:45:63:08:d8:c9:ae:92:b5:
91:7e:b3:46:2d:17:0b:5a:70:d4:a0:52:4d:98:87:
43:ea:fd:06:a9:2c:df:e0:ce:d0:50:5c:71:fe:c2:
ed:f2:de:e4:f4:c9:ce:28:01:69:7d:ce:97:00:2f:
d1:63:fb:5e:4e:93:d5:91:ef:55:5f:79:07:bd:97:
2b:a4:0f:f5:8a:5f:34:30:6c:79:25:36:75:55:54:
fe:39:b9:c6:e4:ad:58:21:7f:5c:bf:08:d1:25:53:
cc:9a:54:f7:eb:24:0b:dc:c8:0b:8d:e9:84:c4:d1:
2b:3c:86:d6:09:b9:a4:81:eb:61:37:82:73:07:90:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:17:CE:A1:49:8B:FE:3C:72:94:53:8E:C0:B0:A6:BB:3B:0C:0A:0B
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:63:f1:66:21:ff:01:34:59:55:41:cc:e9:de:15:51:8f:1e:
19:61:9b:9b:e3:9f:33:5d:82:ba:46:01:72:d4:52:ff:5e:e3:
fa:46:70:e9:d1:50:cb:d5:b2:a6:b7:b6:67:a5:84:38:10:6e:
e7:0c:b2:f8:2d:dc:bf:02:c3:40:24:54:eb:fc:bc:ba:8e:14:
ba:80:7c:d3:0b:14:fa:55:61:9a:3b:2b:2e:62:17:2c:01:b0:
cd:a1:e5:f6:3d:6b:1a:ea:6f:4f:fe:3a:d2:3f:e1:6c:5a:48:
d7:92:8e:c6:eb:db:8f:06:95:05:72:9f:39:8c:69:56:23:99:
cc:a7:b6:95:0e:e4:1a:cd:62:c1:43:6b:97:de:27:86:68:94:
a6:d2:38:bf:39:c1:8b:29:6e:fb:ec:d1:82:7f:9a:ab:07:e9:
7a:aa:3c:3f:d3:6e:5d:d8:07:e9:39:d4:85:51:82:e6:5f:42:
e3:0c:a3:64:2e:e2:ad:91:42:07:9f:7a:0f:af:b8:e8:76:b0:
02:13:9e:75:f7:67:7f:55:62:79:e5:b2:ce:02:af:cb:fc:b7:
31:df:55:2d:d9:8f:b2:dd:ea:1a:2e:69:8a:af:be:1f:cd:cb:
fa:89:25:36:21:d6:1e:2a:7d:d5:b1:49:f3:7b:87:47:6f:c1:
9c:db:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:34:29 2025 by rpki-client