Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: 3R4+uSXY5c3hw+xAzktD49hrq11h6VkgNoYPaLjTpDs=
Subject key identifier: B0:0E:C3:DD:46:4F:2D:0C:D2:32:2A:CD:DE:5A:C1:F2:A8:D8:2B:5E
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 019A72259F0D41DFEC2B6D7DBCA8D69B1313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 157C
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: ix3gamO8KbaqxWeojDsSyd/GfwpO4TjHuJwecWc1lCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9f:0d:41:df:ec:2b:6d:7d:bc:a8:d6:9b:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=b00ec3dd464f2d0cd2322acdde5ac1f2a8d82b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:e6:3d:5e:4b:ca:4a:a0:36:03:70:56:4e:
f5:d2:6f:fe:3d:10:3c:17:71:06:96:d0:ca:ef:82:
65:5a:45:d6:d1:62:8d:3b:68:6d:82:e6:03:40:e1:
b8:e4:96:7e:a6:3e:42:cf:e0:96:32:4f:ff:cc:12:
13:04:b4:47:b3:7a:78:cf:67:fc:ef:0e:98:8e:f2:
b0:88:6d:8c:ce:81:0d:85:c2:44:55:9e:40:d0:29:
ad:e8:b3:0c:bf:3f:f5:e0:0b:a2:4f:bf:8e:06:fe:
3d:87:fc:80:af:55:01:21:fc:2d:c0:be:70:10:7e:
be:e2:a7:21:fe:e6:ab:5e:69:74:6e:e3:fd:3a:bb:
cc:5f:d6:68:60:05:1f:b6:69:68:92:b3:48:9e:b1:
42:37:2d:e7:5c:a3:48:12:ae:32:79:ab:8d:e5:ff:
ec:d0:a9:36:7e:70:b0:a1:7c:e1:ba:20:18:75:24:
54:9a:ab:1d:c9:4b:a6:4a:d6:66:57:c6:0d:53:63:
1c:82:4c:15:8b:69:3a:43:5f:06:98:01:00:c5:41:
83:ed:70:76:3b:72:2a:03:4f:82:f7:cb:06:3e:32:
2f:66:e1:d0:2c:12:b4:07:a7:ee:f1:50:96:57:e7:
47:43:e5:cc:8a:ca:12:8a:ee:dd:6e:b1:83:35:83:
e1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0E:C3:DD:46:4F:2D:0C:D2:32:2A:CD:DE:5A:C1:F2:A8:D8:2B:5E
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:25:a7:58:67:10:31:32:ab:15:9d:a2:44:91:65:49:dd:a6:
24:6f:76:c5:b8:36:1c:c0:4f:04:10:19:27:19:7f:e8:83:90:
26:fc:a9:87:c2:73:74:88:35:08:96:86:83:38:e0:43:dd:6a:
a9:80:db:6c:a1:e3:0a:0e:e4:fd:74:2d:2c:7f:d5:ba:6a:3a:
3f:01:44:04:d6:12:b6:5f:64:cf:c3:4b:c8:89:69:ee:12:be:
f9:91:75:75:fb:0a:df:df:a4:e6:ec:16:f5:49:18:ab:1c:22:
fa:53:d6:46:43:04:7b:8f:b8:81:1b:eb:fe:4d:1c:7b:b1:22:
5d:19:00:c1:23:5a:c0:52:d6:4e:b7:22:9a:11:df:e1:87:75:
e7:fd:a5:8f:50:74:c5:f3:a8:51:2d:89:ff:37:38:ac:af:8e:
c8:e9:41:ab:8e:f3:f2:a1:54:b2:16:b4:d0:6e:b7:d2:59:09:
67:85:62:97:85:78:e4:90:41:a9:e3:99:d0:ba:a8:79:d8:b3:
27:8c:e2:6f:20:05:a1:39:9b:e7:48:dd:41:12:ef:16:f8:0e:
23:16:cd:59:5c:89:38:60:62:df:0a:d5:74:2e:0c:85:d9:8f:
26:de:22:2f:d9:b4:d7:7b:c2:4c:8a:f5:e1:ce:e9:8c:05:6e:
00:6d:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:48 2025 by rpki-client