Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: 6ce+A5cGJLIbnjShrEgDg66dxGviIWGTc2edgGtAL3g=
Subject key identifier: AA:45:12:A5:BF:38:2E:5A:58:81:3A:58:F2:7E:BD:25:02:5F:AA:6C
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 0199FD6B38F38535638E9CF61E0C70649B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: 0369
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: 3Ok6gGseTezBBc81UrrTEqvhGjQygzSIIcHCx2OQTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:38:f3:85:35:63:8e:9c:f6:1e:0c:70:64:9b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=aa4512a5bf382e5a58813a58f27ebd25025faa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:fc:ce:79:11:2d:bc:37:c5:64:40:c7:96:
60:04:ea:f8:10:89:73:8b:7f:b2:2f:c2:6a:6e:1a:
7b:29:8f:e9:cd:d9:52:6e:39:f1:0d:29:10:bb:08:
2a:a2:6c:94:6d:3a:5d:9b:41:ab:51:07:8f:a6:ac:
f6:aa:a2:58:c1:8a:3f:50:a6:db:1d:7c:f0:f7:00:
c9:4b:88:d8:0d:e4:99:bc:1f:54:c7:41:98:ce:fc:
70:7b:7e:39:9c:98:8b:e1:be:05:7d:65:f4:7f:59:
a0:ed:70:30:e6:ba:1e:8e:9c:8e:76:30:3a:2d:94:
a3:2e:17:93:99:90:48:fc:e6:1f:3a:fc:6e:c6:cc:
94:9d:51:ec:fa:c8:ec:31:6a:2a:2c:48:0d:bc:0e:
f4:0c:85:f1:c4:37:18:4c:b5:60:28:ee:08:fc:4c:
14:52:ad:93:50:8c:d6:37:ed:80:10:4a:4a:55:97:
dd:9c:7b:4c:43:bb:ab:88:cd:af:fb:2d:b4:aa:a3:
7e:4a:1e:f2:4c:c3:15:9c:17:05:7f:3c:dd:f7:09:
ec:6b:8c:0a:38:df:04:0a:ac:6d:32:83:ea:26:d8:
67:dd:1e:5c:0c:52:71:f9:13:e1:f4:f0:3a:b7:7e:
a5:a1:47:c7:2d:ab:4a:cb:2a:54:81:0f:dd:e4:c2:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:12:A5:BF:38:2E:5A:58:81:3A:58:F2:7E:BD:25:02:5F:AA:6C
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:9f:02:a7:9c:b2:04:98:72:08:23:22:2c:cc:da:55:8c:92:
e8:59:47:32:1e:c4:c3:74:18:82:63:b8:51:48:19:ca:f9:dd:
94:de:3e:67:83:4b:12:4f:cd:b2:25:14:a9:30:ed:1c:44:60:
c0:59:6e:6b:23:b6:ec:36:1a:e7:cd:9b:99:f3:45:02:a8:e5:
14:63:9f:23:e9:bc:b7:c5:a5:68:e2:03:76:4a:af:5e:f2:45:
02:ed:b4:bc:39:6b:0b:4b:28:6b:4d:77:d4:f4:c9:50:09:fb:
3f:cb:c1:46:56:f3:09:c3:e8:bc:35:73:ff:2a:dc:76:dd:55:
39:bb:41:92:d2:62:a4:5e:ee:0c:2c:8a:41:d1:2a:61:62:44:
a8:8c:b5:14:ae:77:f7:9d:2c:e6:54:1a:aa:d6:5c:8c:7b:08:
ea:5f:ec:9c:95:a2:e5:2e:6a:1b:7b:33:ab:56:76:d5:4e:df:
61:04:4f:ac:25:e8:8f:31:0d:ae:fa:79:c7:61:b2:11:19:cb:
21:b2:71:91:17:61:ad:d6:59:b7:6b:a2:87:ad:f8:f2:d4:d3:
7b:9b:0b:78:32:80:57:51:a6:6c:cc:23:af:16:53:03:4d:ec:
58:d9:65:7d:43:a0:e5:5e:ab:ff:b7:bd:9d:72:86:99:d6:da:
85:cb:29:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:48 2025 by rpki-client