Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: MC9uTZT1kY90rF6bd6lhcN4gvArNmdgD81CWMsND25s=
Subject key identifier: 38:BC:F8:59:1B:4E:F7:F5:25:19:1D:C7:0E:43:8B:C3:68:15:C9:59
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 0199FE7E137C1520FE00C8EAD4DEB3D56D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0AD4
Signing time: Sun 19 Oct 2025 22:01:39 +0000
Manifest this update: Sun 19 Oct 2025 22:01:39 +0000
Manifest next update: Mon 20 Oct 2025 22:01:39 +0000
Files and hashes: 1: b2Ad3Pubnmsc5v7wEeiy2i9crjU.roa (hash: YMeUe949TNAn7B7dURgw/Dn08QgY72JO978X9Gd4XkM=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: Bwgq4iLgp/517G2U0jTVKX6rV+o91OkJLSt1DaiYSCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:13:7c:15:20:fe:00:c8:ea:d4:de:b3:d5:6d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Oct 19 22:01:39 2025 GMT
Not After : Oct 20 22:01:39 2025 GMT
Subject: CN=38bcf8591b4ef7f525191dc70e438bc36815c959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:26:74:3c:de:12:7c:75:8f:ba:8c:40:61:
f2:e8:00:3c:3a:d7:26:7c:e6:99:ac:68:fc:6a:0c:
2c:f7:99:d1:2b:8c:27:52:f9:fe:fa:61:73:ca:90:
34:d5:72:71:e6:97:db:6b:e4:59:51:3e:41:5b:93:
38:72:2d:5d:63:19:13:b6:dd:7f:a2:fa:6e:5a:5b:
16:58:1c:2b:df:4a:32:62:da:e3:b8:65:6b:e5:6c:
0e:91:09:54:46:8b:9e:b9:96:90:3d:11:10:43:f6:
90:af:a1:9f:fb:2a:b0:c0:fd:36:2c:d3:32:a2:99:
26:25:36:0c:8b:8a:54:75:81:de:0e:33:f4:27:ab:
16:71:ea:d5:1e:23:35:62:03:38:b1:3e:e5:c1:5c:
9a:09:5c:e0:30:54:f5:81:be:54:a4:0a:3b:3e:4c:
da:16:31:70:76:66:c6:62:85:8d:10:b0:34:9d:72:
9b:9d:27:7d:04:6b:a9:f4:75:59:ce:2f:f5:1d:bb:
cf:9b:40:ae:7f:7d:cc:c3:68:4c:f2:6b:8d:17:68:
27:1b:b2:be:81:0a:66:75:4f:ba:5c:88:b3:c6:06:
15:26:ae:af:4a:ef:14:f7:78:72:e8:9f:1f:0a:6e:
7e:fb:9b:be:0b:85:f6:a7:28:9e:70:79:77:f3:dc:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:F8:59:1B:4E:F7:F5:25:19:1D:C7:0E:43:8B:C3:68:15:C9:59
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:58:d2:70:9e:16:b4:0f:86:b4:3d:09:4b:5e:06:20:8f:e6:
f0:21:39:be:67:c9:e6:84:11:4e:55:74:9c:ba:c6:a2:76:3a:
a6:ba:ae:3f:7a:11:19:cf:64:b1:25:95:3a:e4:1f:e1:d2:08:
b6:5f:73:77:dd:5f:cd:5e:cb:5a:b8:09:25:a8:0b:12:c8:4d:
e9:0d:05:c1:97:ad:6a:c9:83:8b:7d:73:40:8f:44:c3:db:1a:
e6:b8:ae:e1:5d:ff:75:6d:21:dc:09:c7:b4:2c:f5:e9:00:1d:
7f:7f:0b:91:9c:47:59:c4:f3:a8:68:69:2c:08:0e:d7:d0:cc:
5f:de:50:2d:bd:d9:6b:35:95:4a:dd:f1:4d:00:63:33:fc:1e:
48:41:51:91:e6:96:31:56:6e:2b:90:eb:55:c5:56:9c:ed:3a:
1d:53:19:39:87:21:29:00:f6:85:69:f3:73:aa:54:2e:18:07:
fc:62:c9:92:10:cd:a2:d6:12:05:40:ae:49:18:ea:a0:1c:94:
fa:a6:0c:f6:b3:e9:41:05:38:cb:0d:4e:c2:fc:fb:00:77:ce:
08:6c:da:4f:f0:47:28:c7:9b:f1:20:29:bd:87:3c:dc:a0:6c:
f2:cc:45:86:be:76:3e:30:21:c4:20:65:bb:a1:89:09:c4:cc:
88:5b:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:47 2025 by rpki-client