Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: S/sH8UeB+Eur/oJc5qsKnW+f0SLkt1Upq/qsvakRm4E=
Subject key identifier: 53:0A:53:30:3D:62:34:7E:CF:7D:79:39:1D:64:1E:71:63:04:9F:F2
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 0199FB46329672A8602A64B7F49BC5BFF894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0FE5
Signing time: Sun 19 Oct 2025 07:01:45 +0000
Manifest this update: Sun 19 Oct 2025 07:01:45 +0000
Manifest next update: Mon 20 Oct 2025 07:01:45 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: LZu+rLmma4IaMcanLrUQm22z10ASKbzenC4Kt3p+8oY=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:32:96:72:a8:60:2a:64:b7:f4:9b:c5:bf:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Oct 19 07:01:45 2025 GMT
Not After : Oct 20 07:01:45 2025 GMT
Subject: CN=530a53303d62347ecf7d79391d641e7163049ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:30:39:1c:66:e9:3d:62:4c:a2:7f:cf:67:b3:
8b:e3:34:bd:5e:42:ec:7a:e0:40:cf:db:03:82:98:
33:f8:ce:19:58:91:f6:05:54:3c:04:ce:15:df:62:
74:b2:1d:74:c2:f6:6b:ec:6a:ae:66:a3:47:26:04:
ed:2c:a1:25:6f:04:ff:10:ca:e4:6a:68:a4:7a:ad:
f0:14:0d:14:8f:92:60:fc:4e:27:be:48:ab:a6:06:
a3:89:b0:13:af:f4:fb:da:16:25:3b:bd:bc:72:b9:
1e:48:46:c1:2e:20:fb:2f:29:cf:78:dc:f9:d9:ff:
7d:c0:32:50:2c:86:58:b3:4a:65:5e:e7:79:30:63:
70:a9:37:fa:59:26:ec:ed:33:60:3b:40:98:3e:36:
41:22:17:bc:02:e7:8b:24:3a:40:62:0e:e1:d7:e8:
96:28:d1:f5:ac:62:ba:23:3a:0b:b3:fc:14:0b:6b:
47:63:27:a3:43:88:eb:a7:dc:cf:15:1b:d3:36:ff:
85:fa:ec:29:a4:ac:da:63:de:53:1c:46:00:6b:d5:
47:e6:2f:7d:e4:41:27:8c:12:df:7e:d0:46:e7:71:
76:20:eb:fa:cc:08:d7:b8:1a:54:03:f3:8f:01:b6:
7e:ae:5c:8b:58:2b:87:3a:c9:aa:92:d8:2c:0c:1c:
a0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0A:53:30:3D:62:34:7E:CF:7D:79:39:1D:64:1E:71:63:04:9F:F2
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cf:54:dd:c4:5b:a9:32:02:aa:dc:9d:30:0c:f1:2b:91:8e:
01:34:a6:85:c7:56:a1:e0:62:75:ca:7d:ab:d8:11:51:2e:53:
6c:bf:50:ad:c4:b9:5f:51:04:b2:00:d6:a9:46:c1:e0:32:2d:
c0:85:8d:d1:2a:6d:d6:13:6f:fd:00:b9:7d:16:f7:e0:1c:45:
a2:a3:6e:b2:cf:d5:c4:64:6e:7f:00:f9:92:c4:34:57:fb:57:
cc:97:4a:d4:5d:62:2c:91:35:1a:92:4b:3d:43:33:d9:ff:fc:
d0:84:8e:ad:6c:bd:47:0a:39:ee:9f:94:f8:14:17:7b:14:29:
67:ca:01:40:a3:a3:8c:9d:52:69:e4:08:fb:e8:48:88:66:4e:
ab:a7:11:3c:e4:2d:2f:1a:88:c3:08:df:8e:5c:52:c2:4f:cf:
a2:a5:36:27:4f:f2:4b:59:2b:d1:67:70:26:64:03:60:a1:aa:
83:b3:f9:f7:9e:d5:e8:bb:69:09:77:e0:c7:d2:37:63:49:fe:
5c:0b:cb:e2:7e:4d:7f:00:67:6d:cf:02:12:d8:6b:ad:32:5c:
94:c2:fb:1c:18:7b:25:13:95:82:86:d8:54:60:17:be:cc:0f:
f2:49:3e:9d:30:c3:c6:8a:40:c4:82:0c:99:5f:cf:26:52:3d:
fb:b3:1b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:31 2025 by rpki-client