
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: g5EO5pN9BrrgcgcLEiGyoeN8wOD1vmNI1OR6KgxeugU=
Subject key identifier: A5:B2:AF:7A:38:13:9E:43:67:1C:0B:BA:0F:DC:FE:19:B2:F3:33:22
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 0199FB0EE8839EEF1AE1927EC9B549B90D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 0181
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: du9Q9bL5BOWedJK9qhvdrfuTC6E.roa (hash: yMHVcCfWCQ3tfd7XRi0bmpwcyLFeWTkztgI3BA0HK6Y=)
2: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: RYZ2rKhzczTcR2vGgYoolv9yFOnQTDWXRDEeEwBbMR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e8:83:9e:ef:1a:e1:92:7e:c9:b5:49:b9:0d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=a5b2af7a38139e43671c0bba0fdcfe19b2f33322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:ec:26:0f:32:2a:98:4c:76:43:da:53:d5:
ba:2c:1c:ae:e8:f3:8e:ea:39:cf:85:dd:76:9e:23:
dd:e4:95:ab:5e:f8:64:13:48:da:91:85:f4:3e:d0:
fa:c1:d2:25:ec:8d:9a:4c:08:77:43:4a:7a:89:b0:
28:f5:82:67:9a:04:f7:c4:ba:5b:9b:e1:4c:d0:33:
f6:f0:44:9c:87:7e:f7:d0:23:0b:85:4e:e8:71:63:
1a:d4:0a:47:5d:20:e6:ae:21:b0:a3:43:d9:a6:c8:
06:64:e5:cc:af:de:37:2a:43:21:4b:53:14:2a:06:
c9:cd:87:b2:26:e3:bb:49:b7:19:cb:76:9e:f3:22:
56:7d:09:bc:d0:ce:38:b2:3c:4b:8f:b5:fd:8a:30:
be:10:ec:3a:1b:28:c6:95:c4:1c:ca:7d:59:8e:ae:
0f:d6:4e:8d:f7:03:31:72:78:e0:51:13:db:f8:1d:
bd:48:52:46:dc:cf:c3:e2:ed:1b:26:83:ba:13:b8:
55:c6:1a:22:a7:8a:6f:1c:66:3d:69:b1:7b:41:e5:
e7:2a:68:4e:c6:22:b6:b5:59:da:20:21:d5:f2:4a:
03:8e:19:13:21:26:61:f6:4e:49:53:f7:f0:25:66:
8e:f0:91:a8:c1:14:31:9f:bf:95:bc:03:e9:d8:a7:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B2:AF:7A:38:13:9E:43:67:1C:0B:BA:0F:DC:FE:19:B2:F3:33:22
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:7e:cb:ab:28:5f:fa:a6:93:25:df:8e:12:33:c8:41:cf:
c8:b3:d6:f1:cd:38:1f:78:4b:c1:36:54:31:e4:28:cb:ef:11:
28:ce:d8:a7:ac:d7:df:db:02:27:09:ae:6a:a0:bb:74:5b:08:
ab:94:5a:24:2a:3f:eb:67:54:cb:f7:ce:b4:f7:13:22:78:06:
61:00:e8:69:b7:04:95:42:aa:78:86:e4:4d:6c:f3:c4:c6:f1:
0d:3d:dc:c9:1d:7d:70:96:70:72:72:49:71:f4:b2:3f:82:5e:
6a:f0:4e:cb:d8:66:89:17:df:f3:a1:c1:24:5b:aa:53:8d:35:
29:3d:f1:c4:e4:f8:d7:8f:db:60:80:29:68:f1:f5:80:0e:cd:
3d:05:2e:de:d1:6e:2c:68:f7:90:41:61:de:44:8e:d0:63:88:
77:36:1c:34:8c:cf:51:18:9f:b0:08:d5:82:a0:d7:68:b4:43:
0d:33:99:4f:9c:c2:d6:14:eb:07:b2:6f:61:f8:65:f3:26:8c:
78:1a:7f:ee:31:36:a9:87:27:fc:28:11:8d:b4:54:9c:44:f9:
e2:fd:bd:ed:42:d6:6e:c8:78:63:c7:3a:3e:07:c1:c5:79:78:
ef:cc:0b:4c:2a:72:df:f1:ac:89:3b:b5:8e:09:be:e0:38:17:
97:6a:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:11 2025 by rpki-client