Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: 6aWkH7bqpsGhkiPHneiByu5GNbRI4Np+ryOWddPlM6I=
Subject key identifier: 87:AD:F3:AB:BE:E9:CB:7F:69:60:15:58:DD:91:1D:9A:F9:77:C8:03
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 0199FDDA7D0F172A5FB63974BA14FAD08230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 19:02:58 +0000
Manifest this update: Sun 19 Oct 2025 19:02:58 +0000
Manifest next update: Mon 20 Oct 2025 19:02:58 +0000
Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: iHFkO+kIyf+6Ejq+qX4H+oRJEP1+QTQ1nPV2a2UTwU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:7d:0f:17:2a:5f:b6:39:74:ba:14:fa:d0:82:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Oct 19 19:02:58 2025 GMT
Not After : Oct 20 19:02:58 2025 GMT
Subject: CN=87adf3abbee9cb7f69601558dd911d9af977c803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:02:e0:e3:fe:a4:10:92:e1:ee:9c:45:ed:
0b:39:eb:54:32:c4:dd:d4:25:58:26:e4:3b:ca:e6:
77:1d:3e:4e:8f:6f:22:1f:48:bc:58:a3:c2:59:a2:
79:86:ec:a9:20:24:58:8b:9f:58:83:a8:71:23:b2:
d1:b1:ee:8d:34:90:5e:0b:4b:49:d5:93:37:d3:7e:
83:53:14:aa:9a:e6:f0:59:c5:19:26:42:3b:6b:73:
5b:44:9b:61:cc:07:6f:03:9b:97:6d:04:2d:04:e7:
70:c1:ed:f0:e3:06:87:ff:6c:59:6d:d6:00:1a:fd:
68:d5:d8:46:d2:81:74:39:61:f5:65:5c:51:a2:ca:
d1:e7:c3:fd:ad:be:98:32:d8:90:16:8f:68:d2:40:
84:f3:c8:e4:b5:da:c4:2e:d0:d6:4d:c4:f2:2d:04:
b8:d8:06:28:96:78:a8:90:63:0c:69:1d:19:55:a4:
36:fc:58:13:8f:7b:47:e6:ce:d7:c4:03:2d:8c:8c:
43:6c:0a:38:c6:30:39:79:75:ae:56:fc:47:b9:68:
f7:2d:52:e4:23:2f:f3:08:c7:55:5b:8a:55:4f:29:
ce:6c:84:2a:76:ae:30:52:2b:c4:bf:0e:b8:5a:fc:
90:b4:3a:0a:69:94:57:54:1d:2a:07:61:de:e5:87:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AD:F3:AB:BE:E9:CB:7F:69:60:15:58:DD:91:1D:9A:F9:77:C8:03
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:da:bf:53:72:bd:a9:e5:ae:44:a6:68:c7:c8:f7:1c:0c:01:
aa:f1:fd:41:b5:e4:12:be:c5:43:13:0d:8f:cf:fb:6b:19:28:
cd:f2:b1:a9:4c:dd:3a:57:02:e0:6f:1c:d2:b8:00:18:a4:89:
f0:7a:6e:46:bf:b8:6a:3b:cc:da:71:f1:d6:44:25:1a:95:38:
a6:b9:1b:3f:2e:af:54:a2:ed:13:c0:c2:c5:f2:fa:b0:2e:45:
43:64:c3:01:c7:67:c4:ea:56:9b:4f:b8:b3:a7:3c:53:4c:85:
4d:71:c5:19:48:f3:39:bf:60:c4:a5:1c:91:ae:55:1f:15:bb:
6f:98:d8:14:9b:78:ad:75:d1:47:7b:7e:b0:ba:ac:e9:98:10:
b1:df:c5:53:a0:94:1c:54:e1:50:8f:ea:7e:ca:84:7a:ec:08:
57:09:bd:81:a1:03:43:d6:1f:b3:22:5f:7e:b1:a1:49:6b:8c:
51:57:a9:5b:df:77:51:c7:6c:39:5e:25:ce:5b:31:df:a1:5a:
59:62:0a:61:4d:dd:5f:9e:30:4b:5f:8d:c4:5d:6b:c4:c6:af:
82:e9:44:2e:26:ad:3b:c4:3b:6d:a1:d9:fa:e0:50:08:0a:96:
96:d6:29:6c:c0:b8:2d:e9:e9:51:bb:78:68:0a:89:17:df:03:
ca:9f:e5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:34 2025 by rpki-client