Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: +cBT3RJCZMnaFY7y6qm32/37TEtQpPYR1JkkMVUXNBo=
Subject key identifier: C9:FE:3A:02:F3:CD:F1:3A:21:87:88:3D:57:75:49:37:86:C8:4D:CD
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 0199FE0FC372CC2EA5196FAD97F670E3FF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:09 +0000
Manifest this update: Sun 19 Oct 2025 20:01:09 +0000
Manifest next update: Mon 20 Oct 2025 20:01:09 +0000
Files and hashes: 1: ZQzI8pwKz3Y9UFOTdtU4b9ctJXY.roa (hash: m2HxLCCi/fQqzx7YAu5gwnUGUYg0wp/lcNW6PdEdels=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: bfooAW0cGX50KCx7VWrmt9FZRsRJSmWrCu+1lqzZus0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:c3:72:cc:2e:a5:19:6f:ad:97:f6:70:e3:ff:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Oct 19 20:01:09 2025 GMT
Not After : Oct 20 20:01:09 2025 GMT
Subject: CN=c9fe3a02f3cdf13a2187883d5775493786c84dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:66:62:58:3a:3c:0d:e2:c2:16:a5:78:ec:
70:67:1a:53:35:a7:74:ff:98:3b:80:ae:f1:87:83:
5b:67:2a:65:16:f4:1b:64:17:d0:60:f0:71:7c:e8:
54:ac:b6:48:1e:65:14:35:0b:20:76:8b:0f:68:a1:
4b:da:31:21:c9:8b:a6:a8:4d:04:12:f5:4b:0c:6f:
44:63:68:e8:7f:d3:a2:b3:15:7f:00:fb:31:0b:ad:
34:a9:d4:0f:72:c6:10:99:32:57:e8:f5:52:4a:12:
f1:88:c5:87:58:5d:7e:64:a7:0d:d8:5a:8e:df:24:
a2:0d:09:c3:ff:99:a8:bf:f7:f7:2d:a6:d0:58:9e:
86:0f:f1:09:c0:07:16:0b:e5:89:17:9f:2c:a0:8d:
11:d3:83:c7:38:c6:66:c1:f2:ef:23:f7:59:62:06:
e3:08:ca:f6:32:00:c1:5e:71:d3:5e:89:73:2b:9c:
98:23:e1:9b:e5:d1:ad:11:f0:85:ac:09:8c:29:39:
a9:a3:26:6b:42:fd:75:6e:df:33:07:02:ab:ff:2a:
5d:0b:b0:b3:ba:18:db:8d:00:27:0c:a9:3e:6a:1e:
1b:58:75:aa:f3:b1:e6:2b:2e:97:0b:72:96:f4:b3:
79:cb:0b:99:dd:d5:ee:03:18:5c:4a:59:d7:a0:35:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FE:3A:02:F3:CD:F1:3A:21:87:88:3D:57:75:49:37:86:C8:4D:CD
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:51:55:84:c5:96:c7:9c:b9:01:09:08:6c:85:9e:c0:ab:0f:
63:40:99:d5:d8:85:a2:51:d7:7e:05:da:e5:7f:47:1d:1d:e1:
4a:f9:8a:99:99:c2:be:b6:6b:41:38:3e:70:1c:c3:46:66:76:
bc:40:66:12:93:f8:a6:ef:35:55:52:ae:9f:6a:1d:cc:4a:e2:
c2:15:66:a9:2a:6b:bd:e3:75:7e:e2:d7:4b:21:5f:da:47:9e:
f4:f4:6f:5b:e2:a2:9c:fc:90:4e:8b:43:88:13:15:c8:55:50:
f5:1a:43:35:47:2e:4f:ad:d1:35:aa:4e:b4:dc:3f:7f:b6:f7:
28:ab:6f:32:dc:d4:75:49:99:ee:3f:d0:54:a8:f4:7b:f3:08:
70:d5:48:bf:2d:1a:f3:98:a8:20:1a:af:45:37:45:22:65:d5:
a4:c7:07:53:56:93:83:fb:d7:4e:fd:fc:85:bd:dc:6d:60:c6:
05:30:6a:f6:63:7f:c3:31:bb:3d:43:9e:39:8f:f5:35:a4:1e:
a4:2b:f5:2a:3d:90:ef:75:be:1a:d9:4f:0f:bd:70:15:94:26:
a6:ff:fa:22:ba:2f:79:e6:2a:ba:99:a6:56:60:98:e0:6c:c7:
fc:3e:d0:b3:c3:5e:25:9f:82:a9:3d:22:92:2c:a4:85:22:26:
cf:4b:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:33 2025 by rpki-client