Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: QX8QUJ74YW6OFDOtzr3snW65auxnQNtXDVARvCHImSw=
Subject key identifier: 85:97:42:78:A4:72:0D:9A:35:69:66:E7:1A:43:EE:1E:7F:2B:6C:5A
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 0199FDDA463A77C88F3FF244280FC8A26CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 0511
Signing time: Sun 19 Oct 2025 19:02:44 +0000
Manifest this update: Sun 19 Oct 2025 19:02:44 +0000
Manifest next update: Mon 20 Oct 2025 19:02:44 +0000
Files and hashes: 1: R0bDzTZMsFHuXIVscoarjoJ_wTM.roa (hash: 9HD9aEc03IRoCnCCjg3LQXd12HLkqdNv34Xu2fVDTFY=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: 0ppFlg5ggbbzhQMss2CejychuV3dsEqZ/8jjeXJHgPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:46:3a:77:c8:8f:3f:f2:44:28:0f:c8:a2:6c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Oct 19 19:02:44 2025 GMT
Not After : Oct 20 19:02:44 2025 GMT
Subject: CN=85974278a4720d9a356966e71a43ee1e7f2b6c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ff:c3:2d:ac:06:60:6d:02:e1:5d:be:d7:a5:
4a:54:91:e8:8b:7f:91:6b:d5:0b:6e:fb:ed:87:c6:
d3:24:ee:71:d0:28:a2:59:71:07:c5:dd:d7:d1:08:
de:20:90:c3:14:e2:80:6a:4d:83:b0:3a:74:67:9c:
d6:de:35:80:22:f1:a6:dd:57:8f:c7:e1:8e:5d:b3:
01:62:a5:e5:38:01:55:67:80:13:1f:c9:77:8f:b0:
75:03:2c:2f:2d:46:66:8f:2a:95:39:e4:0a:45:a5:
42:64:1c:40:9f:cb:dc:26:13:ab:0b:e7:80:8a:fe:
27:89:54:e4:36:c6:33:15:99:bf:fc:09:04:30:c9:
a9:a3:30:7a:59:89:49:e0:78:ba:1f:62:ad:be:56:
20:26:44:2b:f4:02:4c:f6:78:d3:2b:19:49:cf:84:
db:ff:2b:41:19:06:f4:f3:ff:74:d2:7a:22:d6:81:
89:2e:31:e2:3c:56:27:36:64:d8:57:1c:ca:92:97:
eb:a8:f9:91:99:ba:10:54:8e:fc:da:65:b5:0b:b2:
ed:b2:7d:58:e2:04:e8:1a:87:70:94:a9:44:10:56:
5c:34:2c:ad:91:47:5d:ee:e6:f6:9f:12:38:d4:1b:
87:ba:e6:75:95:f2:19:03:b1:50:f5:54:a2:91:ad:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:97:42:78:A4:72:0D:9A:35:69:66:E7:1A:43:EE:1E:7F:2B:6C:5A
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ed:55:d1:19:bb:0f:1b:24:b0:ad:3a:c6:08:f2:7e:0a:83:
76:f4:56:05:ba:56:9e:70:50:2d:5a:c6:a6:21:26:c4:c5:91:
de:b4:b5:80:fa:1b:90:70:b6:fc:c9:14:82:0d:89:d8:9f:51:
bc:19:ac:0e:8e:66:cc:e9:29:af:de:d2:df:dc:38:d0:99:49:
36:37:95:6a:09:51:07:02:6c:22:13:c3:1c:6c:5d:9a:7e:6b:
bb:59:98:41:35:46:5c:27:52:67:96:3d:d6:f5:66:a0:bc:55:
9e:2c:0a:22:cb:fb:b8:2d:55:74:54:63:6a:cb:9e:0e:02:56:
89:c1:8a:ba:09:03:39:0d:fd:ac:8e:d1:d0:de:08:5b:ea:be:
6c:bc:e2:19:3c:c0:5d:4a:af:c8:02:4a:2b:c8:97:c3:75:da:
d9:19:97:de:99:76:e2:29:fd:2b:c4:98:a8:3d:07:f6:e2:9d:
cb:5b:48:f0:fe:d7:69:b4:46:0b:e5:1c:20:5f:bf:24:dc:80:
06:fe:90:42:50:55:82:43:30:73:f1:a6:78:b7:2b:c2:09:71:
18:39:df:1a:b1:6b:f4:80:71:7b:c9:e0:7f:2e:cc:69:8b:12:
e0:af:8b:d7:62:01:66:e1:0a:ff:7b:dc:31:35:f3:ce:29:48:
35:eb:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:33 2025 by rpki-client