Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: Ul4nTeot9r+ichx9r4Wz7Q86DQMlOSwPZJfPXlLTfGc=
Subject key identifier: 7E:54:B0:A3:C6:BF:08:49:19:A6:ED:D0:6A:4E:41:1A:45:FB:C6:17
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 0199FBEB47E5ED6AC5C01AAB4AEF48F777B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 12AB
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: i2xkdnyIbsZZpowlJtcFJPRVVZnsj/EEtRLnp41FwRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:47:e5:ed:6a:c5:c0:1a:ab:4a:ef:48:f7:77:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=7e54b0a3c6bf084919a6edd06a4e411a45fbc617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:c2:39:da:0c:a0:3b:7e:f4:5d:d9:69:50:
9d:b7:e8:f7:8a:2a:3c:5d:ae:c0:a5:06:3d:9b:4c:
e9:c1:de:7c:76:9e:76:8e:69:59:ec:b7:94:5b:ed:
b2:e5:a1:c5:39:4d:32:98:53:b3:73:ba:9c:b9:77:
90:ba:5f:66:d4:48:46:c8:93:38:66:e4:68:82:30:
ad:17:0c:fb:79:20:f2:05:a8:25:78:41:62:ed:73:
57:68:81:30:9e:03:a3:81:6b:b7:b6:c4:a2:8e:4f:
fb:1f:17:cc:3f:a5:f4:ae:c4:7f:13:12:fc:dc:03:
61:d3:e6:b6:14:1d:df:b7:fd:76:17:46:74:b7:d5:
35:47:b4:51:b0:c5:3e:00:0f:f3:a4:27:9c:bb:25:
79:9b:8b:93:3b:84:06:a7:5e:08:f9:d4:25:aa:8e:
42:cc:6e:51:16:8a:44:13:9e:a6:85:8b:ba:3e:07:
e4:61:da:8c:10:fc:e3:19:c3:e2:7f:65:92:c2:eb:
2b:d3:59:8b:a8:01:d1:41:66:36:41:2b:a1:1b:61:
5a:d9:f1:e4:ff:b4:96:5f:03:83:13:43:e6:5e:5d:
2a:84:94:e1:fb:a7:a6:0a:a2:cb:61:61:67:c0:96:
76:a9:96:82:ae:e6:d9:d7:96:96:81:f9:a8:f3:5a:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:B0:A3:C6:BF:08:49:19:A6:ED:D0:6A:4E:41:1A:45:FB:C6:17
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e9:7c:d8:b7:e4:ab:42:0d:7b:67:37:de:d7:23:37:78:3e:
67:e0:b1:6a:f5:f0:a9:d0:cb:a3:7c:45:a2:40:e2:1a:77:18:
77:3f:6b:8a:d3:21:aa:88:00:ff:94:76:4c:1d:2a:9b:f9:ff:
91:db:cc:d7:f9:43:df:24:b7:cb:86:0c:42:ad:9b:78:45:f6:
f5:06:22:7d:fb:28:09:5e:5d:ea:f5:69:a4:10:ec:a4:9d:5e:
c1:4a:08:7d:0f:c7:13:8a:a5:02:17:42:a8:7e:e4:d9:fd:24:
7b:30:51:7b:ad:9a:4f:ac:9e:70:9e:c7:89:72:88:5e:87:cc:
90:01:3c:9a:3b:fa:95:bf:e6:cf:57:01:3c:a9:90:26:8f:db:
af:55:29:ca:c5:50:dd:e1:c0:fb:e2:ec:0b:28:ea:bf:b6:c7:
89:2b:c4:a8:4d:08:30:96:1e:51:35:c0:29:58:e5:59:a3:ee:
8f:c8:70:d2:8d:bf:20:47:a5:cf:69:8a:52:bb:2a:a5:03:52:
b2:36:30:8e:1d:0e:b4:19:9e:0d:7d:bf:3d:e3:ec:b9:f5:bf:
9a:a0:20:f2:69:fd:f6:2f:06:9b:3a:41:c7:68:69:40:e9:2c:
62:ed:79:08:b1:f6:15:03:32:0e:25:19:b8:08:4e:0c:3f:2b:
5e:1a:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:29 2025 by rpki-client