Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: 7gr9QcyVcGVNqi8WrUU9K/iVyWadL4O+VB1NOS/NAt4=
Subject key identifier: 08:6C:83:00:1D:C9:CD:17:56:54:F5:45:34:79:A4:80:CD:69:3B:00
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 0199FE474781648CE3201BD4F46282BBA021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0ACE
Signing time: Sun 19 Oct 2025 21:01:48 +0000
Manifest this update: Sun 19 Oct 2025 21:01:48 +0000
Manifest next update: Mon 20 Oct 2025 21:01:48 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: ed1gSeFaeEa2+YkRmJPtpsS1dWUZycQMJ5Su/FnmdQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:47:81:64:8c:e3:20:1b:d4:f4:62:82:bb:a0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Oct 19 21:01:48 2025 GMT
Not After : Oct 20 21:01:48 2025 GMT
Subject: CN=086c83001dc9cd175654f5453479a480cd693b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:61:f8:ed:c6:c1:63:bc:c8:cf:30:9a:21:
20:a2:5f:6c:66:cd:26:5d:1b:16:3c:24:86:73:5f:
1b:48:1c:2c:31:3c:24:be:81:c1:94:af:48:bc:fe:
40:0c:e1:8d:89:1e:b0:44:76:a4:03:a0:d4:a6:44:
cc:bc:af:d2:85:ca:3f:2d:69:da:b6:bb:a8:a3:3d:
ea:32:08:2d:35:87:3b:f5:13:90:ec:b6:4f:3e:93:
b8:cb:da:d6:83:cf:b4:1a:28:6c:37:e2:78:db:41:
15:f1:94:bc:95:e6:c6:05:fa:56:12:c0:3b:75:0b:
39:cf:b2:f4:7e:38:10:66:a1:c0:3e:85:3a:e7:77:
30:40:ba:eb:40:da:3d:fe:a6:f8:85:1e:fe:86:30:
49:36:00:a5:be:a9:52:3b:38:ae:99:8f:43:12:99:
f6:55:38:92:26:2f:f2:5b:fb:9a:13:10:2a:c2:85:
11:44:f1:50:1a:3b:84:73:3a:ec:60:df:d1:19:9e:
23:1f:ec:77:df:c6:01:b3:b7:2a:3c:03:9b:ae:0c:
c9:90:3e:a2:29:f7:af:09:47:62:54:f1:fe:c8:f6:
7e:6a:00:4f:0f:b6:57:66:d8:7d:0f:2b:4c:a5:05:
d8:dd:b6:12:0d:0e:52:53:a5:cc:ea:da:91:a7:26:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:83:00:1D:C9:CD:17:56:54:F5:45:34:79:A4:80:CD:69:3B:00
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e5:b1:50:0d:3c:cd:37:cb:30:bb:5f:68:51:44:0c:b6:18:
d2:38:9d:9f:e2:1d:3c:9e:41:99:0c:78:18:ad:c2:4f:36:7f:
38:a6:3b:4f:35:83:46:f1:ae:3d:f6:5c:51:cc:de:14:98:21:
9a:51:1a:5c:e3:64:0c:88:e5:f0:2c:70:66:db:67:72:32:59:
0d:45:da:2b:36:be:3c:57:34:7d:d0:e2:48:5f:80:1d:84:d2:
ec:90:51:bb:d7:d7:14:b8:f6:1d:50:cb:37:e8:fa:6b:39:c0:
e2:42:9a:0e:92:fe:61:13:82:87:13:65:ed:6f:76:c2:81:db:
ff:98:71:15:bb:41:c7:fc:80:ee:47:f9:d2:4c:da:91:b6:d4:
0b:92:42:22:87:5f:ad:ad:36:2f:68:1c:40:d9:02:b9:e2:22:
81:54:09:cd:5e:c8:18:85:9c:a1:ea:0e:b9:91:92:bc:26:67:
82:cd:a2:9b:f4:3e:bd:d4:9a:dd:8e:e2:1e:3c:89:33:c5:d4:
07:7a:da:f3:f7:cb:e1:0c:e6:7f:ce:33:74:0d:77:f9:f2:a1:
4f:b1:79:32:45:8f:0d:63:9f:30:4f:16:81:e8:e7:7c:d7:7f:
60:d3:41:1d:72:b3:5a:90:1c:50:49:f9:fc:92:0a:42:27:f2:
d2:ff:f6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:43 2025 by rpki-client