Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
File: qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft (raw, json)
Hash identifier: 1nOHK5BmFtwws8BAxIWdeMcmFkPjkK65PuQ7YR9Qk3o=
Subject key identifier: 16:F5:9A:CA:61:F1:E0:D4:92:82:44:32:49:83:99:F2:A8:F7:BC:25
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Certificate issuer: /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial: 0199FBEAA6C50E6530DC71BE5CAD182C1EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
Manifest number: 10B3
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: Ga7xjXDSDjdOVNrcTGr_g6sBFW8.roa (hash: 8Y/Mjf2+mYXubhHwDguXMxh+k+JgGQC7Q5HSVi+iXpA=)
2: qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl (hash: 9v/Emhg1j73qFLj/86lxE3oAjSyxQAzbypTtg7ME5Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a6:c5:0e:65:30:dc:71:be:5c:ad:18:2c:1e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=16f59aca61f1e0d492824432498399f2a8f7bc25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:ec:2b:a9:f3:b7:b2:48:17:53:94:21:f1:
da:27:12:df:1d:77:a1:89:e8:69:bb:07:cf:4d:ad:
6c:79:fd:59:3c:b2:99:2f:c6:44:1c:b5:44:5d:86:
26:a0:96:36:7c:3b:ce:4a:6a:59:7a:08:76:3a:ed:
f7:8e:05:0a:1a:01:22:40:9b:d9:34:2a:3d:30:86:
58:da:f9:e4:43:11:33:7e:b1:ff:b2:c1:33:ba:66:
23:57:d5:45:8f:7e:54:0b:7d:33:08:25:8e:1d:2f:
69:8f:86:3d:01:d2:12:3b:43:cf:89:78:3f:f3:16:
7d:9d:29:c0:6e:da:1f:b2:e6:0b:94:f9:b7:cf:03:
70:30:b6:d2:0e:51:bb:73:ea:8b:a4:c1:d1:8a:04:
1d:b4:24:26:95:75:1f:9c:1b:56:f6:d8:01:ef:82:
4a:60:62:22:49:18:2c:8d:ea:d0:34:1c:68:7d:6f:
89:c9:07:66:58:77:0f:74:f9:c1:1d:d6:36:c5:e2:
44:e0:ae:5b:10:4e:ba:6e:a8:98:1b:11:9a:c4:00:
d9:7b:bd:d8:ea:8d:db:5e:6f:e2:87:d1:2c:4b:35:
c3:b3:93:84:50:39:83:c4:38:ef:f7:ce:5c:df:ec:
27:12:68:5f:30:fa:02:37:7c:6c:c3:2b:06:96:08:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F5:9A:CA:61:F1:E0:D4:92:82:44:32:49:83:99:F2:A8:F7:BC:25
X509v3 Authority Key Identifier:
keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:89:2d:81:5b:08:49:34:ab:42:4e:9e:79:27:0b:b7:8d:53:
af:c6:37:4e:a9:79:3b:44:a3:a6:37:da:c6:b9:5a:12:19:3e:
96:8b:95:20:b7:aa:d4:57:83:d4:02:8a:40:81:c8:5c:5e:ec:
f2:44:6c:c0:7a:cb:5a:04:5f:ad:f5:d5:dc:e6:8a:ca:e2:da:
75:ed:ad:bf:2a:93:17:e0:bb:0c:8a:e6:9b:08:8a:53:c9:80:
1b:8c:1c:d0:5a:da:47:1c:2b:55:92:73:bf:3f:a4:af:d9:20:
e9:53:ff:04:07:e6:8b:e3:a2:6d:11:76:3b:c3:1f:bc:e1:ca:
6c:e5:48:0c:53:6a:4a:3a:90:f4:ee:2d:f4:44:52:74:d7:c8:
d1:f8:82:d1:48:cc:c0:a9:d4:ac:de:f9:d0:33:27:01:73:d6:
86:9e:33:e9:1c:c3:2b:43:e7:10:7d:5b:b6:7f:64:28:b2:6c:
f8:a2:b9:15:47:30:32:10:e8:01:48:93:7d:90:96:81:44:93:
1b:60:cd:e5:93:a4:92:10:f2:a0:78:ae:fc:47:b6:f2:fa:db:
8b:64:2c:ad:f3:05:d0:cf:5a:5d:62:84:b9:a7:c3:51:5e:7a:
4f:d1:86:08:d1:aa:c2:a3:77:e4:82:55:6f:bf:9d:62:fb:96:
9a:34:1a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:36 2025 by rpki-client