Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: hJ4mBqAV7hK7BJdw7BozA7Q+LrdrJXUcC2Ilw2alD/I=
Subject key identifier: 38:A2:1E:88:77:53:69:C3:6F:73:70:0C:67:B5:37:38:F3:1C:51:B7
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 0199FC2181E1DB13DB70C9396AE44AB093AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 14AB
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: OdvwkUAe3TRc68bKSY/9ypwxTzzF23Ao+JxJ8NRjdUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:81:e1:db:13:db:70:c9:39:6a:e4:4a:b0:93:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=38a21e88775369c36f73700c67b53738f31c51b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:5e:9e:0d:81:71:7d:31:b2:c4:dd:3d:45:
5b:a2:85:86:e5:22:79:07:97:16:13:ad:47:8c:ac:
d0:b1:e6:43:85:5f:5d:0b:12:da:9a:95:4f:09:fe:
c7:70:42:7b:24:36:c5:84:ea:3d:c3:2c:59:1c:f8:
27:c4:6f:de:2f:25:1b:10:0b:03:2e:83:53:61:e1:
27:3d:fd:2d:39:b0:9f:69:48:99:56:46:d9:98:42:
b0:25:34:d9:83:05:93:82:34:4c:5f:0d:1d:84:d4:
67:a5:6c:b0:af:20:5f:39:3c:24:b1:82:5e:cb:87:
92:14:91:7c:0c:ca:d2:5e:ff:81:59:8f:95:5d:6d:
17:c0:3f:e3:96:93:bb:5d:e1:82:3f:8a:6e:bf:ac:
72:c4:7a:d2:6e:4c:0c:60:9b:68:9a:39:2e:ad:f8:
03:84:6f:48:2d:31:20:95:5d:58:d2:7c:fe:96:cf:
11:0b:70:5a:b1:83:16:b2:de:1c:11:1d:ed:58:be:
d5:6e:dc:ce:8c:68:fb:26:d6:24:57:69:ec:15:8e:
df:78:d3:33:e6:c8:c4:68:d8:d6:e6:d8:c8:3f:48:
f2:85:39:5d:97:b4:11:ba:71:79:7c:2b:8b:2d:92:
9c:3e:44:8d:96:95:b8:c9:4b:37:37:09:aa:c3:85:
f4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A2:1E:88:77:53:69:C3:6F:73:70:0C:67:B5:37:38:F3:1C:51:B7
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1f:7b:e9:d1:69:31:20:a1:95:9b:9a:21:e9:1f:4b:d3:6b:
f8:29:32:d6:4b:75:10:e1:e8:e2:44:03:87:59:39:7b:e8:27:
31:0f:10:81:79:62:10:00:ad:1e:2d:f4:96:43:ea:96:75:73:
3b:2e:0d:cc:7d:4d:20:c7:36:b3:f5:1e:bf:75:d3:86:a8:8f:
81:d4:c0:de:f0:80:3d:b0:c5:73:a8:24:47:df:fc:31:41:f3:
de:7b:2e:4b:35:9e:b1:ad:f4:13:99:1b:fc:39:97:5a:29:db:
a5:a4:1a:11:c6:1c:59:40:19:2d:f5:e5:4c:c6:91:c6:4a:a2:
6a:fb:ab:f9:83:7a:f1:db:ae:8f:e9:ff:32:4b:30:24:20:1d:
4e:3e:be:b5:3c:98:bc:02:fb:19:ea:91:df:56:1f:85:e3:a0:
99:ee:93:32:f0:16:8a:97:62:08:b2:70:48:bc:80:d5:52:8a:
4f:75:a3:cf:70:52:cd:36:15:62:93:5b:0f:56:70:8c:af:8c:
18:a0:49:35:e8:92:93:72:e7:75:b0:a8:59:41:ba:d3:99:1f:
a6:53:f8:6d:8d:f1:50:1e:f2:09:8b:07:51:62:ae:ac:e5:7c:
f5:6d:cf:70:5d:13:7b:b5:23:4d:ca:1c:89:7d:9c:14:2c:1b:
cb:aa:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:16 2025 by rpki-client