Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: YR+dsrfHj1fOo0mCh0VJxbr/IY6UV/F75ghMZW2aE18=
Subject key identifier: 72:BA:5A:E5:A3:12:97:F1:CA:B8:05:D4:1A:95:F1:A9:69:F0:1A:DB
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 0199FC21B455CD2140726511C2337C2A7E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: pPPV/WpRsfaAKzcP96ZofbZ4Ut9kcH+8hQIadJuz9Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b4:55:cd:21:40:72:65:11:c2:33:7c:2a:7e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=72ba5ae5a31297f1cab805d41a95f1a969f01adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:6e:a9:9f:41:f9:1f:a4:c2:36:48:6c:25:
08:d0:f7:30:59:c4:f5:27:c7:73:38:09:47:98:85:
ff:0d:6e:8d:41:cb:5d:62:c3:d7:2d:2d:5e:f7:ce:
51:45:c0:4c:df:54:cd:05:fb:cb:6a:2f:f5:23:dc:
58:55:e6:9e:da:c1:f3:70:09:30:1e:0a:0b:79:5b:
05:03:db:32:fd:9d:ac:a7:07:60:51:a2:39:23:c7:
0c:4a:92:00:b8:aa:f4:8a:bc:0b:ca:5c:e0:f8:2f:
2d:e5:76:b7:50:36:de:e5:f1:12:1c:97:0e:d9:6c:
99:48:c6:e5:90:02:2d:d6:09:20:b0:cc:81:72:f6:
b9:1d:65:4c:85:cf:8b:54:e1:52:97:d0:c0:18:f8:
24:9b:60:fe:d3:9d:89:e1:8b:c0:3c:0d:2a:f3:4d:
26:98:2c:89:6f:1d:8a:93:13:8e:e4:8e:2a:7b:3b:
12:69:df:7c:00:e4:55:f4:6d:85:90:10:84:1f:9a:
de:fd:9d:06:7c:5a:0c:99:5e:3a:ec:61:16:a9:d9:
36:f3:fd:64:a6:ac:ab:61:31:e6:52:0a:25:0f:32:
da:02:6c:87:e2:54:f9:82:41:89:31:d4:e4:10:14:
95:90:ae:be:be:66:a2:79:99:0e:7b:b8:bb:32:6b:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:5A:E5:A3:12:97:F1:CA:B8:05:D4:1A:95:F1:A9:69:F0:1A:DB
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:66:23:1c:91:d5:23:d0:d8:28:36:81:5c:8e:66:bf:a6:09:
73:da:0d:d4:cc:e7:23:db:21:68:77:9e:c4:85:9e:f1:5b:93:
b9:42:d2:92:93:e4:e7:b8:20:46:3a:32:30:e0:cf:15:67:02:
fb:aa:30:c4:47:a6:63:24:d2:7b:4c:bf:7a:b8:3d:11:cc:8e:
a9:2f:de:7d:1d:52:18:e6:33:17:29:87:6e:87:dd:44:67:a2:
35:2d:39:30:08:cf:b4:e3:7f:87:cf:87:6d:e2:4e:35:49:a4:
2d:f2:3e:61:db:8e:6d:b9:fd:29:35:53:bd:a1:ea:e4:9c:b5:
bd:42:a7:0c:5e:28:b8:ee:d5:74:ec:c1:ea:e5:c0:00:5e:5b:
6b:57:25:b6:05:1b:fb:4d:68:72:bb:46:e0:af:2e:13:1d:79:
58:fd:99:d1:e8:8d:c1:02:2f:9b:8b:0e:c5:17:e4:2c:09:f9:
6d:d2:77:89:9a:85:9d:2b:44:cb:4d:69:f0:a2:58:24:6c:2a:
c5:ca:f9:fb:2d:9d:7e:78:52:a7:e3:ab:de:4b:e2:bc:af:1b:
75:d4:b4:9a:bf:1e:40:47:ff:43:cb:74:c2:92:fe:5e:20:36:
b6:5c:e5:52:44:2a:a7:84:de:7c:37:04:05:22:21:5d:97:b0:
48:b0:45:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:50 2025 by rpki-client