Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
File: pQnoZXbAZeFL--6PZSq2wnnM3hI.mft (raw, json)
Hash identifier: t9tQWHMy5NEjsO+LhjqtmUf9uFmCuJ20UtS3SsaYWSA=
Subject key identifier: 6B:AC:D6:C3:53:85:20:E8:67:9A:DD:E8:D0:F0:95:00:A2:14:C3:0F
Authority key identifier: A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
Certificate issuer: /CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Certificate serial: 0199FCC633AE3C9CD02061FB8A5D90623858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
Manifest number: 101F
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: eoOnLGiO6CFkl49Rw92BKVWZ1YY.roa (hash: 5KK2WxAAZ4SHFL6JTNlCRgBRKCCitoVvyQFa3VeriMw=)
2: pQnoZXbAZeFL--6PZSq2wnnM3hI.crl (hash: jaHBSAgxQaNbD8L/fKVd1fLbBUhkPvhqcp2m0Ms9cag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:33:ae:3c:9c:d0:20:61:fb:8a:5d:90:62:38:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509e86576c065e14bfbee8f652ab6c279ccde12
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=6bacd6c3538520e8679adde8d0f09500a214c30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:57:9c:4f:6e:30:5e:e8:fb:87:d4:ec:a7:54:
3b:44:b7:d0:1e:f3:70:07:e7:e4:f9:1e:28:13:47:
53:a0:b3:03:12:bb:79:35:a3:25:1d:36:0b:8c:03:
f1:25:a0:3d:6e:53:08:6c:4e:2a:ae:82:bf:5e:d2:
fc:48:fb:4a:4f:49:5b:45:8c:72:1b:93:5c:38:11:
e9:5c:29:cd:0b:34:4e:8d:9d:21:8c:9f:0d:28:07:
75:e1:7d:b0:c0:07:5d:af:75:62:43:48:d4:d4:3e:
2c:58:eb:34:81:62:f8:20:f4:96:d5:2a:b0:97:81:
0a:4c:af:6c:b7:28:bb:25:26:d5:69:29:4e:0b:3e:
7f:b6:aa:ff:70:42:6c:5d:4d:22:aa:c8:f0:37:49:
27:d6:94:a6:65:0f:bc:fc:32:fb:89:81:c3:5a:0b:
94:85:27:fd:38:8e:4d:c0:30:b9:b4:97:66:a7:b4:
d1:27:0b:b2:c8:5a:6d:71:d4:40:06:3b:64:5e:13:
84:92:ad:e4:70:03:93:f5:39:9a:24:99:cc:e2:da:
87:aa:63:35:de:1c:0a:82:3d:30:e3:27:0a:8d:3f:
a8:00:aa:fa:8d:6e:89:ea:ff:6e:1c:51:f5:9a:b0:
f8:d0:bb:23:1d:90:82:2c:e3:7d:6e:dd:69:23:25:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AC:D6:C3:53:85:20:E8:67:9A:DD:E8:D0:F0:95:00:A2:14:C3:0F
X509v3 Authority Key Identifier:
keyid:A5:09:E8:65:76:C0:65:E1:4B:FB:EE:8F:65:2A:B6:C2:79:CC:DE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQnoZXbAZeFL--6PZSq2wnnM3hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/014245-8685-4af3-9387-a0f5742b1b04/1/pQnoZXbAZeFL--6PZSq2wnnM3hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:dd:52:20:28:ed:a0:81:0c:52:dc:52:13:37:3d:29:a5:20:
91:ed:25:46:f0:c2:e6:c4:2a:97:5a:3c:10:3d:7a:fc:ab:4c:
b9:c5:6b:6e:ae:33:26:94:67:ea:59:cc:16:2d:f1:41:44:76:
bd:57:69:b9:a6:e2:22:7e:8e:a9:1c:96:be:12:1b:91:cb:55:
b8:3b:96:55:f0:8d:b0:42:3d:02:3e:3e:08:d6:ba:c3:65:f5:
ba:bc:e0:d9:5e:02:26:d9:a9:56:14:27:2c:90:38:38:55:e4:
3d:be:c8:9a:e4:0a:ed:0f:27:b4:e9:d8:f0:a0:72:5f:31:25:
88:50:60:d6:72:93:ee:c8:6b:f7:0d:b0:46:cd:7b:c8:07:3b:
63:5c:04:54:14:02:ca:98:5e:09:c7:fb:3f:39:71:87:ae:22:
c2:ae:96:7d:8a:c0:a1:ef:e9:be:c6:04:4f:07:51:23:8e:eb:
2d:98:bb:26:68:b0:16:f7:c7:86:e8:07:62:e1:02:8d:71:49:
58:19:1f:bc:ed:5f:ac:0c:6b:11:24:26:88:cf:b0:eb:09:56:
8d:a0:a9:d1:97:13:0d:70:65:97:fd:95:62:24:71:84:5c:ad:
96:1e:17:eb:c0:0b:b6:1b:0c:42:b3:71:f3:81:97:e7:2c:6c:
96:e4:21:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:19 2025 by rpki-client