
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: h/rgdqfIUbkY8b8oiKxRhxaVQ3pZTq/TG36GiEFchb8=
Subject key identifier: CB:73:6B:58:24:0A:D4:C0:67:44:0A:3A:1F:7D:01:C8:7D:76:39:0C
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 0199FC218A884400CA212739F47705A845EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: UfD36KHGB7BXiSeSeeVosMbxODs/SxtlTgwaHFD3EMg=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8a:88:44:00:ca:21:27:39:f4:77:05:a8:45:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=cb736b58240ad4c067440a3a1f7d01c87d76390c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:99:50:3d:3e:1a:9c:09:89:9d:5e:e5:ce:02:
8a:b0:74:d9:d2:ca:3e:43:92:bb:74:44:8b:7a:42:
0a:04:ce:e0:fb:8c:ed:c3:e1:bd:a5:e7:39:7f:b1:
36:c6:2a:62:bf:04:c0:59:b1:75:9a:d3:5a:70:35:
16:9e:3b:a6:10:1f:54:c6:dd:63:af:27:b6:88:d1:
cd:92:a2:d1:b2:db:05:90:c2:21:21:69:7d:4c:19:
f6:73:1f:8e:9a:3d:02:71:a7:8e:4f:fa:ba:a6:de:
a4:92:7d:38:f6:87:0b:2d:ae:98:d9:3d:74:f0:ee:
58:05:0d:88:d5:ed:5f:41:03:5a:ae:f8:dd:8a:9a:
f3:5d:60:2f:5e:c1:fc:14:24:ea:f9:f5:a1:bb:e5:
21:ab:02:22:65:6c:86:0f:60:1c:61:2d:d9:e8:9f:
50:8b:31:b4:44:33:e1:1d:1f:2e:7d:b3:7d:60:ee:
9b:d6:db:44:a6:10:b0:7e:b4:dc:f1:5c:12:60:60:
eb:da:cf:e1:88:df:a5:43:67:1c:c4:cf:f0:1d:ce:
9b:d0:4a:44:fb:34:b7:1a:93:27:64:2b:e3:64:81:
fd:ca:b4:62:83:d3:17:2e:a9:8c:81:20:f2:26:84:
c7:d1:97:34:71:2b:78:cd:98:f6:6d:1e:51:0a:04:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:6B:58:24:0A:D4:C0:67:44:0A:3A:1F:7D:01:C8:7D:76:39:0C
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:89:45:c0:bd:da:0d:e2:65:34:e9:cc:08:30:64:b4:d0:96:
59:67:7f:53:c4:63:46:6f:a6:fe:39:5c:6c:e8:8a:02:07:3c:
3e:e2:39:9c:45:d6:d6:23:df:8f:5e:d6:5e:23:1c:1b:96:6c:
a6:21:79:8e:2a:27:ed:6b:e5:eb:ae:a3:4c:85:ad:fb:83:32:
ed:1c:80:ee:19:2c:51:28:da:2b:d9:25:2b:81:b9:81:32:13:
d3:af:53:ef:50:d2:d3:95:1b:2e:1d:50:d8:c4:98:c0:4c:bf:
ad:46:bc:a5:2f:f1:45:41:d8:9d:8b:6a:9e:69:89:0b:c7:c7:
44:17:d7:01:39:92:ac:80:1c:d5:05:88:cc:99:b1:1f:2c:60:
47:21:d0:a6:2d:d4:79:24:79:7d:8e:f6:78:f3:ce:2c:e1:b8:
7d:6b:35:46:33:20:40:da:4c:38:c5:26:f8:bc:bb:b2:aa:1e:
08:63:08:58:af:d5:24:10:ea:0b:a8:a7:71:af:8a:b4:23:a8:
9e:d3:0e:81:6b:60:01:d1:51:ab:0d:31:68:a7:43:b3:e7:e4:
2e:ae:84:2b:b9:a5:5a:48:ae:6d:25:20:1e:a7:1d:15:c9:96:
f2:2e:76:5d:17:f8:da:50:fa:78:2f:d4:a1:16:51:46:75:94:
a8:a3:cd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:07 2025 by rpki-client