Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: EPTK9hKECpgnJXAk2YDxb+4jRjHyRtXkFb+B4X9Mmlo=
Subject key identifier: 1F:F6:84:85:98:D0:F7:F4:EF:31:04:43:77:14:42:D5:61:27:B9:8F
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 0199FCC6127534867D0FD877F7CF12E45327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=)
2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: nxWa2VTmk7Ob5JGpiD4zJs4repz73j8/EBOtf20h/d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:12:75:34:86:7d:0f:d8:77:f7:cf:12:e4:53:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=1ff6848598d0f7f4ef310443771442d56127b98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:2a:46:c8:1b:28:1c:d9:31:de:1b:c1:a6:
e8:fe:7b:ee:93:75:72:42:e7:bb:ce:44:b3:96:4e:
0f:d0:48:3d:45:f3:08:86:94:46:38:cb:74:fa:64:
d7:81:09:a8:52:6f:7b:aa:ad:aa:9e:34:2c:a1:01:
da:3a:0a:a5:de:ea:6f:23:db:85:13:41:38:58:b7:
f7:b4:fc:51:e3:48:04:35:00:e6:63:0a:c7:d5:1f:
28:9b:eb:0d:f7:59:b8:43:34:8f:ea:8f:29:66:b0:
36:70:ef:86:38:77:bc:b1:ed:d7:3f:60:09:09:4e:
70:ad:8c:37:78:b1:34:c0:fe:a9:85:58:76:4c:a9:
ec:34:8f:07:fe:37:6e:cf:0a:f8:de:6a:fb:79:73:
c5:eb:0a:50:7e:7f:19:52:3e:54:16:51:5b:3a:48:
21:ee:1e:46:04:f4:af:d2:30:13:98:1f:1f:ed:7d:
a6:f3:3a:fb:3e:43:fe:26:a9:52:20:15:00:49:70:
48:5c:74:fa:f1:13:b4:5f:fd:10:72:f9:bf:59:a8:
d6:37:7f:2e:58:57:6f:3b:37:8f:a3:f5:2b:a5:fb:
61:c6:06:75:a3:e4:bf:e3:ee:89:e8:36:9b:54:4c:
1e:89:89:ed:c9:13:f9:fd:eb:14:82:e6:75:b2:b9:
30:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:84:85:98:D0:F7:F4:EF:31:04:43:77:14:42:D5:61:27:B9:8F
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fd:e4:41:de:31:57:6c:42:5a:03:fe:4e:6e:9f:76:1c:37:
e2:65:5c:dd:8b:4a:1b:db:28:e4:05:53:d8:0b:a8:6a:42:f4:
12:d3:6c:0c:41:47:e7:1d:19:c0:6d:a7:49:1b:6b:82:d6:ca:
64:00:9a:c9:86:48:fb:4d:20:fa:d7:94:b7:12:ca:2b:af:85:
2b:c1:60:37:68:b3:fa:a1:56:c7:b3:38:66:be:09:05:95:bc:
2b:0a:a1:02:cf:18:86:55:4a:14:25:25:50:df:45:9f:24:eb:
0c:cc:f4:1d:05:94:a3:b8:cb:f9:fc:5e:93:10:34:55:2a:f9:
24:97:3e:08:d0:75:52:1c:4e:c8:01:6e:aa:5e:1d:f0:5d:31:
66:e0:85:e0:7f:36:61:5c:85:78:dc:b4:be:03:41:c7:82:95:
1e:03:21:05:e2:c8:1c:e8:4c:2f:f7:b2:cb:f3:27:30:94:0b:
9c:1a:aa:5e:5e:dc:ad:00:78:e7:56:a6:69:ed:83:8c:c0:32:
04:67:68:9d:86:d0:fa:da:8b:09:21:0f:5d:44:b6:10:e5:0a:
3a:47:8f:8f:ae:22:0a:0f:f5:f0:b9:d5:86:b1:c3:65:89:7f:
65:eb:1f:74:0e:11:52:b6:f6:17:47:76:96:c5:0e:89:bb:8f:
99:c9:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:59 2025 by rpki-client