Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: Eu3aPfuFse5wLysMORt/GmZjfdhXm1jgblrO5AvdYeM=
Subject key identifier: D0:FE:25:FA:26:8D:54:F8:7A:40:45:97:9B:F0:EC:0B:F4:1B:85:DF
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019A03359522B9255A0FBC74E0AF530F1390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 20:00:34 +0000
Manifest this update: Mon 20 Oct 2025 20:00:34 +0000
Manifest next update: Tue 21 Oct 2025 20:00:34 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: DsQWXqgYsDev8ZnTzUh1s61BzMk+5nlfORYJV0I7SUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:95:22:b9:25:5a:0f:bc:74:e0:af:53:0f:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Oct 20 20:00:34 2025 GMT
Not After : Oct 21 20:00:34 2025 GMT
Subject: CN=d0fe25fa268d54f87a4045979bf0ec0bf41b85df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:78:b7:9d:67:c2:5c:2a:f9:68:12:f6:e1:
24:56:5d:10:42:b4:ec:2b:9d:ca:27:d8:05:b2:7c:
5e:03:40:e1:0b:55:ad:f2:f9:68:eb:ff:32:dc:a9:
38:9b:ab:a2:53:3a:5a:93:8a:2f:b0:e4:45:29:c7:
a4:7a:e8:f0:1c:fb:85:e8:d6:1d:46:2d:45:81:80:
1a:87:22:db:fc:f5:ea:6e:73:39:33:ab:32:67:96:
19:83:88:99:fe:ec:97:68:07:41:09:ba:6f:9d:67:
f7:ed:54:ef:3a:5d:32:2d:6f:12:e5:cb:db:d0:12:
04:4f:42:6d:da:56:2d:bc:d7:da:ba:cc:4f:85:2b:
d2:22:08:93:8f:4a:01:63:2d:7c:c3:e4:95:aa:9a:
f0:ea:75:5b:e8:b3:70:99:8b:17:2b:e7:9f:0a:df:
26:0b:74:4e:ce:b9:bc:3f:87:3e:ad:4a:64:42:a7:
ad:d5:cd:6e:a2:f6:b9:56:34:af:b5:ab:f8:f6:f7:
92:b6:66:fa:fa:3b:84:c9:aa:ea:6a:ee:9f:2d:ec:
ba:85:b6:4b:7b:aa:67:8e:2e:c4:87:d5:ad:33:03:
d6:16:2f:72:ff:ff:ab:ef:f3:ae:36:3a:16:f1:b1:
ce:bc:1c:c3:c3:6a:ee:13:39:25:4b:7b:f8:75:21:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:25:FA:26:8D:54:F8:7A:40:45:97:9B:F0:EC:0B:F4:1B:85:DF
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9e:45:f0:56:b1:b4:59:81:5e:ea:41:c0:59:9c:8c:35:5b:
74:e4:51:7c:ef:9e:b5:16:cc:a0:a2:40:53:d5:3f:bf:6e:00:
95:98:c0:87:d9:32:2f:5e:0d:0d:a5:e8:66:e0:a0:ba:d8:02:
f2:f4:2a:e9:6e:2c:23:ed:65:53:7a:5e:e3:ec:14:6a:fc:12:
4b:52:c9:0b:44:6e:a7:a5:a8:1c:f2:87:c3:74:b2:eb:65:fe:
10:a5:41:d0:88:7a:d6:c3:05:15:8c:7a:19:c8:fd:80:49:3d:
49:e9:42:f5:b0:a3:75:84:9b:4c:ef:a1:23:46:40:a3:82:1b:
04:7e:09:ee:31:5a:28:cc:45:b9:55:0d:1c:9a:fd:cd:38:5b:
70:f7:cf:e9:99:e1:5e:b0:9c:2c:78:f6:9b:2d:fc:39:a0:4f:
66:39:2e:94:6c:39:82:72:d3:e7:7e:31:1b:8d:33:80:01:38:
9c:05:82:bd:87:71:e6:5a:16:7d:a6:68:f5:28:14:55:e5:52:
a5:2f:22:bd:49:05:30:08:f2:10:15:a3:f6:87:cc:ab:2c:79:
26:cb:82:79:a3:b9:c5:4c:8d:68:4e:a5:2d:af:e4:69:9b:8f:
17:b3:c7:2d:90:e5:d6:bd:cb:03:c4:86:af:3b:74:e1:4d:35:
1a:1a:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:10:39 2025 by rpki-client