Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: YiF4o6x59vCg5vrzTj+kru1Q+ZfFQlrctSI2++82NSs=
Subject key identifier: BC:E1:44:0C:CC:6E:AB:71:09:C6:43:59:CD:E2:5D:25:1D:24:BA:15
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 0199FBEC0E7CB71967F76BF2AAB646A4B86B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 08A3
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
2: 8MF9LpY4IEy9l1FARzK6C5L2w1A.roa (hash: oxOX+x4ImJf3gE4hmPOAVT49apZypumYsZNKHvDAJTo=)
3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: b9Zwws+ulmY3unec58ew6YVx0CB9HHJ++MAS52mHld8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0e:7c:b7:19:67:f7:6b:f2:aa:b6:46:a4:b8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=bce1440ccc6eab7109c64359cde25d251d24ba15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:16:a7:d7:0d:57:cb:ef:eb:fa:ce:bd:cb:25:
01:76:6b:c1:c3:69:ce:68:c2:b8:6e:cb:ba:9f:69:
79:6c:1d:fd:3c:7a:67:2b:6d:ed:a8:b1:af:db:b6:
ae:b5:46:c6:e7:da:ed:0a:df:33:a4:d1:d4:53:18:
8e:90:4f:1a:61:e9:08:ee:79:3a:ad:19:d4:15:83:
f2:15:ad:35:63:b8:4f:7f:19:40:3b:93:27:fe:9c:
50:eb:c9:2e:60:4b:66:42:01:e1:02:e5:ec:34:e6:
b3:05:4d:64:2a:a2:28:95:bc:d5:80:5a:2f:60:87:
1e:3e:59:fb:dd:40:1a:31:d1:10:38:45:1a:8a:ca:
15:df:ba:f7:e2:7f:a6:eb:f1:16:2e:12:5d:19:43:
7a:6e:ef:39:86:29:96:f9:c7:72:0e:cb:d4:a3:f5:
63:e5:eb:1f:26:cb:39:81:1f:31:db:af:2b:74:cc:
d9:5a:54:e4:00:0a:4f:52:7a:67:b3:11:31:56:9f:
f4:17:68:52:e7:2e:2f:20:71:f4:22:5d:1e:a1:b9:
dd:cf:45:65:a8:ec:23:f5:a5:8f:ac:a3:3b:a6:38:
30:08:e7:a9:c7:7d:41:d4:7e:56:8f:c0:5b:69:36:
d1:18:13:27:31:3c:d3:ab:73:6b:43:d0:be:a2:21:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:44:0C:CC:6E:AB:71:09:C6:43:59:CD:E2:5D:25:1D:24:BA:15
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8a:84:3c:2c:95:a0:73:29:5a:ab:e9:be:f6:9f:35:73:ad:
b5:b3:f4:46:4a:91:e3:3b:2e:2d:04:71:c8:49:40:e8:33:2b:
28:1a:ab:d0:67:bc:d0:91:53:54:b0:65:3a:e3:52:32:58:25:
7a:28:ae:98:f3:d8:20:27:30:6f:31:a0:f5:18:61:59:2f:b5:
e5:be:0c:ea:68:63:ee:65:fe:46:1e:c8:f9:78:c2:2b:b0:56:
3d:a2:fd:50:ef:a4:d4:52:c8:1e:40:fa:e7:3e:00:40:57:6e:
db:c7:27:2d:ef:7e:2e:c6:68:ce:ff:2e:7d:20:26:7c:42:99:
2a:ab:59:3f:0e:61:82:dc:aa:9d:e3:a8:d6:72:ff:a4:d5:7f:
3e:db:f6:29:45:ce:ae:2f:0e:3c:e6:ab:da:48:56:33:23:13:
78:4a:d5:da:8b:cb:6b:4f:d7:83:df:a5:d2:51:45:d3:cd:f6:
3a:07:0b:b7:1e:ed:9a:ca:61:8e:8a:6b:78:f6:97:bb:2d:b1:
a1:fc:2a:a7:c4:71:dc:9c:73:d0:5f:d9:55:d6:db:e9:dd:4b:
20:79:f7:4f:99:34:95:31:eb:6a:dd:36:9c:cc:1e:34:8f:40:
3f:d4:3b:45:7a:85:81:ce:3a:82:1a:4d:4c:d4:31:ff:19:47:
4f:99:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:20 2025 by rpki-client