Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
File: qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json)
Hash identifier: x4IruORPpoXnBgDc9Ye0U//JuAhnbwldh3HHbYWVuGg=
Subject key identifier: 77:30:F2:65:BD:99:38:0C:F6:4F:C2:27:87:A8:1E:21:F1:A6:46:D2
Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
Certificate issuer: /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Certificate serial: 0199FC58B17197EEA0F0C7CCD27FF18A512F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
Manifest number: 059B
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: dr0aQwlMd5wprYGuM-4A6wgZRyk.roa (hash: 5kfUYUIepAA22bF94//hZe6cokijIGlywb6OIAlIy1Y=)
2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: HlZe60o6SQ8UxNKiPnxBHTs+AwjA9dttDoqlneQPyEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b1:71:97:ee:a0:f0:c7:cc:d2:7f:f1:8a:51:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=7730f265bd99380cf64fc22787a81e21f1a646d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:90:1f:71:92:43:2a:71:46:76:c3:f2:1c:
b1:c3:37:84:a4:2f:de:10:6a:ab:03:a5:8c:14:f2:
1f:08:68:43:a4:df:5d:7d:3e:c6:c5:80:8a:2f:3c:
f9:1d:ce:6b:59:58:a3:5c:86:27:d4:62:32:02:bb:
14:10:52:47:90:a5:2b:28:4d:2e:26:2d:b5:aa:30:
cd:01:a0:fe:72:e1:9f:40:a3:cf:db:e6:87:3d:a6:
fc:33:3b:3d:7c:2b:8f:c1:82:7f:09:14:ce:6e:e0:
99:77:db:16:e6:55:eb:5b:cd:ac:00:5a:92:62:31:
fe:b5:b4:98:77:94:93:1e:78:69:e7:90:fb:41:45:
59:3b:0f:e5:1a:26:c9:c8:a0:bc:57:81:26:29:5c:
22:db:06:02:d6:bb:1f:f4:ab:b4:17:f5:19:b3:ca:
9c:ce:22:a0:5b:d6:aa:b4:60:43:92:d5:97:15:58:
14:fc:25:33:2e:5c:bd:00:c3:ee:39:88:34:1f:8e:
bb:8c:75:63:c0:83:ca:ff:5a:3c:fd:b4:b5:82:ce:
bd:67:aa:eb:f7:e0:da:be:64:51:5a:f5:37:f7:8e:
31:0c:2a:f2:de:96:7c:80:18:6f:0d:6b:27:b2:71:
c7:67:8f:67:50:9d:ea:ce:d1:f9:0d:11:42:ed:e2:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:F2:65:BD:99:38:0C:F6:4F:C2:27:87:A8:1E:21:F1:A6:46:D2
X509v3 Authority Key Identifier:
keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:75:f7:aa:ca:7d:1b:ab:26:e1:5b:98:0b:13:90:32:78:32:
ef:f6:dd:f8:2d:6d:1a:15:09:8c:c2:4d:bb:8b:6e:79:ce:82:
82:e9:a5:7d:e5:c8:bd:a7:5c:f5:02:f5:29:b9:47:a0:67:af:
b3:f4:4d:5a:60:a2:62:fe:73:e9:e6:62:f3:bd:26:48:c1:08:
30:3a:2f:04:21:7e:60:55:81:88:a4:bc:6f:eb:c2:06:d6:03:
29:17:32:0b:e8:e2:76:d4:33:3a:20:21:90:ed:ea:34:48:74:
ad:a6:9e:c6:b7:dd:cb:f2:fc:dd:04:68:a0:8b:53:91:5e:9f:
ef:d9:ac:08:e1:cc:95:d1:c8:a3:28:a7:a3:87:43:c3:e3:3e:
71:ee:c1:2e:e0:73:32:98:58:ac:fb:65:8b:21:e7:01:04:23:
cd:47:81:45:67:c1:61:8a:a2:f5:4b:43:f7:44:99:60:a4:b1:
ce:c8:36:84:b9:82:a1:ec:e3:55:ef:50:e2:0f:2d:0d:48:c3:
0e:fc:3f:a3:e3:07:24:d3:4c:57:57:ef:47:55:5c:08:01:6d:
41:80:12:fc:9d:16:c9:a9:55:e9:ec:f8:fb:44:3a:f5:ef:2d:
5c:f9:14:8a:80:7e:3c:39:87:ec:7a:5d:ee:58:0c:a7:f1:8e:
7e:b4:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:52 2025 by rpki-client