Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File: qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier: VbVIxR9ZCUIT/1lkrvn/wQlWFX9oH8InpjWzmNBnce8=
Subject key identifier: 9A:F1:1C:60:AF:14:1D:FE:F3:60:34:72:C0:65:D1:B9:B7:69:67:B3
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 0199FBEB05F316091C34A22D20D69665D39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number: 0656
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: JCyYV4GcFN8_6fODHaiibk24OdU.roa (hash: rqcgrF53T+cZen5IxWyMXyl8d3mCW06Z5JfeI8g0Qd8=)
2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: QEPM3w9Gs0Zz+K9w3yR7Wa9IhNPslrK9fanbo1ySysY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:05:f3:16:09:1c:34:a2:2d:20:d6:96:65:d3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=9af11c60af141dfef3603472c065d1b9b76967b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:ca:d1:b8:08:26:15:8e:71:dd:77:bd:cf:
b9:13:8c:b4:05:6d:74:d3:40:e1:4c:a2:e3:9a:6c:
e9:65:d2:9f:ed:25:49:09:10:74:e0:9c:48:7f:7e:
2b:10:bb:72:2b:c1:3b:3d:24:22:40:41:ab:12:9e:
12:af:32:61:2c:7f:bb:11:1e:25:29:72:e1:83:99:
91:27:08:67:5d:5d:91:0e:8c:44:96:37:72:06:7e:
c6:7c:99:38:2e:6b:0f:cc:58:6b:bb:dd:b9:46:0b:
ca:b9:0a:7a:44:66:7a:f6:88:92:ba:21:0a:eb:22:
a1:86:d9:5f:e9:c1:5e:24:dd:8c:d6:8d:30:23:87:
bb:b0:4a:81:83:91:c5:44:b3:65:d3:5b:bd:25:a9:
ac:df:8a:de:91:7a:71:ff:f0:ba:92:af:09:9d:8a:
f7:55:6b:4c:51:6a:65:ea:07:55:cd:d1:f3:c9:c3:
8d:cd:0b:7b:20:4c:1c:b2:80:d0:6b:c1:56:01:ef:
57:e1:4e:69:bb:52:a3:c9:6d:38:ec:37:8c:04:cb:
2e:d2:68:9f:1c:f9:fb:9e:b3:0f:2a:88:13:60:22:
ef:6e:70:bd:6e:f0:68:ff:f6:d1:dd:01:08:31:95:
a7:87:19:0c:44:f3:2b:04:af:20:d5:35:1b:28:60:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:1C:60:AF:14:1D:FE:F3:60:34:72:C0:65:D1:B9:B7:69:67:B3
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ee:68:12:24:58:49:5f:52:37:85:00:50:be:36:96:95:de:
7c:a6:40:9c:c6:15:f9:0f:08:2f:52:30:f5:27:71:30:8b:9b:
83:ac:93:df:80:d9:b6:c4:19:ae:37:ba:41:95:79:7a:74:14:
b5:a0:e8:f8:a9:61:00:b0:0e:0e:10:47:f4:3a:9d:12:0a:d1:
47:48:36:cb:44:c4:5d:00:25:84:bc:d2:80:d4:03:5b:d0:94:
84:c2:8a:31:df:22:cf:3b:11:0c:99:ac:37:37:4c:bb:f5:70:
15:83:1e:83:92:b4:31:38:d1:b4:37:98:6e:ad:2a:a1:d7:f6:
7e:ef:9c:b9:76:fe:4d:fe:b3:dd:1e:a3:9a:84:3b:67:53:51:
86:3f:c8:0e:1f:35:a5:7c:28:a3:55:02:60:b6:c8:55:f5:95:
a0:df:b5:34:45:0c:91:39:e6:e3:9c:ae:55:c7:77:b5:2e:fd:
11:e5:d4:8c:dd:5d:8b:a1:cb:42:af:15:85:24:c3:b4:36:de:
85:04:c9:6b:04:d7:3f:d7:a7:f5:a2:90:aa:fe:de:f4:d0:bb:
e4:fe:10:5c:de:e3:8a:f5:59:52:3b:8b:0d:a0:08:b2:7d:c8:
de:89:13:29:88:6c:4b:89:4e:25:05:8e:4f:ca:ea:08:a5:65:
2b:e1:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:48 2025 by rpki-client