Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
File: qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json)
Hash identifier: SXPq4K63UQNK25o9uFe0VM8jkkK7RTifWHMyB+ZRrpU=
Subject key identifier: 42:A4:26:3D:71:C8:63:26:7F:3B:92:0A:90:A0:B4:DB:13:89:7A:75
Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c
Certificate serial: 0199FE46D4B8F6780BA381279F6701B4043D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
Manifest number: 0ADD
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=)
2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: rz+2oFgHJy5A/RGIWJKxzEfIm4RvKrcIfhHomA1ks48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d4:b8:f6:78:0b:a3:81:27:9f:67:01:b4:04:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=42a4263d71c863267f3b920a90a0b4db13897a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:bf:17:55:53:66:b2:43:67:0c:59:18:b0:
18:01:a4:a6:f8:41:8a:20:16:d5:d5:4c:58:69:ca:
cd:ac:95:c0:b1:58:1d:b7:98:4e:de:2e:66:a5:93:
d8:77:11:e1:5a:a6:75:c7:af:97:f7:d8:82:a2:33:
c2:e9:59:57:98:d0:6d:fc:7d:9b:06:cb:b7:af:57:
fc:fa:52:7e:12:0b:60:58:49:10:5f:28:0c:39:37:
7d:d2:21:ab:36:37:8c:f5:69:04:d3:fa:56:c8:6e:
60:83:13:90:a7:b2:12:10:52:ac:6d:c7:31:0f:2c:
8e:12:7e:cc:37:17:f2:3c:c0:f7:3d:75:a3:f1:fb:
3e:5b:3c:ae:bc:77:1e:68:76:9e:41:93:ab:36:e9:
bd:f4:7d:42:d4:2c:18:2d:ef:69:4c:04:5e:9a:f8:
a6:e2:cb:1d:d1:4c:46:df:f0:f4:52:94:b1:75:cc:
cf:a4:89:60:0e:c9:a8:eb:31:6a:44:ec:c9:e4:02:
68:02:83:53:90:6e:d8:07:fe:86:22:5e:2c:a3:63:
7b:91:ea:2a:ea:bd:02:69:45:f5:db:79:c8:7e:43:
d3:75:e0:cb:f5:32:58:6d:da:05:6a:d2:f1:29:45:
98:86:83:86:b7:96:c8:52:36:50:16:9f:a4:f4:81:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A4:26:3D:71:C8:63:26:7F:3B:92:0A:90:A0:B4:DB:13:89:7A:75
X509v3 Authority Key Identifier:
keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:30:68:c1:4b:ae:62:e9:7d:27:5c:76:09:f9:64:02:3c:ed:
4e:af:09:40:a2:a7:63:55:57:ba:b3:a8:05:26:7c:0e:96:f2:
b6:bc:c5:8b:c4:05:3a:08:94:83:97:6f:21:2c:0f:54:e6:28:
53:e0:28:68:ee:9a:37:dc:70:1c:61:1a:5e:00:bf:53:eb:9a:
20:65:93:e7:14:20:14:73:1a:ae:03:d2:b2:95:0c:77:e5:0c:
9b:c8:bb:3c:da:0c:14:77:22:4e:a2:ed:9a:c7:e2:6b:fe:af:
e0:e3:80:ef:e1:5c:4b:ad:d1:4b:f0:4d:5c:10:1f:35:40:87:
6b:ef:de:b7:d8:13:99:8f:b1:dd:84:e0:24:01:b0:45:a6:0e:
f3:21:21:f0:1e:c8:49:34:cf:e5:dc:0b:e1:fe:a7:f6:56:71:
15:d5:a6:d3:17:7a:30:9c:34:92:38:9e:6c:db:28:02:9f:f7:
c7:e4:cd:6f:d6:80:58:6a:4d:13:ad:76:66:ce:2a:e6:68:0a:
db:35:b7:93:f6:c9:4d:ac:d7:d5:65:48:57:f8:8a:ba:78:c2:
db:e4:5d:87:a9:e6:76:8c:71:28:64:48:55:cc:f3:44:5b:c2:
12:e9:19:6e:19:77:aa:ed:4d:24:a4:43:4b:5f:f1:13:78:39:
d0:e1:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:03 2025 by rpki-client