Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: su77jy+KLKFi8rLncBICUnxQHrZAmsYz4BOsu2Hih8Q=
Subject key identifier: 82:2B:D4:BA:DC:68:1D:6D:66:4E:F8:3D:D5:C2:8E:0E:D8:7C:31:0D
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 0199FC8F33EBF210658C2491018FEB0E4270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: ShowtNM2m2UKeBL8F3fZYKX41FQ.roa (hash: fLdZxXolLRuOUGV4tUzHHqmQm+iuYEtRLW2OEHSE+Js=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: pJc5lNpU4jEZqc5VEzmLdGR1CIbRIG5wiuqC0/KcbdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:33:eb:f2:10:65:8c:24:91:01:8f:eb:0e:42:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=822bd4badc681d6d664ef83dd5c28e0ed87c310d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:96:a2:c0:7e:4c:01:d4:77:08:16:32:e2:
0f:ff:44:35:44:3a:7e:37:46:fe:91:2d:a4:79:37:
53:99:b2:3c:b3:29:4f:0a:6b:22:a1:76:10:88:9c:
9b:6d:cb:4b:38:71:87:d2:11:53:1c:e3:7c:da:f2:
f9:b5:1c:73:da:a6:b7:ac:50:18:aa:6e:3a:21:10:
fb:4c:c8:73:0b:77:ab:9f:3e:41:fa:5d:d5:d1:93:
00:5e:27:6e:1b:f5:50:26:2b:71:53:5f:79:81:03:
16:c0:4a:bf:a5:50:de:a2:68:87:3f:4c:b5:32:f8:
b3:c1:52:57:e5:b8:e4:04:f5:fa:7d:3d:ee:cf:0a:
a4:a8:a9:2f:2e:53:d2:f7:ff:88:cb:e5:d0:72:06:
5d:46:23:26:73:19:a8:b3:63:6e:4d:ec:d7:b5:ac:
77:3f:9e:82:53:01:40:ba:a0:11:54:ce:f5:d5:d0:
69:38:b0:29:4e:03:6a:6d:b9:af:e8:5f:a0:85:5d:
1f:11:8f:c1:4d:0c:13:13:c8:57:76:20:9a:48:71:
1a:cd:2b:26:3b:41:e3:2d:50:3c:6f:06:78:f5:66:
fa:52:1d:f4:00:41:1b:56:84:b8:40:4f:55:b1:ac:
46:30:f3:60:36:1b:c7:40:41:39:fe:f4:95:99:9a:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2B:D4:BA:DC:68:1D:6D:66:4E:F8:3D:D5:C2:8E:0E:D8:7C:31:0D
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a5:70:19:1e:a4:e0:fc:02:cc:b7:f2:29:2b:13:b0:08:00:
81:fa:3f:e8:e4:03:d6:a7:60:04:98:a6:55:5d:0c:8e:d9:21:
5a:e4:f7:4b:db:e9:92:29:59:ed:cf:67:b1:59:af:82:66:9f:
cd:ac:a1:ce:1c:e3:0f:40:cd:8c:5b:45:ff:2e:43:b8:bd:93:
d4:26:45:94:1d:cf:b0:18:c5:ce:01:a4:54:6d:10:7f:28:db:
f3:8b:2c:8a:d5:d7:e7:83:c3:21:b9:17:e6:09:f1:42:2d:74:
91:0c:5e:eb:3a:0e:02:4a:2a:67:dc:47:93:81:9d:b5:99:ca:
53:e6:fc:a4:78:20:23:b4:83:00:9a:0a:ff:cf:01:fd:46:33:
04:f3:d1:ae:35:7e:fc:0d:7e:bd:3f:84:84:37:4d:7a:b4:e7:
b7:21:ec:28:13:b7:1b:57:59:00:46:8f:3d:19:28:e1:96:bf:
56:9c:e7:1a:6c:5f:5c:ab:81:2f:be:8b:fb:47:ff:65:c3:44:
63:95:d9:6b:6a:b5:0c:66:7e:b2:b7:27:79:fd:f7:23:bd:be:
ee:91:19:44:37:bb:ae:d3:49:6f:94:70:7b:85:09:85:42:d7:
7e:c1:b3:f1:0a:26:6f:d6:87:83:58:45:d5:f1:7e:19:5d:1f:
22:f7:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:46 2025 by rpki-client