Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: nsv/Usoo1fizQZn0NV6h0u4uEnrIp3eUe7ljatARXg8=
Subject key identifier: 7F:92:26:86:AE:27:B1:4B:68:EF:4C:2A:98:60:F4:E2:BB:55:05:FA
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 0199FE7DBA7BF9729E9FE8ADF7B457BFABDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 15D8
Signing time: Sun 19 Oct 2025 22:01:16 +0000
Manifest this update: Sun 19 Oct 2025 22:01:16 +0000
Manifest next update: Mon 20 Oct 2025 22:01:16 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: sYonAMyrBGwhy90eVrnw35sPT1XNzN47udakJ53PvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:ba:7b:f9:72:9e:9f:e8:ad:f7:b4:57:bf:ab:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Oct 19 22:01:16 2025 GMT
Not After : Oct 20 22:01:16 2025 GMT
Subject: CN=7f922686ae27b14b68ef4c2a9860f4e2bb5505fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:02:0b:c0:5b:95:1c:47:4e:90:db:ee:93:
9e:72:7a:05:1b:e0:9c:a1:a3:12:47:69:84:1a:b0:
e0:13:72:ea:62:f3:91:78:97:e3:fb:60:1e:c5:21:
9f:06:a3:26:31:03:2c:0f:c6:53:a7:02:10:0b:0a:
26:c4:bb:16:03:d2:f1:1f:54:59:01:04:2b:0f:38:
1b:bf:9c:89:09:ff:7c:17:fd:02:38:49:a3:49:bd:
d2:5c:f4:06:cf:8e:0f:42:bf:64:ba:6c:de:b8:2a:
4c:1d:0e:f0:65:6f:ca:93:ae:8a:82:89:80:15:5d:
50:b4:89:ab:3f:26:4e:7d:9a:09:3b:00:e6:6b:91:
64:4b:a3:91:6b:38:e6:e4:05:d3:1e:7b:c6:b0:5c:
b8:a8:bd:15:d5:8f:76:00:d9:a0:84:f1:e2:e8:bc:
8d:b6:98:d0:0d:e7:f4:5d:bf:37:b7:a6:fa:a2:a0:
d3:8e:b3:ac:4b:92:df:7c:d7:68:76:0f:4f:e6:e8:
e0:3a:c0:71:c8:e9:28:1d:1d:6f:33:72:30:2f:fa:
ac:8d:ed:7c:3c:da:5d:1e:7d:37:ac:17:92:c0:f2:
a6:38:92:35:23:ff:12:c3:2f:c8:22:bf:64:5a:9d:
5f:e2:84:5b:d0:dc:e6:73:15:2c:b2:93:7f:87:1f:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:26:86:AE:27:B1:4B:68:EF:4C:2A:98:60:F4:E2:BB:55:05:FA
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4f:55:f3:61:01:49:51:23:d2:b7:de:76:c6:1f:9d:20:12:
4e:00:52:f6:c0:98:19:ec:e0:f4:5a:28:b7:34:ad:2d:69:6f:
00:14:14:2a:3e:88:59:30:02:43:46:52:9c:1a:6c:c0:89:10:
24:fc:fc:13:8a:16:f6:d1:21:6a:63:9e:b8:f2:90:56:01:59:
4e:16:41:70:d2:0e:d9:01:83:02:9c:a8:b7:e8:a5:12:85:9f:
54:81:96:b5:92:f7:7b:51:1c:93:b2:79:e6:13:69:10:ed:08:
5c:76:97:08:85:c1:29:03:ad:7e:0a:b4:e0:2f:d9:10:dc:e6:
ad:b0:f3:2b:4c:53:8c:8d:61:cb:41:2b:e2:53:c0:1a:ee:54:
0e:eb:83:97:7e:43:23:87:9d:a3:09:d7:b5:f5:69:71:9d:85:
c5:94:c2:3f:be:14:fa:af:7a:a2:59:dc:ab:8e:ca:55:5b:00:
60:e5:96:42:bc:b0:82:47:41:d1:f1:b2:df:b2:b4:46:66:fc:
65:78:71:a6:90:42:d4:be:f0:9f:f4:a7:7e:1b:9f:af:46:47:
ce:35:b7:2e:29:37:a8:74:0f:f5:40:3d:e3:d1:94:8b:88:ef:
9a:33:9f:bf:d8:4b:ae:af:5d:fe:f0:ab:85:77:89:78:c2:27:
d8:05:45:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:59 2025 by rpki-client