Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: WQ0Ocvq4gmSlmNE0op7C+GIJGiF6RL9NE51DpCJcs4I=
Subject key identifier: 8F:F2:5C:53:1F:F9:FB:08:11:45:5D:BF:FB:77:3F:97:D9:6E:45:9E
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0199FDA1D2F9E57534A39ADF1DC89EDDB8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 14B2
Signing time: Sun 19 Oct 2025 18:01:04 +0000
Manifest this update: Sun 19 Oct 2025 18:01:04 +0000
Manifest next update: Mon 20 Oct 2025 18:01:04 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: qlGcZY1BrynGTOmzILBN3SHAPlqKSLm9api3CqpLFII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:d2:f9:e5:75:34:a3:9a:df:1d:c8:9e:dd:b8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Oct 19 18:01:04 2025 GMT
Not After : Oct 20 18:01:04 2025 GMT
Subject: CN=8ff25c531ff9fb0811455dbffb773f97d96e459e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:85:e4:87:fa:59:be:2e:2d:87:1f:bd:e4:56:
32:39:ed:0b:26:dc:10:32:44:c3:43:a0:b2:8e:91:
c6:d3:66:4f:ce:9f:65:e1:cf:6d:34:ae:d6:b6:17:
3a:47:5c:26:e6:97:b9:a4:77:3c:0e:53:f1:9d:7e:
cb:69:1e:a9:11:63:bc:f4:47:b0:38:93:94:10:a3:
5f:81:97:82:c1:8c:90:a6:8c:23:62:ee:3e:85:61:
a8:c9:d1:85:71:cb:be:b9:0c:44:af:13:95:e7:67:
52:eb:83:b9:ee:be:d1:32:c4:ae:95:cc:97:4d:fd:
78:dd:17:3a:4c:7e:ea:c0:2b:d6:d2:a6:e0:0e:52:
11:d8:48:6c:dd:18:c2:0b:ce:96:9c:6b:be:63:a1:
9e:93:5b:08:bc:4b:ff:74:f2:98:7c:97:2f:3f:8c:
cb:ec:1d:be:b8:36:eb:6f:61:5a:94:49:89:57:1d:
e8:e4:36:cd:e0:a6:01:5c:20:39:a7:e1:0d:80:3d:
7a:8d:84:8d:eb:f4:85:64:3a:28:8e:25:bc:86:9c:
6b:08:51:ac:51:22:a5:22:4e:7e:15:96:6a:9f:cb:
76:22:ac:13:73:f6:1f:3f:ec:27:34:e7:e6:8f:e2:
b8:62:4a:b8:da:a0:8f:4f:3e:bb:6f:ab:f1:0d:b2:
c5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:5C:53:1F:F9:FB:08:11:45:5D:BF:FB:77:3F:97:D9:6E:45:9E
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1b:86:ba:f3:99:6e:ed:d4:a3:9f:f8:27:a6:07:c6:92:b4:
da:56:57:86:44:8a:74:60:d2:ac:60:94:b4:54:11:2f:a7:c7:
e2:ec:3c:f9:79:91:e1:2c:8e:cb:a7:91:5a:99:c0:c0:d4:e7:
65:99:69:f2:fe:86:08:2c:e5:36:76:6e:7c:2e:79:17:c5:da:
ef:be:a6:af:89:2e:77:e5:0c:31:c0:9f:1f:4b:b0:cd:38:e2:
77:51:c6:76:ec:4d:f2:d6:b1:5a:49:cf:10:68:71:17:ed:9c:
ed:30:98:6d:86:a1:e9:2c:bc:f5:f4:c3:dd:bb:bd:53:e7:36:
58:e3:02:22:67:73:99:44:03:5f:be:ab:11:6f:b3:6d:30:62:
41:97:99:fb:37:d5:d5:56:21:fc:0c:f3:21:c6:15:0b:8e:98:
bf:32:6d:14:4a:31:26:17:1a:55:68:cb:f2:c9:c6:4f:40:d8:
2c:27:bd:4a:87:79:39:d3:00:8b:50:bb:7d:5d:36:e4:17:d1:
dd:2a:0f:03:ee:72:64:f4:a5:db:0b:d5:bd:b7:d1:d2:10:12:
fe:6b:6d:bc:85:cc:d8:e1:2a:35:f9:9b:7b:69:b8:57:8d:20:
12:c7:d4:41:93:b5:d8:48:77:6c:1f:a4:bf:75:6a:c4:f9:ab:
83:a7:6e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:12 2025 by rpki-client