Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: yP0MydJHvjyyA4neQzq2OSi/bvkWfYYl2eNLqfTOMTE=
Subject key identifier: 06:02:E1:50:2C:26:4C:2B:D7:F2:34:0C:C9:98:E4:62:C7:1B:15:00
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 0199FDD8C452FA0ADFF8BACC42762C89AE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 01E7
Signing time: Sun 19 Oct 2025 19:01:05 +0000
Manifest this update: Sun 19 Oct 2025 19:01:05 +0000
Manifest next update: Mon 20 Oct 2025 19:01:05 +0000
Files and hashes: 1: Sb_S1tBlNN5yjIhiOwzCt0GXoKc.roa (hash: nTo01f8ApBndo/Q3i+Hin7sdaSsD+w4jDKQkdIBQYN8=)
2: VQTERXSGwf3PUhsSzRfJoMTCwIY.roa (hash: lyGgo91yoGwj1wHvWPvFSRN7NQx8IOKDi7RMWMy4Vw0=)
3: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: IgcOHges48So/NJWAAykhOPeYICfg6s+YEykT+RrNHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c4:52:fa:0a:df:f8:ba:cc:42:76:2c:89:ae:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Oct 19 19:01:05 2025 GMT
Not After : Oct 20 19:01:05 2025 GMT
Subject: CN=0602e1502c264c2bd7f2340cc998e462c71b1500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8b:bd:d6:8f:02:68:46:57:64:16:43:11:fe:
51:0a:ab:1d:ae:7f:9e:ba:b9:0f:06:84:30:af:bb:
27:be:8b:45:0d:2d:9a:20:fe:cb:84:71:0c:03:f1:
a4:fe:32:16:15:9c:77:b3:72:a3:44:25:9e:ff:25:
a0:6c:94:75:b6:ab:a0:db:1e:f9:b6:40:6e:08:64:
1d:b3:ed:bb:e8:86:83:bc:9c:a7:ae:bc:12:4c:ee:
04:4b:b4:4f:f4:f3:a3:6a:16:a9:c7:13:1a:dd:74:
ef:58:3f:30:d7:fe:66:56:13:85:9f:21:8c:22:ba:
f3:5f:d9:13:92:67:e3:58:48:28:72:4c:83:fc:5e:
ab:d9:18:45:76:da:13:76:1f:c9:dd:97:7b:91:25:
a5:2e:24:6b:94:ff:c2:32:bb:c1:21:b0:a5:e3:43:
26:c3:62:51:9f:02:65:17:c9:de:1c:de:d3:0d:17:
e3:6b:f1:b7:5d:11:58:86:1d:7b:e3:7b:cc:aa:9b:
38:dd:e3:1e:79:f1:42:66:ba:7f:e4:05:b3:24:5b:
2d:be:33:e4:d7:e5:b1:60:2f:2e:68:d6:51:47:a9:
4d:96:2f:5b:8d:54:1f:99:59:77:18:9e:cb:0f:52:
fc:38:e1:3f:a4:91:88:7e:d1:2e:08:2c:18:f6:5a:
43:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:02:E1:50:2C:26:4C:2B:D7:F2:34:0C:C9:98:E4:62:C7:1B:15:00
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:52:75:96:32:ca:17:1c:9c:73:51:22:84:d3:d5:b6:69:bf:
5e:e5:83:11:0f:ca:0f:eb:d5:93:21:a7:19:63:cd:8b:78:e1:
f4:16:50:4d:d2:60:57:3d:18:c0:1e:26:0b:bd:df:c1:28:11:
eb:42:47:e6:67:a9:38:bd:06:93:10:2b:60:40:84:7f:4a:9f:
89:3e:03:49:11:08:35:18:7d:17:c6:b1:fc:de:98:de:9b:f2:
0e:df:d8:48:c7:6f:22:7f:40:94:f5:0a:81:2d:08:1b:86:7c:
38:05:e5:0b:09:9f:19:c0:95:32:6b:c9:cc:6f:9e:77:d9:2b:
7a:32:9d:6a:79:59:89:5b:6f:c4:ae:1c:ec:6e:27:60:c8:7f:
9c:f9:d9:eb:88:08:c1:e2:38:e9:d5:6c:48:ab:fc:eb:17:57:
46:a1:15:6f:3b:03:f6:7a:1e:d3:45:da:c3:18:43:1d:71:eb:
5b:08:f3:56:61:4d:9d:32:0e:da:7e:a4:6b:d8:0b:39:80:7f:
34:37:88:10:1f:05:43:6c:f2:7a:85:1a:f6:d1:79:89:80:32:
05:ca:14:74:aa:b9:47:8a:5f:d9:df:61:8c:4a:28:da:ae:1d:
22:f5:02:0f:e9:c8:b4:7a:11:07:b9:95:30:3e:ca:bb:f1:92:
7a:13:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:31 2025 by rpki-client