Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
File: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft (raw, json)
Hash identifier: CBXJSRUM1tf8BVr8inq5LcVzMM5Dzr6lj4BERzs4w1Y=
Subject key identifier: AE:9A:C0:1B:7D:1E:7B:60:44:70:BA:EC:CC:C4:B0:01:9B:A0:8E:22
Authority key identifier: AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
Certificate issuer: /CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Certificate serial: 0199FF2250043D09C537D91EC0F5D2BAE462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 01:01:02 +0000
Manifest this update: Mon 20 Oct 2025 01:01:02 +0000
Manifest next update: Tue 21 Oct 2025 01:01:02 +0000
Files and hashes: 1: fc4brGlD2V9aXaMOkj_E0RZ_J08.roa (hash: OhUlbRmFgYOLeHLw8imL9BrjCyNfPZwGRzxzejrVjWo=)
2: q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl (hash: 7AXJ/tLLoXFkhgyk/vS+3k7ob36cOYvvNMGe4rMheF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:50:04:3d:09:c5:37:d9:1e:c0:f5:d2:ba:e4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2353d9bd5b8c5b58cc71021324bb90dd2dd91
Validity
Not Before: Oct 20 01:01:02 2025 GMT
Not After : Oct 21 01:01:02 2025 GMT
Subject: CN=ae9ac01b7d1e7b604470baecccc4b0019ba08e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:c9:7c:28:a0:54:82:1a:14:7a:1f:7a:56:
63:37:72:69:92:0b:cc:78:48:50:3a:14:f7:aa:51:
d3:7b:3c:01:f5:80:43:6e:10:a9:d4:dc:16:15:4a:
f7:fa:15:3b:82:f0:95:fa:20:02:fc:0d:3c:aa:2c:
9c:1c:32:d2:ae:41:59:4b:c8:c2:a1:49:56:55:0a:
e3:e6:1c:5c:01:5f:99:53:e2:f5:46:f5:e7:c4:45:
65:9d:83:68:76:5a:a8:6a:05:a9:fd:cd:39:82:dc:
05:ba:9a:67:e9:ad:c1:ff:96:88:45:89:bf:d8:19:
2a:e4:15:e2:21:e4:1f:7b:03:e7:72:ff:92:dc:f0:
53:a9:5b:4b:61:6c:19:f2:7d:a6:52:13:55:5d:17:
ea:86:c9:ae:0f:6c:06:1d:e0:67:b9:ce:27:5a:e9:
f1:58:c4:76:24:c3:a3:1b:a1:22:3a:1e:fe:2a:e1:
89:ee:5c:9a:b5:27:68:63:d6:37:90:64:45:48:f2:
8d:81:e0:7f:f2:53:94:c0:53:fd:61:67:af:23:c5:
c4:ee:c4:a2:9d:43:80:11:21:92:ee:f2:44:f8:9e:
50:ac:3f:dd:9d:1a:76:4a:00:e3:b8:f2:b1:f1:2f:
5d:15:36:e4:36:de:36:f9:01:c1:4e:07:cf:11:e1:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9A:C0:1B:7D:1E:7B:60:44:70:BA:EC:CC:C4:B0:01:9B:A0:8E:22
X509v3 Authority Key Identifier:
keyid:AB:E2:35:3D:9B:D5:B8:C5:B5:8C:C7:10:21:32:4B:B9:0D:D2:DD:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ca62a1-4c72-481b-9f25-eec490d506f7/1/q-I1PZvVuMW1jMcQITJLuQ3S3ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:21:a2:db:59:7f:88:b7:26:8c:5c:31:b4:e4:f9:dd:82:9a:
3a:a3:d9:96:d6:f3:20:59:c1:0b:47:7f:62:a9:bd:27:e4:52:
6b:fc:f1:e9:fd:54:42:a5:7c:12:e0:eb:ce:06:59:ed:7f:7a:
41:15:dc:8b:6d:ef:39:8f:c3:66:a0:3c:17:f4:3b:c1:b0:49:
0d:5e:c6:c1:04:16:8a:4f:51:5e:a3:9a:1b:d5:85:df:cc:01:
26:88:cd:91:b1:c2:b5:9d:26:e1:f6:c7:51:18:ba:8e:71:5c:
8b:2c:1a:18:47:4e:ad:33:89:34:83:fe:62:21:fd:7e:c3:b0:
0c:b0:c5:ed:33:d2:e2:64:56:87:8f:47:cc:40:cc:cb:0b:90:
73:09:e5:f4:0d:01:23:ce:b8:f7:41:b3:3e:fa:ea:77:97:ee:
31:d7:90:ab:f5:80:ac:c0:37:b1:3a:5f:d0:b5:5b:4d:f2:4b:
63:c9:86:3c:12:59:40:16:38:30:9f:f8:a8:ca:1e:09:06:4c:
3b:8d:e1:b7:a6:78:44:92:ba:a9:08:d7:4b:d4:eb:f8:c9:c7:
a4:bb:d4:e0:19:ec:78:70:9d:75:1e:18:b9:e9:ee:76:52:38:
4f:e7:32:32:0b:7d:16:10:81:68:b3:71:7c:37:4b:4a:bc:0b:
80:fa:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:50:04 2025 by rpki-client