Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File: qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier: AIJPmpL7LhaNDLzfjJZRGjUyHrwgFdkgB0jTbKQ0zEk=
Subject key identifier: 66:36:B1:FD:14:F4:7D:20:58:8B:6A:A0:C2:6E:B7:A2:1C:29:90:8A
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial: 0199FF596555D2B88D6141F4F5748D62984F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number: 16F3
Signing time: Mon 20 Oct 2025 02:01:12 +0000
Manifest this update: Mon 20 Oct 2025 02:01:12 +0000
Manifest next update: Tue 21 Oct 2025 02:01:12 +0000
Files and hashes: 1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
3: RXbwxnxv5i77bPKXOPNg3gLHQ2Q.roa (hash: Hb7ewCgNUReilTcVx5Y6r0li4yOFHBvAH9Jj35wZEN0=)
4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: XMHO1F84DnzOWCPsz5nzpemI1iQoO8UFZGBIm/ewEEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:65:55:d2:b8:8d:61:41:f4:f5:74:8d:62:98:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Validity
Not Before: Oct 20 02:01:12 2025 GMT
Not After : Oct 21 02:01:12 2025 GMT
Subject: CN=6636b1fd14f47d20588b6aa0c26eb7a21c29908a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:d2:aa:87:d4:9d:d3:a9:01:14:8e:14:7d:
f2:da:7e:4e:de:9a:bb:1c:d9:54:d2:86:5f:23:e8:
7e:e6:6b:0c:f9:87:fc:76:ae:fe:f9:6f:35:09:3d:
2d:09:fa:4d:f2:77:f3:65:6c:ea:d9:ca:db:01:ec:
32:f9:29:94:8b:7c:c9:82:3f:25:96:b1:2e:7e:17:
aa:9a:45:0b:cc:98:20:55:98:2a:30:c6:fd:dc:a4:
01:ea:9d:aa:3e:46:91:50:16:c7:dd:d3:89:c5:31:
f2:4e:9a:ba:bf:a7:3c:5f:46:dc:85:88:7b:71:69:
56:29:f5:46:40:b6:38:80:5d:40:01:28:cd:76:9a:
25:0b:79:62:18:03:7e:d7:83:7e:e2:75:a2:a6:f6:
24:07:c7:dc:24:60:c9:22:b9:50:f9:88:20:9e:99:
f3:c1:7d:92:0c:5a:d8:50:af:2c:c1:9c:65:27:ff:
ce:46:e2:34:0b:f5:ea:05:1b:5a:ff:3d:d9:3c:1e:
f5:24:00:b2:e2:60:f8:62:e1:f3:06:ed:4e:20:aa:
62:a9:b3:97:e5:e3:e5:15:86:79:34:24:b8:bb:6a:
c7:a4:d7:a1:10:13:1a:c8:ac:95:f2:eb:fb:3b:d5:
eb:e6:59:35:a6:8e:95:dd:2f:aa:a7:42:ab:76:61:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:B1:FD:14:F4:7D:20:58:8B:6A:A0:C2:6E:B7:A2:1C:29:90:8A
X509v3 Authority Key Identifier:
keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:eb:c2:01:11:c2:d3:8f:a2:88:74:35:24:10:ff:a3:6b:8f:
a8:22:30:be:3a:59:9e:d7:21:f3:80:08:41:39:06:d2:ed:f9:
48:1d:50:62:26:2c:97:7a:dd:43:1f:1b:3a:39:89:42:7f:ec:
c0:06:af:00:f3:ef:e1:b3:28:5a:ad:36:89:b8:6e:9b:4d:cd:
e9:9d:a4:ec:54:c0:60:a2:f7:20:59:73:eb:58:e6:9b:01:8d:
bd:9b:4a:23:1b:ba:5e:19:91:f8:4a:ce:55:7a:83:11:65:da:
32:92:25:45:4f:d5:13:74:eb:26:94:ad:60:25:80:8c:4e:4b:
d0:f0:28:2a:6e:1b:ca:46:33:59:42:66:1e:d6:c9:21:c2:cb:
2f:66:ce:9d:d5:7b:f6:1c:e8:0c:51:28:0e:d0:b0:7b:cc:24:
1a:2d:ef:ff:bd:9e:86:48:cd:93:d7:b0:8e:3e:4d:4c:20:b7:
d6:11:de:6e:d6:cd:a9:32:9a:de:e7:02:9c:ab:9e:2b:b8:73:
9c:ec:a4:a0:b8:17:54:ff:ec:89:11:50:95:95:19:0e:22:a2:
3f:8b:2a:58:b9:f8:1b:b9:91:fe:72:f5:05:36:9f:10:35:e7:
10:60:1b:48:bd:d1:17:cf:d3:de:78:db:b1:7d:db:37:f6:7a:
0e:1d:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:43 2025 by rpki-client