Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: 85ZpsqJ/x8Gbn83f6wheRqWvS71e66HTNfglVuzHwrY=
Subject key identifier: 1C:62:26:1D:3D:C0:B5:44:17:EC:FA:81:52:1C:B4:1E:32:A6:4C:CF
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 0199FC584243FC5E2643779C2B3267ADD711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0D77
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: ijsIBECGeKMSQg0GTWfLcAfYPtKrGjlQJYZbhvxU/eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:42:43:fc:5e:26:43:77:9c:2b:32:67:ad:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=1c62261d3dc0b54417ecfa81521cb41e32a64ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:5e:f8:77:32:0c:9b:97:fc:28:eb:53:45:
91:f1:6c:78:21:c1:5d:3c:0b:69:0a:04:e9:6d:71:
ac:05:96:3c:f4:c4:6b:2c:08:b8:36:dc:0e:9d:34:
a7:78:01:20:c4:91:41:fd:e9:f2:43:e3:02:86:0a:
02:1d:bb:50:5d:a7:9b:a3:10:73:fc:f3:bc:1c:da:
9d:a3:59:52:30:90:8d:05:e4:2c:c4:39:f6:5f:53:
14:53:cf:26:84:04:59:3c:5b:09:60:b5:bf:f1:ad:
f8:80:78:50:c5:65:92:bd:87:cc:65:26:9d:50:e3:
32:26:39:71:6a:6f:47:1b:58:9b:31:29:7e:6e:d2:
b4:a0:c6:8d:d4:d1:a4:ae:34:f7:bd:ee:8d:58:4d:
c5:14:78:42:86:9f:b8:bd:45:3f:31:ce:09:c8:68:
cc:22:d7:77:84:ef:a6:d2:9f:89:c2:23:4e:a4:c8:
4d:3b:f0:f7:c7:da:d1:f1:55:2d:d8:a2:28:18:8a:
b1:d5:7f:44:d4:00:37:a0:48:12:46:53:ac:65:16:
8a:22:2e:cc:de:49:14:2f:f9:20:fa:2a:41:3f:1b:
ec:e3:95:8b:69:72:f8:a7:cf:41:d4:17:53:7e:26:
0f:ce:11:96:3a:df:5a:ec:5c:3c:70:e0:c3:f4:ae:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:26:1D:3D:C0:B5:44:17:EC:FA:81:52:1C:B4:1E:32:A6:4C:CF
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a2:a2:c9:56:ea:fc:08:e5:19:a2:c4:f0:39:f2:74:0b:62:
2c:53:b8:9e:f7:02:2b:11:b8:df:ef:43:d8:16:f6:64:38:3a:
1b:25:4e:57:a1:aa:64:a1:27:fa:75:74:da:67:0e:ed:61:9f:
35:f2:3d:d3:4a:b3:c6:e2:56:cf:a8:e2:7c:0b:04:d5:63:cb:
5e:28:e5:de:b8:a7:a0:51:c2:8e:9c:13:17:ab:8d:6b:b6:14:
03:ea:ab:c7:75:f7:aa:9c:30:4f:90:5b:ac:09:65:1e:ed:45:
ae:52:26:dd:70:43:11:ce:96:7b:dd:58:bb:ee:39:d9:01:6f:
1e:44:5d:05:37:15:8b:83:bd:ca:8a:e8:87:b0:2c:e2:20:c9:
f0:e0:55:c5:51:8e:01:7f:62:ff:41:37:11:61:f1:bd:52:32:
d8:be:49:51:71:64:fb:b8:49:1e:08:f3:41:7b:2b:7b:4b:42:
3f:f5:44:50:7c:ff:24:91:19:fd:3c:4f:a3:08:e6:c1:42:c3:
9c:63:d9:4e:f8:18:6e:70:23:47:73:d3:11:1c:37:64:23:d6:
b3:3e:fd:e9:2c:c1:cf:4d:30:09:44:73:4a:a7:9b:66:43:e5:
c6:f5:e9:3d:75:40:16:f0:29:d0:c6:a7:8c:0f:c4:1d:df:b7:
ed:3b:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:01 2025 by rpki-client