Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: hnF9VGk1gwvCPnW1PvqQ6hxrp8WCWa+1Fw46QHrNH6g=
Subject key identifier: A4:64:13:12:18:24:BF:74:B6:E5:21:54:1F:34:34:AB:85:98:93:8D
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 0199FDD99382549611F2A9A0DA1431AC9997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 0B22
Signing time: Sun 19 Oct 2025 19:01:58 +0000
Manifest this update: Sun 19 Oct 2025 19:01:58 +0000
Manifest next update: Mon 20 Oct 2025 19:01:58 +0000
Files and hashes: 1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=)
2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=)
3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: A9dvlUa6O5SmLetE1s9GpP5FXXBlgQxc9zOsDEV9hdQ=)
4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=)
5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:93:82:54:96:11:f2:a9:a0:da:14:31:ac:99:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Oct 19 19:01:58 2025 GMT
Not After : Oct 20 19:01:58 2025 GMT
Subject: CN=a46413121824bf74b6e521541f3434ab8598938d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:90:30:2b:37:3d:9f:6d:f7:0d:dd:d4:3f:
ed:ea:2d:90:e5:d5:ca:c1:08:0d:c4:d3:de:89:3b:
26:0c:95:97:ce:3f:d6:99:f7:eb:6d:4e:12:e2:7d:
d4:cd:ec:41:35:03:41:a7:93:37:9d:75:d9:9f:88:
6f:9f:05:73:5d:61:dd:83:35:9e:ad:13:38:3e:3e:
83:0d:ff:fc:b3:8f:bc:0d:d3:e8:45:52:2d:07:64:
c8:92:f2:f9:c9:a7:ae:60:fc:31:09:9e:08:2d:3d:
f7:33:54:f6:f8:1a:15:30:b6:26:43:9a:e6:b3:28:
f3:42:2f:00:28:1b:cb:e8:16:51:62:02:39:4b:1a:
c0:41:c8:c6:4e:0c:93:7a:e6:53:d7:1b:8f:54:43:
ca:b3:61:f8:c6:33:54:82:b0:de:0a:0e:fe:14:64:
9e:52:ac:5f:45:51:01:cb:fa:a7:c8:d0:66:f2:44:
08:7e:df:a4:2c:16:3a:49:56:a9:5a:a6:1f:81:6c:
d0:d2:b4:91:55:a6:41:6d:70:d3:2f:4c:59:6a:4e:
4d:08:92:76:fc:5f:9c:7d:42:c9:77:0d:7d:68:3f:
f4:b4:0c:9f:32:9b:2f:17:63:02:ac:ea:f9:18:31:
e6:d5:11:64:dc:4f:72:e2:33:55:1d:8f:7d:b9:3b:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:64:13:12:18:24:BF:74:B6:E5:21:54:1F:34:34:AB:85:98:93:8D
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:9b:bf:1a:71:78:ae:4f:e7:8f:4a:ed:e1:fc:8e:1d:00:9a:
c4:aa:88:21:83:1c:f7:db:5d:e2:82:05:c2:a5:fb:f5:86:12:
80:5e:fc:1b:64:1a:ac:e3:5d:6b:64:3b:a8:c6:bc:32:59:4a:
f3:3b:4f:88:c0:4d:da:b1:27:73:48:48:93:fb:8e:07:88:3e:
53:56:cc:ef:76:1a:05:d9:3a:71:74:f0:9f:c5:48:22:23:f6:
01:c9:f2:de:ec:5d:6c:51:95:57:c7:31:56:10:52:e8:fd:fd:
7d:e5:86:ca:e7:07:e7:71:99:1d:87:aa:64:56:2b:33:f1:7a:
33:f0:7c:c4:31:77:c7:ca:10:e6:28:8e:c5:48:b8:3d:68:cc:
5d:d6:dc:dd:a8:40:9f:b2:d2:84:9e:be:76:26:ae:71:c9:2e:
8b:ea:47:58:6e:d9:cd:f5:ce:e0:d7:77:16:26:4e:74:79:d0:
09:0b:c7:bb:a0:75:d8:60:1d:fb:a7:08:1a:8e:ec:b9:de:01:
f9:eb:02:86:77:c9:9d:78:f0:63:a2:87:cf:bf:48:78:0f:57:
7a:19:4d:01:38:65:3a:20:50:08:fc:d8:5f:dd:49:98:cc:86:
3d:6d:f3:8d:78:ab:33:eb:88:49:6a:d5:59:4d:e3:db:7a:59:
ba:93:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:29 2025 by rpki-client