
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: wl7mP32QNx3scU3hU5zHID+YAjaVFmG1qscXbWH9Odc=
Subject key identifier: 43:31:EA:0F:16:14:F8:3A:5D:B2:E4:50:8E:DA:60:54:4C:1D:8C:86
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 0199FC21ADB2BB25FAF65AC7D8B73D08C6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: LBD1DPwwUgOYgw559ImHyN0HUL0ixfa/N9dIV5nDECs=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ad:b2:bb:25:fa:f6:5a:c7:d8:b7:3d:08:c6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=4331ea0f1614f83a5db2e4508eda60544c1d8c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:70:08:a4:77:25:94:b3:ae:b0:d7:8d:4a:
26:75:8a:ed:e1:9a:72:e7:3c:c6:47:bc:8d:f1:80:
0c:87:bb:24:8d:e2:56:c9:05:3c:96:46:e5:c3:02:
d4:11:72:7f:f6:15:ef:25:9f:1d:62:da:59:4a:85:
6d:47:72:b8:7b:6e:e0:ba:85:ba:42:de:97:1d:d8:
be:b8:dc:ba:00:38:5a:6e:84:11:5b:e9:ff:b7:c3:
8b:be:ad:3f:99:17:04:3d:81:ed:cb:45:d8:1f:94:
61:bb:69:9a:09:88:1a:42:3e:d3:e1:d1:ce:a8:03:
54:a7:f7:14:f2:0f:78:1c:e5:5c:74:ef:a7:be:7f:
09:e0:29:57:1d:09:5a:a8:2c:e5:92:5c:f5:c1:3c:
09:41:b6:cf:ec:8d:b4:ae:f7:0e:5f:60:dd:0a:52:
08:1a:16:7c:31:03:95:7a:b6:f3:3e:36:62:eb:13:
f0:92:13:90:a4:fa:44:3c:85:40:99:99:31:85:fd:
1c:65:98:60:4d:01:00:51:16:8c:d9:f4:e6:9b:0c:
c6:94:99:6c:62:c1:cc:9f:39:11:19:31:91:44:01:
d9:0d:8a:34:a2:22:79:42:7a:95:23:e9:2c:2f:06:
3f:03:f1:28:79:1e:e2:58:d6:e6:0a:c8:23:38:f1:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:31:EA:0F:16:14:F8:3A:5D:B2:E4:50:8E:DA:60:54:4C:1D:8C:86
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ed:f8:56:06:15:d6:92:74:34:8b:ff:f8:59:3a:24:33:57:
d6:9f:91:26:54:bc:66:d0:e0:2b:41:3b:1e:93:2b:34:ef:9d:
fe:f6:fd:ff:df:34:fe:db:6f:e5:21:15:09:f3:4c:e2:3d:22:
d8:7a:9c:04:8e:58:75:ae:ac:95:c4:d2:81:fd:d7:65:2e:a4:
e2:5c:16:7e:a3:cb:78:9b:62:36:e8:ad:4e:02:48:bf:3f:70:
d1:7f:d3:7f:81:53:70:87:e4:e0:15:d0:d3:b2:a9:85:9c:cd:
b4:c4:85:80:fe:5c:e8:85:ad:07:43:ea:16:61:80:73:cd:6f:
8a:90:4d:7e:b2:e3:5d:a5:b8:ab:f0:35:7d:96:14:eb:f2:a2:
27:b4:f5:4c:5a:44:d1:d7:87:6c:eb:97:82:be:a4:ca:1a:76:
8b:ef:48:81:4c:20:0a:42:34:f7:31:91:dd:ca:7d:15:a4:e8:
d3:08:cb:73:41:31:59:9c:42:48:23:22:82:1c:fd:be:d1:f8:
5c:be:97:22:64:26:29:de:b5:42:27:b3:bb:21:ce:c4:31:f3:
3b:c3:15:fe:c4:5b:f8:9a:35:6c:1e:71:6e:6a:87:5c:1f:5f:
64:9d:32:71:ea:34:e0:26:51:42:4d:f6:57:d4:19:d5:6b:d6:
2f:60:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:15 2025 by rpki-client