Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: dyAN5xJX3t4OSW0IToGwEPcOpFKL/E4tvLgiaQ6NcYQ=
Subject key identifier: D8:35:9D:3A:3E:81:0A:90:05:49:55:17:84:73:38:B6:F1:DC:6A:92
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 0199FB0EE48655EF3495EF2C496B9B3C09FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 0129
Signing time: Sun 19 Oct 2025 06:01:21 +0000
Manifest this update: Sun 19 Oct 2025 06:01:21 +0000
Manifest next update: Mon 20 Oct 2025 06:01:21 +0000
Files and hashes: 1: FeEiiWjAdJKymNjox7n7zCUc9Wk.roa (hash: dzt2dxmN6m2Hyo/H9hlkWWL7XeHHBgERvBsbJJztvYI=)
2: XBjHbo-JikUirnDC9mDO-NUnYF0.roa (hash: Kq6nw7oAp8kgVGJWvOFausntjkcQVXP1uvqCb3Bz6XI=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: LCszNl3DyVzAGhCfVrbr/B7yPzAbqo1d0doVgUG4cW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:e4:86:55:ef:34:95:ef:2c:49:6b:9b:3c:09:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Oct 19 06:01:21 2025 GMT
Not After : Oct 20 06:01:21 2025 GMT
Subject: CN=d8359d3a3e810a9005495517847338b6f1dc6a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ee:ed:5e:e6:0f:22:fa:4d:ad:f1:39:a6:5e:
c5:59:65:a1:c8:93:5a:ad:2a:3b:67:ad:f2:c8:4f:
0f:37:9a:28:d5:75:ae:c9:38:d0:33:ea:49:81:0d:
70:e7:32:d9:70:1b:e8:a4:d9:0f:37:2d:2e:41:97:
97:7d:a0:d3:33:3a:53:65:6b:05:2f:ac:12:31:53:
48:bc:81:15:51:4c:66:49:ee:e2:67:70:00:e6:a3:
f4:5e:b9:8e:89:5c:81:23:27:96:55:7f:6d:1c:cc:
3a:04:a0:73:2b:fd:81:1f:d5:a2:14:e0:97:2b:29:
f2:af:c3:52:bc:b0:74:8e:49:0f:8b:2b:b6:c5:9b:
91:f2:cd:8e:fc:4a:f1:fc:dd:5b:50:6d:e3:74:b2:
22:57:1a:cc:de:ad:dc:f3:31:50:c7:86:40:f3:90:
f0:77:8c:78:55:ce:c3:75:67:25:09:85:44:d5:ce:
da:24:d0:1b:21:cf:df:63:ae:a9:80:29:0d:e4:2e:
2b:ea:82:fc:21:08:63:e3:45:d0:3c:58:fb:3e:51:
66:7a:1c:ef:2a:3f:7c:ec:9d:57:1b:ed:c0:25:d6:
ac:dc:76:76:91:cd:5d:c9:96:8e:2f:15:59:41:de:
bb:a5:b1:05:27:40:e3:6a:58:11:f6:56:e3:f7:17:
e6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:35:9D:3A:3E:81:0A:90:05:49:55:17:84:73:38:B6:F1:DC:6A:92
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:99:23:e3:98:fc:34:72:3c:57:0a:4c:3a:bb:0f:9b:0b:53:
44:7d:87:54:df:8f:cc:9e:b0:5e:b7:60:08:af:7c:57:ae:93:
36:46:31:6b:74:4f:8a:77:a4:e8:8c:82:12:e3:ea:ec:81:8f:
71:7d:29:5f:53:2c:29:90:32:91:f1:40:46:29:3d:df:11:f2:
92:2e:f0:95:ac:4c:0d:5b:d1:91:47:06:e5:e3:e2:c1:e4:76:
c8:85:5a:59:1a:c7:a8:c3:7a:72:e2:05:a1:1c:f8:7b:4e:97:
af:a4:5d:3e:7d:2f:8e:bf:7d:70:60:15:00:07:26:1d:47:8e:
d6:84:65:47:99:ff:91:85:f3:7a:78:10:33:61:1c:d3:5a:40:
0d:00:d6:d9:6a:6f:fb:fb:77:7f:28:53:db:dc:d4:29:34:ab:
ef:ca:ca:c4:d4:9c:d2:64:17:52:df:3d:bb:82:37:93:29:e7:
c1:8d:c7:12:0e:9c:52:07:3a:ee:12:d9:97:ad:00:00:e3:ea:
6f:dd:85:70:1b:8b:81:8b:9c:76:72:db:64:c5:63:aa:1f:e1:
91:d0:eb:57:b5:ca:1a:af:be:de:fa:ea:e8:19:31:17:12:44:
67:51:79:9f:81:a1:ce:75:65:8a:32:bb:c8:25:50:90:e9:ef:
cd:66:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:49 2025 by rpki-client