Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: 4+7BUMGV6rumonXxDoxKA5MfwWZN0GbhT/5nRKTw0nQ=
Subject key identifier: 53:88:1D:12:95:43:CA:9E:98:4C:44:97:CE:75:61:E2:D8:0F:1D:B3
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 0199FD349034FC2FD2D8F8F1FD256807685C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0DFC
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: 5g6Suam3CJWeBj0wmccDyo/pGmbZt9tI+tyMaq8eJ6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:90:34:fc:2f:d2:d8:f8:f1:fd:25:68:07:68:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=53881d129543ca9e984c4497ce7561e2d80f1db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:ed:ae:99:56:ec:22:8d:62:27:59:f9:ff:
96:5a:0a:c2:ae:0e:da:6c:0d:70:9f:d8:bb:15:40:
94:e7:23:f9:4a:4b:b3:03:18:e5:39:63:cc:2e:e0:
a6:66:b9:64:52:14:94:8e:e8:eb:be:42:1e:68:7e:
00:92:86:d6:27:99:f7:15:b8:94:cb:a8:f3:f2:07:
f4:b2:d5:a0:db:0c:19:d6:23:50:95:65:65:4c:da:
e6:dc:72:78:96:c8:74:2d:60:bb:16:73:fe:97:7f:
33:66:77:61:6f:c3:cb:eb:bf:e4:27:42:bf:fd:66:
fc:67:2a:3d:63:c4:66:d7:e5:63:07:26:79:91:a4:
77:20:28:d6:ee:40:24:79:fd:2c:c1:e9:43:9a:74:
72:60:9a:30:af:16:3e:69:0d:23:93:ad:76:d8:78:
a8:c0:45:a3:b0:f5:35:15:ff:a1:0b:f8:bc:0f:2b:
9d:60:5a:93:5d:0b:b1:08:ca:0f:36:9e:d5:e3:62:
97:66:42:56:c7:9c:f9:96:29:d8:4a:fc:79:62:31:
da:ed:3e:c0:33:6f:cb:7d:b3:d4:b3:f4:be:96:d6:
ae:6c:85:cd:9f:07:e2:c5:4e:47:a6:56:f9:7a:59:
6b:7d:18:41:97:3c:53:01:3c:eb:73:8b:30:04:9a:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:88:1D:12:95:43:CA:9E:98:4C:44:97:CE:75:61:E2:D8:0F:1D:B3
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7d:74:72:fd:e4:d5:8e:a9:15:ce:79:f7:6d:6e:c9:17:e3:
23:f1:e9:85:2c:7a:a0:36:82:64:a2:c7:05:b2:8d:97:e0:25:
99:34:f3:84:f4:54:18:7b:d3:30:e0:96:58:55:d9:ea:c4:33:
65:a6:35:6a:10:07:82:3a:10:02:0c:c3:82:2a:f1:ea:b7:94:
04:74:46:ab:8f:83:54:49:0a:59:ac:89:f4:e1:17:09:ee:66:
29:e6:ca:b0:a9:2d:c8:63:82:c7:b5:df:a1:bc:72:71:83:3a:
4b:8b:8c:05:94:16:3e:dd:e7:97:a6:62:9f:52:84:82:ed:82:
24:f4:91:25:96:5c:44:64:a3:04:1d:b8:5a:61:b5:25:ea:93:
19:33:2d:1f:a3:05:e4:f6:16:42:28:39:78:4f:42:b7:d7:87:
9b:3e:0b:c2:d7:dc:58:4f:98:77:07:ed:f4:c2:9d:ee:c6:0e:
e7:57:6c:56:a3:76:c1:cb:20:7a:de:b9:d2:f9:f4:35:cf:b8:
71:52:ca:96:55:2d:bb:df:41:c8:24:ec:3a:8b:18:ed:99:b8:
14:33:94:4a:0e:4b:65:a9:da:1d:7e:a0:63:2f:ef:f9:02:46:
ad:c6:90:a3:bf:13:23:6f:a8:38:a6:13:f4:7b:b3:c5:e7:5a:
fb:13:d6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:21 2025 by rpki-client