Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: XuLTz6Cu5U8CkZHlozTie8GEPdVKfkBu+OtwJ2cwzPg=
Subject key identifier: 8C:7E:79:32:BD:48:CF:79:1A:79:61:20:D2:30:35:72:09:8A:AE:A1
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 0199FB7CB52A84B6A974BB0443280AE853B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: qY/a6p8gcuTAgZh0m/pXpfry1OOomOgkbeDZhiVUuSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b5:2a:84:b6:a9:74:bb:04:43:28:0a:e8:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=8c7e7932bd48cf791a796120d2303572098aaea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:52:a0:ad:33:74:04:b4:1b:8d:8e:e8:d5:
67:be:a8:8b:cb:93:99:be:44:3b:a5:c4:08:37:ef:
4c:b6:67:62:1b:c0:84:2b:5f:12:b0:41:28:99:a1:
1d:c5:47:87:5b:ca:b2:37:ae:51:48:6d:ed:a0:c2:
ee:f1:fd:1d:a4:63:2d:06:3d:7e:b1:97:b9:dd:b0:
2a:41:46:fd:77:8b:3e:e1:0d:d7:fa:43:32:b3:3b:
db:1c:7a:23:3e:54:d7:30:b4:8f:08:63:d5:b6:d1:
10:0e:a9:e8:6a:ab:29:9b:83:db:55:41:cb:92:71:
a4:b9:d5:cb:74:55:42:91:e6:9c:d3:6a:11:23:f1:
f6:0c:e5:39:0d:2a:fe:c1:6d:2b:89:dc:2e:c0:cf:
a8:d4:0c:f4:d7:b5:e8:20:ab:56:4a:a6:ee:4a:11:
5c:a0:35:7f:f9:1c:cf:ca:68:72:8d:07:b3:7e:84:
1c:c4:77:50:bf:c0:3c:4f:77:6d:04:72:e3:9e:d3:
21:f7:76:68:95:84:1e:23:e9:12:e2:1e:26:bc:1b:
f4:62:83:4d:97:01:1e:e8:8c:46:4a:f7:50:66:0d:
3a:f1:d1:c1:f9:24:45:ec:d4:0d:2b:dd:93:61:9d:
6f:d2:a3:67:5d:9f:e5:a8:54:45:67:7b:45:cc:57:
3b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:79:32:BD:48:CF:79:1A:79:61:20:D2:30:35:72:09:8A:AE:A1
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:22:6e:67:52:47:3f:0d:86:92:6f:e5:09:25:5b:01:9b:85:
07:c6:5a:2f:6a:92:24:74:c7:c4:00:68:18:05:46:db:c8:72:
0a:fc:95:47:36:89:7b:b9:b7:56:47:74:a7:d4:d3:bd:f6:38:
e0:91:4e:10:5a:7e:e4:b3:54:17:e8:fd:d4:6b:91:e9:74:07:
c5:ff:28:30:fb:8a:24:24:1d:03:c4:0b:cb:0d:6e:cf:dd:d9:
ca:65:40:2d:b5:88:1b:38:68:db:ed:86:a6:28:45:fb:bb:a3:
61:27:94:a3:e1:e1:4d:ec:74:4b:bd:58:97:bc:dd:f1:e8:34:
42:02:8a:6a:1e:9b:2a:e8:c9:b2:1b:dc:d4:b0:9d:ad:1d:68:
c7:82:73:e3:bd:7c:33:0e:eb:46:84:d5:2f:50:3b:23:76:ab:
d0:c8:92:f1:87:7a:f5:a2:5a:5b:56:b6:19:15:38:8b:4b:66:
a4:66:93:06:a6:59:52:71:31:7e:87:4e:7a:a7:7d:00:05:12:
86:81:f9:2b:10:5d:21:00:dc:94:25:cf:7f:ce:d0:d0:dc:ac:
48:3c:be:b9:75:4a:56:86:79:ea:b2:d6:94:3f:e3:1f:41:4e:
f3:63:d5:06:1a:6a:58:cd:d3:86:62:94:b1:38:75:13:9c:0a:
cb:3e:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:13 2025 by rpki-client