
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: 7nPmVxC/qSsDehKpDQCXRsT5SuFdfxQbldk1sk6LOhQ=
Subject key identifier: B7:6E:41:04:73:E2:5E:F9:43:EC:22:D6:27:32:FD:4E:F2:39:16:F3
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 0199FF5943BCFF730613C29820CFA8EDA41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 16EC
Signing time: Mon 20 Oct 2025 02:01:04 +0000
Manifest this update: Mon 20 Oct 2025 02:01:04 +0000
Manifest next update: Tue 21 Oct 2025 02:01:04 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: PHGv-iP3-GV5PUVRHcEuKvBjePw.roa (hash: 7jlPPnbCBHtnfInB0g3T4zwfv1LlUHpXKaShvtDGxfY=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: G4NVU2FbhbUEJRAxUpCvJtRrLA2tZt9biFi4o6JruvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:43:bc:ff:73:06:13:c2:98:20:cf:a8:ed:a4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Oct 20 02:01:04 2025 GMT
Not After : Oct 21 02:01:04 2025 GMT
Subject: CN=b76e410473e25ef943ec22d62732fd4ef23916f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:1c:11:06:30:42:3d:e2:e3:d0:2d:e4:73:
37:0f:09:d7:3b:7c:cd:36:36:9b:64:f7:a5:f2:b3:
13:05:bf:86:c7:17:cd:a6:16:c0:98:f6:33:0e:21:
10:6d:5f:b6:f9:fd:3e:a3:77:9c:d4:f2:97:8b:95:
20:68:1a:7f:c1:e4:ae:3f:82:fb:7d:90:98:b6:bd:
d0:2a:87:44:91:e2:be:bf:60:c8:75:f6:72:1f:37:
ee:21:8b:6c:8a:5b:03:52:b4:97:f1:50:72:ea:24:
65:c8:04:8a:91:16:25:3f:67:6b:23:67:a9:f1:12:
fe:da:22:fd:eb:dc:15:ae:c2:ed:3f:5b:35:35:4f:
05:90:3b:79:3a:d1:f8:66:a0:97:5e:c2:2e:4d:e9:
cf:d3:20:ff:cc:77:f7:62:f2:24:57:55:79:a4:96:
42:78:e7:3b:c3:e9:7c:ab:69:b7:de:32:4f:4b:c0:
18:8b:fd:28:24:0f:7f:f1:27:05:d1:d9:39:aa:00:
ce:d5:fc:c4:c8:30:86:70:73:52:17:3d:2c:7b:6c:
ec:0c:91:17:73:4e:62:36:7c:31:22:d9:c3:7c:bb:
6e:3a:09:43:45:10:c2:43:4d:de:e7:0d:fc:2c:e2:
7a:5e:a1:2a:13:80:22:7c:ea:5c:3f:55:7f:47:f5:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6E:41:04:73:E2:5E:F9:43:EC:22:D6:27:32:FD:4E:F2:39:16:F3
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:10:04:ba:80:ed:55:4a:81:b6:e6:eb:09:31:8b:86:b7:d9:
f6:b7:7d:f0:92:39:4a:2c:b7:3b:06:c4:ef:e0:1c:98:a5:af:
42:30:a6:3a:bf:32:f5:54:0a:a5:b2:a5:b1:1c:9d:91:5a:6e:
55:11:4b:85:e7:5b:6f:60:23:a1:6c:c4:86:88:7a:65:7f:0e:
cd:14:52:99:83:6b:75:06:57:60:73:96:87:c6:c3:61:66:03:
75:65:d2:c2:7b:87:91:02:8d:97:50:5e:4f:97:a4:5f:18:60:
12:ab:0f:61:7c:9c:56:40:7b:9b:c9:21:25:2c:cf:3f:5b:a6:
1f:bb:72:32:69:4e:57:24:49:3b:99:0a:79:0d:56:87:5e:8a:
68:ae:3d:3a:a0:de:2a:4c:ce:cd:d9:4f:bf:dc:ed:be:b7:8d:
4d:1c:26:bc:0d:18:3b:b3:85:dc:15:2d:bb:29:dc:86:b6:d7:
51:60:f2:04:93:31:67:ce:7f:2a:ef:22:db:40:01:65:b8:17:
26:dd:2a:bf:b1:33:9c:c5:b0:53:7b:0b:ea:59:56:22:f1:23:
4f:f1:c8:21:77:f6:67:05:fa:54:b8:dd:6d:1c:5a:28:d9:ef:
78:c6:13:65:ac:2a:f9:2c:92:8d:92:e1:8f:4d:6e:36:bc:37:
f1:be:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:56 2025 by rpki-client