Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: 1IsK+L3qCbJzH5HlG3M/J9GvVyls3AJqrzm0FbxU0IA=
Subject key identifier: A0:9E:39:B4:4E:76:D3:43:6F:DD:24:FF:5A:F6:8F:C2:C7:C7:E0:A0
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 0199FBEC17AD73193B74E08989A7220F733D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: EAe08Jw4d66q9BZqSgx3AnVqKt4Mx2VLeMuz7+NK0D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:17:ad:73:19:3b:74:e0:89:89:a7:22:0f:73:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=a09e39b44e76d3436fdd24ff5af68fc2c7c7e0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:69:05:e4:72:b0:00:70:4a:ca:57:e7:64:
7f:c6:fa:60:bc:cd:69:8c:e5:a8:d6:92:aa:18:fb:
b7:00:dd:23:5f:e1:03:44:fe:2b:49:9c:42:43:ab:
ef:fe:53:c7:cd:99:74:3c:3a:89:fd:9c:f1:2e:4d:
88:36:e1:5b:26:12:47:74:ca:c7:e0:a5:bc:21:73:
4b:2c:98:90:ce:5b:4c:cb:9f:0c:97:eb:2a:79:e8:
19:d8:13:ce:39:30:57:a8:1c:53:ff:9d:a0:54:bf:
37:32:0e:58:3c:20:9f:ce:3f:9c:4d:d4:4f:c1:6c:
f9:08:e2:47:20:37:52:e2:c8:64:a2:64:b5:3e:2a:
8c:12:b6:b8:04:a7:76:c7:db:a5:b1:25:73:a9:a9:
85:91:7e:e6:78:88:21:a2:82:2c:44:35:58:f1:59:
d6:c2:5e:7e:83:41:6d:d4:ea:f8:2a:b9:8b:03:25:
25:4e:f4:72:c8:12:e4:8a:a8:b2:ec:80:90:62:21:
0c:5a:17:5e:bc:e3:9b:92:28:dd:3a:da:93:e3:68:
35:59:58:ef:7f:ea:82:a9:2f:41:16:1b:9e:66:a7:
6c:32:97:c7:35:1e:5c:02:1f:88:c6:70:54:2b:12:
73:98:52:52:51:5d:6b:dc:f9:22:d5:fa:1e:ce:58:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9E:39:B4:4E:76:D3:43:6F:DD:24:FF:5A:F6:8F:C2:C7:C7:E0:A0
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:02:e7:77:cb:74:4a:4e:eb:c8:ae:13:e4:55:e4:ed:b5:a9:
95:f8:6d:e1:09:0a:03:0f:d2:f3:c2:32:05:0c:ff:d8:28:37:
c5:49:56:54:86:22:81:f5:6d:ce:b8:61:2f:7d:81:03:12:e8:
fd:dd:ea:17:7d:54:07:23:55:d7:08:c2:68:cb:ca:49:e6:3d:
a6:22:3b:cf:8d:6c:6e:88:e5:19:f2:39:b1:18:5f:07:2d:2f:
a7:4e:3c:02:85:d6:c2:89:fe:60:e1:fb:40:f0:7d:be:26:30:
a5:a6:5a:21:2d:93:2b:03:05:17:54:bb:b6:d7:6f:57:ba:48:
ee:2d:21:6c:b6:8f:60:37:4f:b8:10:f1:55:f9:3d:a1:ab:4d:
c1:a6:05:3f:40:de:31:0f:97:83:eb:7a:c8:ee:da:06:05:c4:
fa:35:f8:55:d3:82:db:df:e8:09:e6:c9:20:43:2e:d2:b2:22:
87:12:48:ce:99:8a:ff:1e:45:94:ed:9e:84:e0:02:8a:8f:60:
ac:19:f0:bc:74:11:c7:ee:3c:fb:65:55:f0:b6:da:19:e6:39:
42:fe:9b:26:0f:ac:dc:99:e1:ac:75:be:26:7e:f4:b4:c0:38:
0d:13:49:4b:c9:fd:f2:ab:0f:d1:97:ab:92:3d:f0:6a:b8:1d:
2f:bc:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:55 2025 by rpki-client