Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: jR7qMOzMfCKYdy2QyVr9iCSw+dhqNZDoOyud+3YMwKw=
Subject key identifier: 9D:A7:A3:27:5A:42:52:14:78:41:1A:67:DD:2B:92:89:AD:EF:82:F5
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0199C3B1EE9FD18D9A034C027D2A7783B460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1494
Signing time: Wed 08 Oct 2025 12:00:42 +0000
Manifest this update: Wed 08 Oct 2025 12:00:42 +0000
Manifest next update: Thu 09 Oct 2025 12:00:42 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: QS2a0gwl6qhh732u7+QVeMOd5zXWx6jcB9OrwQ+iprM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:b1:ee:9f:d1:8d:9a:03:4c:02:7d:2a:77:83:b4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Oct 8 12:00:42 2025 GMT
Not After : Oct 9 12:00:42 2025 GMT
Subject: CN=9da7a3275a42521478411a67dd2b9289adef82f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fc:85:bb:f2:52:2b:d5:63:7c:3c:c6:e0:59:
67:03:27:c4:b6:49:fd:d2:b2:ca:65:80:2b:47:32:
63:57:82:78:63:7b:a1:5e:05:91:c6:4f:61:00:05:
08:46:bf:5d:3d:5a:c2:8f:af:85:45:20:fa:d3:8e:
0e:74:4c:c8:12:af:9b:de:51:29:6a:af:91:fe:ad:
ab:1e:f4:8e:cb:4b:fc:37:94:85:78:3e:b2:09:80:
4a:48:12:29:b9:a0:06:4d:c8:27:03:f4:a2:1b:3e:
30:b2:f6:0c:38:9f:08:8a:e6:97:1b:da:90:c7:5b:
8b:26:10:39:65:67:55:a6:a4:b3:3e:b7:ed:9d:1a:
48:c9:45:54:89:89:dd:7d:c5:19:b2:a4:c8:b6:99:
a4:e4:e2:fd:22:c1:74:c3:5c:f2:81:17:f2:f3:de:
80:ef:0d:b2:26:eb:7f:10:3a:e3:44:41:7d:2d:f0:
d8:ff:f3:88:f8:50:05:48:cd:27:b7:4a:6e:4f:dd:
0d:39:37:f8:5c:d2:34:83:0f:d1:a9:50:15:fc:f4:
55:61:76:14:bc:ea:56:31:1c:a6:e8:c9:5b:cb:00:
46:be:b9:07:27:7c:37:80:11:e3:20:25:a4:d9:fa:
56:c2:ec:e6:13:88:4a:f3:de:b5:8a:da:66:13:f2:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A7:A3:27:5A:42:52:14:78:41:1A:67:DD:2B:92:89:AD:EF:82:F5
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2e:bc:6f:26:c1:fe:16:27:33:58:a7:69:68:ec:3e:96:58:
ed:8b:15:13:c0:af:9d:dc:f1:b2:1e:61:57:47:5a:c3:5e:a6:
7b:c4:39:a8:24:62:18:38:86:22:17:b6:b8:42:71:64:1c:b1:
50:de:65:e0:c0:d8:8c:81:7f:51:95:2c:a7:3c:af:53:13:ee:
b7:2c:4a:d0:c1:40:c9:ac:35:d5:e4:b6:2a:4c:da:eb:d2:d9:
2f:0f:60:e3:10:59:9a:93:1e:a7:f9:25:ff:0d:3a:31:f9:67:
d0:c2:34:b7:45:e2:e3:69:77:61:67:30:ce:ac:5f:44:a0:0b:
25:54:8d:df:f9:3d:93:e3:50:8b:af:8f:c4:f6:b5:99:a6:1e:
3f:e2:e2:53:05:b2:95:25:6d:bb:1b:94:68:18:45:1e:05:1a:
da:8b:d4:4f:5b:5e:8a:7d:61:44:25:18:0c:b9:64:5a:b0:6f:
f3:39:d5:e3:da:a9:51:1b:e9:dd:a0:ba:aa:1b:8e:26:3f:f2:
76:4b:32:83:61:7a:36:6e:c7:54:8c:9d:07:2a:c7:7c:8d:2e:
cc:d3:01:6e:b6:65:32:1d:ef:90:dc:bb:ee:8f:f9:45:c9:a6:
dd:44:8b:ef:a6:d6:49:13:22:ef:db:f1:f3:78:bf:ba:fd:87:
3e:0a:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:20:02 2025 by rpki-client