Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
File: qBKXsdNqQt446EgLuSm0W8kDDJ0.mft (raw, json)
Hash identifier: lA4ry1CTfdvbMLLyZthRFFeLuRVOtB81lRB4LkMfFUg=
Subject key identifier: 97:85:33:39:EB:C2:BD:54:B9:CC:B3:E0:8F:0C:6F:CD:5B:75:B8:58
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 0199C48E4A958871DC1047273E03D105F975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
Manifest number: 05C9
Signing time: Wed 08 Oct 2025 16:01:23 +0000
Manifest this update: Wed 08 Oct 2025 16:01:23 +0000
Manifest next update: Thu 09 Oct 2025 16:01:23 +0000
Files and hashes: 1: JQfyecuTBe9b0TVcrmo-tSM3WaE.roa (hash: 2itfFVYv64s2jKKBdM91XUWlXntYtRrbHNJzdg5vens=)
2: _hwoOnSYlfjUaTComm-3hBe2zs0.roa (hash: PBuw/FbCVTJ5hqhxHvWYLj5Cm4bbcUK+XRb8x/VJhJI=)
3: qBKXsdNqQt446EgLuSm0W8kDDJ0.crl (hash: EcenZQ2pWIzQZO3IGLNI78v2HHEM/0EBthXPkxiNEEY=)
4: svM12JDKJB3e-TFZ2wiCejW_Bfk.roa (hash: QUass/NjIlJuE2HSs5ern4SfiFA+q7m1ESWTARVsCGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8e:4a:95:88:71:dc:10:47:27:3e:03:d1:05:f9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Oct 8 16:01:23 2025 GMT
Not After : Oct 9 16:01:23 2025 GMT
Subject: CN=97853339ebc2bd54b9ccb3e08f0c6fcd5b75b858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:06:63:19:fc:6d:62:8f:af:62:d8:1d:f7:
9f:5b:6f:0d:12:13:5f:b5:ab:15:2a:74:65:55:99:
06:51:23:e3:39:a7:bd:fd:77:b6:90:f3:f9:c7:03:
97:60:f0:96:2b:29:dd:6f:d0:d0:93:b0:3a:5d:db:
cf:19:60:7c:0b:6b:a3:55:4f:36:47:46:a5:a5:99:
6c:83:0d:2c:47:95:b2:8a:99:41:99:6a:5d:f8:d0:
b9:65:86:0e:a6:07:89:60:b9:0e:c8:93:ba:e3:34:
01:a0:a4:31:1b:ca:e0:55:39:52:d5:b8:86:54:91:
37:75:9a:e2:82:36:cf:7d:fa:c1:bb:37:e8:d2:8c:
9a:25:b0:c9:6b:5a:1f:b1:fd:8f:c8:65:a0:c8:bb:
f7:04:02:df:be:1e:2d:5d:66:1e:60:02:5c:73:76:
b7:ff:70:91:01:e5:b4:e1:48:36:7b:2e:8f:41:bc:
68:f5:ac:5f:d4:75:33:8b:24:d5:e2:06:f0:e2:06:
fd:ab:d5:2b:4f:f0:7a:51:c1:70:be:a5:cd:33:0a:
a6:2b:80:a2:a7:af:0e:b3:a0:dd:48:31:13:2a:73:
99:6f:45:67:65:48:1f:e6:86:0b:aa:b9:77:3f:35:
83:11:f0:12:21:be:d2:11:8f:72:2b:05:01:b7:18:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:85:33:39:EB:C2:BD:54:B9:CC:B3:E0:8F:0C:6F:CD:5B:75:B8:58
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:71:e7:f6:e7:a3:03:21:17:6e:ab:1e:18:b0:87:fd:e7:fb:
b5:39:b5:61:9b:f0:d0:8a:9f:b3:7b:4d:27:a4:ff:75:ee:4e:
2f:10:51:f5:b5:c2:b7:76:74:30:59:08:42:bb:3c:de:2b:95:
eb:ac:34:c4:aa:7b:ab:19:ee:60:41:0e:cb:fb:ba:78:32:8e:
cf:36:20:4b:06:e0:58:5d:3d:82:a3:c5:07:b5:45:67:d1:40:
87:38:6c:89:cd:6f:b1:09:8d:06:fa:77:12:43:70:8c:d6:b3:
57:f8:87:c8:91:a4:34:7b:95:0b:7d:44:09:b9:0a:4e:a7:bf:
77:c5:b7:ac:f0:c7:d6:98:19:4c:1d:f2:1b:d1:d3:8b:e0:6f:
9a:7a:94:0e:8e:35:c9:0c:c0:7c:50:72:85:5e:79:ac:59:5d:
04:7c:51:bd:8a:74:f3:9d:08:2a:00:e7:87:4d:5a:33:05:0e:
88:e0:b9:a1:be:a8:49:fe:4f:63:81:90:d9:f3:55:c3:9c:68:
a4:54:c6:5c:dc:8e:01:56:47:5c:57:76:6c:bb:cf:69:20:f8:
5a:28:7f:11:bc:92:48:41:84:3a:3e:0d:98:99:ca:2c:a7:b1:
e8:7e:ab:fb:7e:1e:c2:7d:76:12:82:7f:d3:68:3a:f9:ff:28:
a8:a7:c2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:22 2025 by rpki-client