Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
File: qw8tGCnW-40kf6TpZY6hfwbACwU.mft (raw, json)
Hash identifier: 4sS7naSeZK9AvDaBhxg1bTKbCVNB5Ogti0ICGN1LbZk=
Subject key identifier: E2:71:11:96:9F:55:21:8B:BB:52:0E:45:BD:69:6E:D0:25:58:7C:EE
Authority key identifier: AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
Certificate issuer: /CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Certificate serial: 019A71B92F3B4D5F7D3B82489F6996670254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
Manifest number: 05B4
Signing time: Tue 11 Nov 2025 07:02:32 +0000
Manifest this update: Tue 11 Nov 2025 07:02:32 +0000
Manifest next update: Wed 12 Nov 2025 07:02:32 +0000
Files and hashes: 1: OUpskfGQwP1azsM6n4Ec-VCqNso.roa (hash: +d2WLz7J+vMS5D/Rs6fGhF8erps5E2C6DQvq3JVrWbY=)
2: qw8tGCnW-40kf6TpZY6hfwbACwU.crl (hash: eKGjVHyMkeAkCuvOzP19tad6tiq9k+7zYiTj1sBlx5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2f:3b:4d:5f:7d:3b:82:48:9f:69:96:67:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0f2d1829d6fb8d247fa4e9658ea17f06c00b05
Validity
Not Before: Nov 11 07:02:32 2025 GMT
Not After : Nov 12 07:02:32 2025 GMT
Subject: CN=e27111969f55218bbb520e45bd696ed025587cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:4d:85:ad:97:3a:6f:1f:3b:94:7a:6b:7c:
19:16:bc:02:3f:9b:91:01:84:c7:8e:af:fe:e6:f7:
df:eb:55:90:8d:e4:43:9e:57:d9:0f:0c:df:e0:e9:
80:3f:8a:d9:37:6d:94:7e:01:ad:11:2f:5e:20:c2:
06:49:56:9a:27:06:a1:0c:6c:2a:55:dc:9f:d0:af:
5f:b1:f4:12:a6:9b:d7:57:da:00:ea:17:6f:85:01:
e7:44:46:a2:9f:dc:5d:30:3b:80:fd:df:3a:64:13:
68:90:68:ee:c8:fc:22:5c:05:58:d1:d5:eb:94:43:
63:3b:bf:6c:9a:94:1b:20:7a:6d:64:c3:9f:0e:a5:
3b:bd:44:f8:8d:a2:9e:af:f2:f9:31:47:f8:53:14:
b0:da:67:31:df:02:5d:9e:f5:b7:a8:df:57:ce:6c:
88:54:8a:51:dd:fd:df:40:01:11:48:ce:d5:6b:da:
d0:16:3e:02:1a:4a:fe:51:f8:5f:0c:ce:ae:3a:35:
4f:22:2d:55:3b:d1:ca:a4:13:9d:8c:b6:9b:44:62:
a9:a7:c4:e4:2d:1c:24:15:53:60:62:0e:4c:7b:eb:
79:f5:40:3b:a1:c9:d7:34:33:6c:fa:e6:8e:e4:39:
86:00:b4:17:07:ef:9d:db:6c:0f:67:f1:a1:aa:20:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:11:96:9F:55:21:8B:BB:52:0E:45:BD:69:6E:D0:25:58:7C:EE
X509v3 Authority Key Identifier:
keyid:AB:0F:2D:18:29:D6:FB:8D:24:7F:A4:E9:65:8E:A1:7F:06:C0:0B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qw8tGCnW-40kf6TpZY6hfwbACwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/726123-bfc2-47ea-9b05-570fec29d139/1/qw8tGCnW-40kf6TpZY6hfwbACwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:7e:e3:a1:f9:37:59:d2:f8:01:34:2d:a1:d1:49:46:d2:
b5:50:99:8b:76:fe:aa:31:80:c0:7e:66:bd:c7:5c:f7:3d:ac:
45:fe:72:86:ee:27:73:a9:b8:6b:8e:67:9b:11:19:65:32:ce:
d3:d3:40:eb:3c:94:27:39:28:50:09:04:59:90:d2:b0:12:34:
44:67:1d:37:4b:31:81:01:e8:bc:74:68:b9:4f:bf:bc:03:97:
85:5e:00:80:23:09:0c:55:90:aa:ae:ab:4f:2f:25:92:92:ab:
e6:ad:a6:f2:f1:6d:b8:04:76:01:54:9e:6c:f2:06:9c:30:b4:
50:54:d4:d1:0c:ad:7f:2c:1d:3d:42:3d:57:84:1e:50:a8:ac:
1c:38:fc:55:81:27:1b:43:90:ed:49:a4:a4:a4:ea:4d:dd:8f:
3e:8b:ae:2e:6c:cd:12:80:ab:e8:77:a6:34:39:e0:47:91:5f:
c0:b1:c6:d1:ed:6d:58:d0:39:d3:3c:c3:3c:1c:b9:55:6c:3f:
6b:51:5d:ed:28:5b:43:c4:f9:de:1b:80:d9:a0:84:5b:4f:12:
38:06:6a:ff:07:0a:51:e6:bc:1c:4d:22:3e:0c:c9:a8:cd:dd:
15:1a:df:05:76:5f:99:1c:ef:d9:05:32:8e:05:14:ab:43:ea:
41:90:33:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:08 2025 by rpki-client