Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: /tqnis0UUwVGXXXn64pQdia6NBuW7ga94Sg0K65x4aU=
Subject key identifier: EA:22:C6:A9:42:0D:2D:77:9D:76:04:5D:B9:AE:0B:47:E1:D8:CD:15
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 019A209BDE52EEC02E71595B7FCA4C7EC80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 13:01:17 +0000
Manifest this update: Sun 26 Oct 2025 13:01:17 +0000
Manifest next update: Mon 27 Oct 2025 13:01:17 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: zNbkV4aOpTeX3qiJM2fvCAMHQIklalQZcA3/RklfZQs=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:de:52:ee:c0:2e:71:59:5b:7f:ca:4c:7e:c8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Oct 26 13:01:17 2025 GMT
Not After : Oct 27 13:01:17 2025 GMT
Subject: CN=ea22c6a9420d2d779d76045db9ae0b47e1d8cd15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:ec:3f:08:15:01:46:81:2e:5b:40:8d:22:
03:5e:95:66:23:84:4c:12:f0:54:6b:8b:44:14:f8:
2c:39:bf:d5:b0:cc:09:38:71:28:15:b6:54:24:6c:
b9:d1:5c:ff:47:27:f6:c5:b9:90:22:1a:8c:41:e1:
a0:bf:85:1e:04:7d:9b:b7:bf:9b:8e:ed:75:3d:fc:
bd:4a:53:60:99:89:7d:38:bc:c4:bd:4c:9a:88:8c:
a5:0f:a0:6a:65:48:6f:6c:cf:b7:f9:44:56:10:02:
57:19:59:b6:70:3b:a8:17:6e:cc:4e:90:b1:c1:18:
d4:92:09:c9:9e:e6:63:a3:f1:c3:f5:7e:fa:91:43:
56:9a:88:fd:fc:af:0a:d4:43:70:4e:11:fe:4c:26:
dd:19:55:03:0f:c8:e5:0f:e3:a6:c1:da:13:f7:52:
54:e6:52:30:cb:e4:93:be:1e:e2:13:f2:31:ab:3d:
49:58:f2:33:07:b3:54:7c:99:51:76:8c:f6:c2:90:
20:d9:28:c5:7f:16:eb:fa:d7:45:dc:41:33:b7:0e:
0b:72:49:35:f6:b5:e4:d7:f1:26:34:0e:0c:e5:9a:
d8:f3:f3:eb:75:4a:66:c0:cf:20:5d:60:39:52:a4:
f6:66:37:df:50:10:2e:60:3b:0b:f1:5d:c0:98:ed:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:22:C6:A9:42:0D:2D:77:9D:76:04:5D:B9:AE:0B:47:E1:D8:CD:15
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a9:9d:1b:74:e9:a3:62:c7:48:c4:1d:07:19:da:00:13:0d:
9f:ad:0d:17:dc:c2:e6:27:d1:d0:dd:9a:a4:2d:5a:42:b1:3e:
a6:5c:67:4e:6d:81:65:cc:d1:f1:43:42:40:b9:33:b6:1e:5e:
4a:d1:cb:a3:b6:7e:9c:9f:48:5e:da:7c:b2:2b:f1:2a:31:d6:
ff:8c:56:cf:b5:cc:a4:fa:25:dd:8f:18:ec:85:2e:c7:4e:ef:
a2:e4:aa:be:1e:67:c9:26:78:ef:58:49:cd:dd:4c:16:23:91:
98:81:ac:66:88:74:0a:65:f1:1c:34:92:67:98:ff:c7:ce:fc:
06:90:97:b5:6b:b1:c6:0a:95:03:83:d9:22:d1:86:51:fa:ac:
02:a4:95:62:0d:73:cf:20:d2:fc:e1:79:51:e0:0d:95:3a:09:
b6:bf:26:61:8a:8d:ca:35:68:2d:fc:2c:98:d8:d9:cc:94:42:
ec:2a:7d:3f:30:dd:3b:a7:06:b3:05:47:21:20:2f:cd:8e:90:
73:4e:58:2a:83:e8:97:01:ae:72:45:f3:2a:55:a2:b6:a7:35:
f2:c9:e9:96:da:25:1c:c9:ab:61:5d:dd:64:72:23:0e:9a:e6:
ac:7e:a9:fb:6a:26:d6:9b:70:f3:71:7d:f2:d2:36:6a:d7:ee:
06:46:56:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:23:38 2025 by rpki-client