Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: vI83biLwNojlfBGhKGc+VwDEVfSGJNmXmFX5VriKPMw=
Subject key identifier: FD:AE:4C:96:DE:C7:D8:83:D6:01:65:CA:9F:67:F9:0C:E5:C5:2A:04
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 019A725C8EB57FDE9C04E70D22C9B28027E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0B10
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: b2Ad3Pubnmsc5v7wEeiy2i9crjU.roa (hash: YMeUe949TNAn7B7dURgw/Dn08QgY72JO978X9Gd4XkM=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: sJZu/M48Y+bFicmme3HZeDKmgPjsPOzD9SeIyRm2rpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8e:b5:7f:de:9c:04:e7:0d:22:c9:b2:80:27:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=fdae4c96dec7d883d60165ca9f67f90ce5c52a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:87:e9:8e:8e:da:fb:90:aa:8c:fb:df:c1:
43:ce:03:ce:68:12:04:53:f0:e6:d6:3d:3a:8c:0b:
91:1d:57:99:d4:29:a1:be:68:a6:a8:61:96:6b:ac:
ce:dc:0c:1d:4e:94:2a:d9:20:04:a3:b1:e8:03:5f:
b1:b0:f1:a3:40:2c:ac:28:00:a2:90:48:30:fe:58:
7c:af:d3:40:e9:5f:81:ed:51:7a:14:b5:fe:f6:6f:
b5:13:3d:34:9a:0a:0f:75:2f:4a:be:81:82:90:c5:
28:02:7e:b0:d8:c9:aa:14:ed:c5:0a:f9:8a:3c:9a:
a8:11:ca:1d:09:2a:63:9a:d7:e5:4e:f3:b3:ce:3a:
4e:b5:ea:da:f3:b0:68:58:d4:d5:74:99:68:78:1c:
84:84:30:ad:b2:36:b1:a4:10:ef:01:51:f3:c3:a7:
e1:9a:39:94:fc:37:24:44:6a:04:09:8a:b7:1a:4a:
46:b0:b1:f0:7c:01:cf:80:4b:59:fd:0a:f5:01:88:
ca:2c:53:d2:35:75:31:2c:a6:55:98:eb:37:5a:4a:
91:71:98:00:d5:ee:9d:ee:50:62:5f:89:2a:17:df:
2e:f1:70:59:e2:82:57:ce:e7:e6:df:b5:b5:e6:1e:
e2:fa:2b:ee:c8:59:11:bb:37:7e:91:01:3b:27:ea:
d2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AE:4C:96:DE:C7:D8:83:D6:01:65:CA:9F:67:F9:0C:E5:C5:2A:04
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f8:dc:82:87:39:de:39:af:05:56:81:a0:b3:44:63:f1:61:
6a:ac:68:29:cc:43:57:e1:ee:0a:c2:7e:ec:86:99:37:22:68:
8f:fd:14:5c:45:6a:5f:6f:9f:de:52:ab:87:86:5e:8d:2a:4a:
a1:88:09:90:d8:79:c7:df:67:cc:93:cd:6c:9a:2d:0f:0f:85:
df:76:16:54:01:b9:04:5a:5e:5f:97:0d:cf:f0:b7:cc:56:9f:
29:ba:bf:98:80:3f:30:84:74:2b:9b:18:38:f6:c4:40:5f:3d:
06:e9:4c:76:63:ca:4f:99:24:38:11:19:e8:8a:8f:75:23:40:
8a:7e:f4:a1:6c:08:a2:85:12:4c:dc:0c:f3:e7:35:12:96:e4:
db:a1:d5:fe:0c:1a:69:39:6e:b3:9d:65:00:57:db:0c:33:56:
aa:c6:a4:49:0b:9f:c3:73:82:63:26:3d:75:59:d0:c7:da:69:
6d:a1:57:92:ec:0c:51:22:61:a1:50:18:15:f9:e7:45:8b:ee:
7b:b1:09:11:a5:6a:d6:de:9b:98:49:76:1d:b2:22:43:4b:46:
01:ac:8d:72:f9:d2:90:1b:8b:24:1e:4a:07:1a:c6:0c:e6:ef:
f7:30:10:a7:f0:65:14:a7:4a:52:b9:f9:0b:2a:a8:6e:04:e6:
33:5d:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:44 2025 by rpki-client