Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: wqeTVYzu9X5d/v24v1upoLtW/z37ephecIiv3YoJYKo=
Subject key identifier: E4:33:BF:C3:AA:82:7B:22:F4:BC:42:76:C5:E1:72:B8:9B:57:44:7C
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019A1505FC512E17E5F67D1004A617D00BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 0F10
Signing time: Fri 24 Oct 2025 07:01:44 +0000
Manifest this update: Fri 24 Oct 2025 07:01:44 +0000
Manifest next update: Sat 25 Oct 2025 07:01:44 +0000
Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: YpMyxK3Gb78kiw/+4WKfiCT9hoMuNHQALEH7BAGYwEA=)
3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:05:fc:51:2e:17:e5:f6:7d:10:04:a6:17:d0:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Oct 24 07:01:44 2025 GMT
Not After : Oct 25 07:01:44 2025 GMT
Subject: CN=e433bfc3aa827b22f4bc4276c5e172b89b57447c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:91:1f:22:fb:05:6b:cc:8d:d1:8d:f6:22:
ef:1b:16:41:b1:2d:a6:76:c1:f3:ea:90:85:a6:fe:
11:4f:35:e3:ec:4d:f2:3d:f0:81:8c:c4:8c:63:9c:
41:9c:ad:56:4b:be:81:67:ba:d2:0b:7d:b8:b6:4f:
26:4f:22:d5:7c:c7:01:a2:b9:ba:b8:3c:69:77:ce:
6b:47:0d:5c:2a:90:e7:ff:49:d5:6b:a0:a5:ce:e2:
cc:73:a9:85:18:29:f8:7c:e1:8d:8b:40:a8:07:73:
72:ec:51:6d:1e:40:b7:c9:b6:68:64:15:f5:26:2a:
45:8c:5d:02:31:18:05:d5:c6:5b:bf:9d:39:06:13:
83:79:c8:7f:5a:33:0b:a1:cf:80:11:55:e2:26:c9:
35:fe:07:9b:04:8a:14:c6:1a:93:40:0a:b7:2c:43:
d0:41:07:8e:bd:4f:a6:e3:0f:8d:3b:1b:35:f9:35:
be:ab:ab:1b:00:72:6c:a6:b9:70:21:d4:ee:ff:f1:
95:4d:fc:3c:e4:29:55:dd:2a:06:e2:ce:49:e3:2c:
d2:98:a9:de:fa:8f:3e:34:e6:a8:ea:eb:1b:f4:9e:
30:2c:7f:78:41:1c:79:2c:0b:18:14:25:9b:c7:e1:
03:45:61:69:cf:7a:8d:a5:17:9c:d1:f4:44:db:1a:
c0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:33:BF:C3:AA:82:7B:22:F4:BC:42:76:C5:E1:72:B8:9B:57:44:7C
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:33:a4:5e:df:09:d8:51:86:01:58:d0:9f:2d:42:59:3a:38:
43:02:52:14:cd:a6:22:d0:21:f2:0a:8f:71:33:5f:dc:1c:40:
8f:fd:f7:aa:45:26:f2:02:d8:d3:e8:71:76:b5:5d:63:22:9a:
51:79:48:6d:19:4a:c2:fe:ca:0c:cd:09:de:a4:94:04:d3:42:
fd:20:9b:29:84:98:7b:ed:05:a2:ee:98:87:92:d9:8e:f1:6f:
f6:b9:df:54:98:8b:71:52:05:35:ab:94:72:86:56:b9:92:b2:
83:58:9b:f2:c0:1c:3e:67:7e:92:50:22:9c:26:19:82:35:e8:
15:c4:41:f2:b6:b7:58:38:43:d5:c5:22:71:43:77:0c:8c:43:
18:f6:c2:bc:11:20:ff:86:1b:3a:35:94:3d:d9:07:8c:12:a9:
4a:a9:bb:ee:6c:ea:4c:da:5f:e7:71:a4:25:41:ce:06:49:ff:
cd:be:a9:43:e7:ad:6f:e1:53:22:a0:f3:c6:2b:97:b4:b1:b4:
e3:cb:ea:5c:4c:d3:3e:b2:d6:e4:f1:aa:86:f7:af:22:c5:27:
e6:91:7d:0b:5a:96:c7:54:f1:64:89:54:6a:87:70:ed:a3:23:
a4:d4:ee:0a:54:d8:10:ec:d5:35:fa:8e:90:df:51:75:fa:67:
6e:c6:94:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:51:18 2025 by rpki-client