Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: OdCaogIoQyZjl25TCZGHwz1i8BYAoW/NiJlSWcGqrX8=
Subject key identifier: 35:12:7E:E7:EB:78:59:88:79:F0:67:ED:5D:A5:EE:51:6B:D8:15:30
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 019A07804D76CF11855D2607A9BFDEB5D340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1359
Signing time: Tue 21 Oct 2025 16:00:40 +0000
Manifest this update: Tue 21 Oct 2025 16:00:40 +0000
Manifest next update: Wed 22 Oct 2025 16:00:40 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: irlLJqlc5vy+3eJNuKmyRwdvDlnlSGGx/t4Dui9oX84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:80:4d:76:cf:11:85:5d:26:07:a9:bf:de:b5:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Oct 21 16:00:40 2025 GMT
Not After : Oct 22 16:00:40 2025 GMT
Subject: CN=35127ee7eb78598879f067ed5da5ee516bd81530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:4f:85:24:c9:3a:48:97:03:89:71:36:a5:
0b:e2:25:14:b0:66:09:44:8c:c2:23:0a:97:a9:dc:
93:6b:36:4c:a2:73:37:18:ac:d4:1d:bf:6b:48:9d:
06:a6:4c:43:86:71:79:f1:11:bc:86:b9:ae:39:79:
11:2f:68:2a:c7:1e:2e:65:75:4d:c9:56:55:29:c3:
43:6e:63:07:ad:6b:f8:ad:48:74:6a:48:6f:dc:31:
87:7d:1c:f3:a6:b5:f5:fc:c6:c4:af:df:25:e3:9f:
3e:c2:14:72:b1:04:70:77:8c:1a:b3:2b:78:7f:c0:
b2:79:8e:ac:cf:66:e8:fb:3c:d1:82:3c:b2:63:5d:
d7:65:f0:6b:69:e1:9e:94:65:c5:07:b4:0c:ca:44:
57:db:14:84:dd:d5:28:79:4c:b2:b6:40:86:1d:ff:
11:b3:74:28:4b:ed:d2:fb:92:d8:97:6c:2b:59:f9:
68:17:10:cc:60:05:3d:f4:1f:9a:30:01:92:10:1f:
bb:9d:85:8e:12:fb:92:c4:e2:58:64:90:41:4f:bb:
71:8d:e0:9e:6f:dd:2a:3d:09:3f:2a:ed:6f:86:95:
00:9b:0f:8c:22:28:47:ce:2f:c3:8b:8f:5d:33:c0:
59:e5:6c:56:e9:bb:cb:c1:90:e1:90:3f:d1:4c:05:
08:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:12:7E:E7:EB:78:59:88:79:F0:67:ED:5D:A5:EE:51:6B:D8:15:30
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:dd:e8:52:68:b8:fb:91:3c:d8:d0:8b:4f:b3:a4:c6:94:dd:
1d:9f:bf:e5:1b:26:7f:e8:e0:c8:8f:d9:d6:dc:0f:7a:d8:3c:
63:d3:4a:1d:30:48:51:31:bc:64:c1:a9:14:a7:1b:5b:dd:d9:
42:bd:13:6e:68:e9:52:99:58:7b:53:d5:c7:51:a9:d2:ba:2c:
7b:04:10:72:f8:8c:15:27:5f:1a:bd:e1:8c:74:6b:c8:79:42:
9a:bb:de:49:fe:87:c3:02:35:f0:9c:32:29:55:25:2e:3d:24:
60:e4:51:59:7f:71:08:38:64:54:c1:67:46:54:a5:eb:0c:45:
69:5b:57:af:bf:59:1c:73:59:9a:27:fe:2c:b1:78:11:d2:99:
9f:05:51:34:a2:f1:3e:d1:eb:12:60:73:00:70:b6:e4:73:8e:
01:dc:5b:7c:c4:d4:a8:5c:35:f6:87:a0:d0:b6:5e:48:1a:8f:
83:cc:93:32:df:17:ad:cc:1d:ae:79:c7:a9:4f:a2:1f:72:e1:
a7:f5:13:e6:a4:4a:9d:df:0a:8f:b0:93:42:e6:a1:60:b6:ec:
36:8e:e2:75:52:b5:dc:88:52:36:ab:49:c9:43:04:62:94:2d:
83:46:99:b4:19:22:5d:45:d7:74:fe:f5:b2:ef:77:25:b1:48:
85:63:c1:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHgE12zxGFXSYHqb/etdNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDYwYTYzZGEyOWQ3Zjk1NjE3YTZmZmJiNGY1MWNjY2Jj
Nzg2NTEwHhcNMjUxMDIxMTYwMDQwWhcNMjUxMDIyMTYwMDQwWjAzMTEwLwYDVQQD
EygzNTEyN2VlN2ViNzg1OTg4NzlmMDY3ZWQ1ZGE1ZWU1MTZiZDgxNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkhPhSTJOkiXA4lxNqUL4iUUsGYJ
RIzCIwqXqdyTazZMonM3GKzUHb9rSJ0GpkxDhnF58RG8hrmuOXkRL2gqxx4uZXVN
yVZVKcNDbmMHrWv4rUh0akhv3DGHfRzzprX1/MbEr98l458+whRysQRwd4wasyt4
f8CyeY6sz2bo+zzRgjyyY13XZfBraeGelGXFB7QMykRX2xSE3dUoeUyytkCGHf8R
s3QoS+3S+5LYl2wrWfloFxDMYAU99B+aMAGSEB+7nYWOEvuSxOJYZJBBT7txjeCe
b90qPQk/Ku1vhpUAmw+MIihHzi/Di49dM8BZ5WxW6bvLwZDhkD/RTAUImQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUSfufreFmIefBn7V2l7lFr2BUwMB8GA1UdIwQY
MBaAFKoGCmPaKdf5Vhem/7tPUczLx4ZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAt
NzVmZWE2YTcwZWI3LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xN2U4MmEtMGUwYy00MjZiLWExNzAtNzVmZWE2YTcwZWI3
LzEvcWdZS1k5b3AxX2xXRjZiX3UwOVJ6TXZIaGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd3oUmi4
+5E82NCLT7OkxpTdHZ+/5Rsmf+jgyI/Z1twPetg8Y9NKHTBIUTG8ZMGpFKcbW93Z
Qr0TbmjpUplYe1PVx1Gp0rosewQQcviMFSdfGr3hjHRryHlCmrveSf6HwwI18Jwy
KVUlLj0kYORRWX9xCDhkVMFnRlSl6wxFaVtXr79ZHHNZmif+LLF4EdKZnwVRNKLx
PtHrEmBzAHC25HOOAdxbfMTUqFw19oeg0LZeSBqPg8yTMt8XrcwdrnnHqU+iH3Lh
p/UT5qRKnd8Kj7CTQuahYLbsNo7idVK13IhSNqtJyUMEYpQtg0aZtBkiXUXXdP71
su93JbFIhWPBQA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:50:09 2025 by rpki-client