Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: GhgBPyThM4d5do7gvocHYMbqJrvdfvszh/rqJiknCz0=
Subject key identifier: 68:9B:FA:D6:19:87:3F:2A:92:9F:48:57:30:E0:5F:16:C5:F0:AD:5F
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 019A1127BEA3FB482F1F754BE8C78BCA9157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 16F2
Signing time: Thu 23 Oct 2025 13:00:08 +0000
Manifest this update: Thu 23 Oct 2025 13:00:08 +0000
Manifest next update: Fri 24 Oct 2025 13:00:08 +0000
Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: pDMaghYuLBazK8SonnlYLo6ija2yenlVIh19H0ZCVDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:27:be:a3:fb:48:2f:1f:75:4b:e8:c7:8b:ca:91:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Oct 23 13:00:08 2025 GMT
Not After : Oct 24 13:00:08 2025 GMT
Subject: CN=689bfad619873f2a929f485730e05f16c5f0ad5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:a5:1a:35:e8:db:bc:95:7a:2b:eb:89:c7:
e2:45:b3:bb:21:ca:a4:db:bf:bf:a2:82:c2:fb:a8:
26:77:91:2b:7e:39:29:92:af:49:d4:b7:ae:70:d6:
58:2f:45:95:a6:dd:f9:e4:24:e8:a9:6c:1e:d0:cb:
35:1f:9a:40:86:6c:3c:e3:99:3e:a4:cd:c1:9b:78:
f5:20:24:31:3f:3c:1a:93:9f:30:e7:fd:93:28:6d:
cd:3f:8d:8e:3b:d3:b6:3e:70:4e:74:63:b2:fc:55:
56:73:bf:86:d2:71:4b:49:1a:f4:3d:1f:57:6c:b3:
03:4c:ed:b1:92:a5:c1:aa:ca:a6:79:3d:fe:98:e2:
18:36:2a:61:6f:99:0f:35:8b:54:29:36:b1:e1:11:
bb:80:64:f6:fa:24:b0:a9:e2:25:1d:cc:30:0f:76:
f9:81:5e:4b:14:6a:8f:58:30:60:6b:47:11:a7:ce:
0d:da:2b:a7:00:23:b4:2e:ee:aa:ae:e0:8b:ca:b5:
3a:b1:5a:29:7f:18:da:81:38:63:73:c3:4d:89:95:
9f:ea:f8:7a:36:40:99:4a:ec:dc:c2:c1:d2:b9:1c:
11:2a:3d:e1:05:01:5d:88:5d:f0:e6:5b:80:e5:90:
f5:3b:87:99:96:53:5d:40:76:54:90:78:8d:28:df:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9B:FA:D6:19:87:3F:2A:92:9F:48:57:30:E0:5F:16:C5:F0:AD:5F
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7f:3b:76:df:38:c6:6a:06:47:b1:2c:2a:30:2e:59:6e:d7:
99:89:b7:0b:62:25:75:78:ad:3d:f0:60:81:c3:8c:28:25:da:
a9:a4:e8:62:c6:c4:07:69:50:d2:d5:c5:1a:8e:91:ec:b7:3e:
29:c6:ee:50:ed:c0:58:54:0b:f5:f9:86:8e:8e:b6:7b:14:e8:
82:f2:41:b4:bf:53:e8:77:77:f5:03:57:06:3c:02:6a:9d:fc:
76:cc:f4:40:c5:de:e3:64:95:ac:40:0f:f1:9e:23:c3:42:09:
4b:c9:62:fb:82:4e:3a:8d:2b:60:bd:f1:6b:e2:cf:27:88:9b:
ed:26:47:f2:f1:db:4d:3a:09:e4:f1:59:d8:87:62:43:f8:d9:
79:b9:93:45:f7:08:3e:21:c4:1c:ee:de:a5:eb:30:be:11:19:
f8:67:19:1b:26:7e:39:64:7c:9f:65:c2:1e:61:79:52:07:fa:
06:dd:5f:55:6e:bf:34:80:0e:68:4b:fb:5a:60:40:9e:37:74:
09:9d:ac:d6:41:70:70:42:28:cd:f2:19:98:cd:fb:a6:14:e9:
57:22:e8:02:2c:5d:9c:e4:ba:11:ab:18:92:d5:63:1a:8a:6a:
a9:e6:8a:7b:66:f5:60:47:09:19:46:e0:5f:46:7a:1e:39:7c:
d9:d6:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 22:55:38 2025 by rpki-client