Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: nzZdvievZE2ohwmq5N86DAiyqwyz+baNeYlTjE01CXk=
Subject key identifier: A6:84:1E:F4:B0:DD:18:7F:B6:5F:5D:E9:5F:B2:3D:4E:6E:F6:78:83
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019A23D2FD55B06F8714A4EE75F5F10A8009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 04:00:20 +0000
Manifest this update: Mon 27 Oct 2025 04:00:20 +0000
Manifest next update: Tue 28 Oct 2025 04:00:20 +0000
Files and hashes: 1: LsR5OcLI6gweexv7IGg_v67BF8g.roa (hash: wQT4g6ONPKKCv+h71REBPVqXb0/wIS8oFMXQ2jJwDUM=)
2: agUI1vHmqHIc2nUx-x5wLY_TV_A.roa (hash: FA12851IZb0A3QT14G2l2dek6vgakWfjtEihLLMc5Fo=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: eSDFVvm6hmboKeOI5u1Fu+ac0gObNjlVTVO9c6lukls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:fd:55:b0:6f:87:14:a4:ee:75:f5:f1:0a:80:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Oct 27 04:00:20 2025 GMT
Not After : Oct 28 04:00:20 2025 GMT
Subject: CN=a6841ef4b0dd187fb65f5de95fb23d4e6ef67883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:30:44:2e:61:2f:f8:5a:62:34:de:e4:2d:
c0:2a:5b:74:f3:b7:85:36:89:73:ff:1d:ad:da:72:
38:86:c5:24:e5:b9:df:51:0e:07:5d:f9:e2:06:4f:
74:df:5a:a0:3c:04:90:3d:6b:c3:d4:fd:fc:2a:e8:
a1:c6:bb:3a:32:22:5b:37:5f:87:8b:a8:14:7e:f2:
51:70:1c:0c:9a:05:ac:6b:48:2a:60:21:38:95:01:
c2:48:fd:fd:19:17:22:f6:13:9b:fa:84:04:af:c4:
f1:82:87:20:39:56:46:74:d9:c9:67:54:52:8f:09:
6d:c8:b0:b8:8f:41:30:ef:b1:bd:d0:f6:f0:ec:8c:
a1:b8:ff:f1:bf:18:3f:0a:32:9e:77:75:3f:68:cb:
23:8f:ac:20:50:3e:96:b8:38:ea:ba:c5:27:23:6b:
80:7a:4b:23:3c:c2:33:4a:e8:01:f6:e8:ec:ad:f8:
8f:74:32:e6:37:86:ec:ac:40:15:1f:a7:97:9b:f9:
7c:07:c5:37:59:4d:2c:69:ad:c7:db:61:03:8f:fd:
c7:0c:8c:3d:2c:2f:d6:4d:5c:20:b0:2d:9a:d2:46:
71:01:2c:dc:fb:b5:59:01:fc:69:ce:7d:4e:75:e1:
a3:58:b4:34:28:c2:c5:23:f5:7b:ea:69:27:6b:89:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:84:1E:F4:B0:DD:18:7F:B6:5F:5D:E9:5F:B2:3D:4E:6E:F6:78:83
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3a:86:df:3d:fe:c2:80:6d:a6:5e:f2:a2:55:7b:e1:24:70:
7b:86:49:c5:87:65:44:58:d0:5f:b6:58:8c:e5:4f:d9:ee:8a:
e5:b8:67:9b:bc:e6:ab:d2:6b:29:1f:1d:ba:d5:cb:53:79:9b:
2b:22:16:9a:56:d6:8c:00:eb:55:b3:4f:eb:1f:6d:83:e0:9d:
c3:a4:ef:24:77:34:96:28:35:a9:2c:39:59:23:97:bb:40:00:
fa:52:15:6a:56:83:3f:d9:18:42:a6:8a:76:b8:07:48:4d:b6:
2f:80:53:2f:dd:15:c7:f4:c9:d0:f3:20:96:c2:c6:5b:e5:43:
85:8f:18:6e:54:d5:2d:cd:bd:c3:e2:84:92:72:a4:56:47:a8:
eb:23:c3:b5:9b:37:74:73:0d:3c:bf:a1:80:3e:d5:13:a6:04:
97:1c:f1:4f:ff:28:da:89:2b:a5:bd:b8:2c:6e:3b:61:13:97:
6e:07:ef:ec:a4:cc:25:f3:06:32:45:76:43:8e:7f:31:3a:2d:
34:2c:7c:58:bd:cf:43:f2:e8:68:73:7a:76:b0:f1:81:0b:4d:
94:77:36:c2:21:78:ed:15:95:0a:da:4b:aa:15:62:1b:8f:29:
b2:77:19:c1:5b:63:44:cd:af:72:55:76:8b:76:64:12:81:76:
9a:b7:c6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:42:42 2025 by rpki-client