Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: RklrYbmjUMvrg/q6U1rLWN50d4BQDxcl89B8GvUekvI=
Subject key identifier: C5:E9:5D:60:C5:73:5E:05:AB:02:33:04:AA:F3:C6:B3:FB:52:E0:A1
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019A2D7B08C2C5811D6F68F7A94FB3F3371C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 0ACC
Signing time: Wed 29 Oct 2025 01:00:29 +0000
Manifest this update: Wed 29 Oct 2025 01:00:29 +0000
Manifest next update: Thu 30 Oct 2025 01:00:29 +0000
Files and hashes: 1: 1-Q-SU6M1eWokdvHWYPfiDLf862M.roa (hash: C1hLhsta908XltJUmng5iUBY0gsffPf1N3xCcfgoTn0=)
2: FIO2B6DSj-VNnqIBc_nz9Mg-l_0.roa (hash: hFmNbHGOZOtCeE5eu6qV8WF/VHQWY1SuoXphpTsuE/Y=)
3: _0V8txyjPPqzjlvfK-eiSEPQud8.roa (hash: OuyYUMKPpEltyvzJnMLVyp9dQDUE6+Aj/UBjntoQqiQ=)
4: aQbAdMmw6LGkWrHFISw9gjXbPXE.roa (hash: 3oom+N+bFKVsXUfpHyiTTHfYtfR8rQPSAw7BXiuCfxQ=)
5: om3N9ug1vxTA-JOJ0P_08L7ZWxo.roa (hash: FdL6R9gigrjiaEd9SVuTmcrerTtUR7V2cH9/PXq0cyA=)
6: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: HDgZao1m3mW8ZAyj4dmgt9QahSH4pQtPE4NQHv2mDx0=)
7: sRlrf2L_j98uPIoNnChhrs6bing.roa (hash: 1ZhMP4XH7DUgYDZTVYKViXDgJjDrkhtBjx0bS6tr/u4=)
8: tJZkynRy8uV8yQcd4yzCAEqpLIg.roa (hash: TGGA7U/xut49UXeQTIJIPzu7f3fAAJZZSi0PNoulkio=)
9: uPkkzg5i_N9C_QfzlZF7zCoVCpE.roa (hash: MtHvS+JR+Oum24yd4r12c1cN1Y/6sK4FbwymNPm07k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7b:08:c2:c5:81:1d:6f:68:f7:a9:4f:b3:f3:37:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Oct 29 01:00:29 2025 GMT
Not After : Oct 30 01:00:29 2025 GMT
Subject: CN=c5e95d60c5735e05ab023304aaf3c6b3fb52e0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:20:30:e4:16:d9:c7:fb:59:56:ff:d2:a3:
3e:ad:7a:8d:2e:f5:fc:e1:6b:25:d5:a7:1e:bf:57:
a3:d6:5a:be:16:1b:7f:fa:b5:08:c3:48:97:e9:88:
3f:93:a0:66:8d:f8:e7:0a:06:2e:5b:b8:a5:53:de:
08:f5:40:fd:20:1f:c5:bc:b2:0b:8c:3c:7f:aa:53:
4d:46:6e:4c:32:81:5c:87:41:f9:52:85:f2:49:4e:
d7:ea:f3:66:ee:a1:c0:f4:7e:15:72:16:20:ca:6f:
a5:c8:54:86:4d:28:9d:0b:23:cc:3f:ec:6b:65:59:
27:8e:b9:c6:88:4d:41:50:0a:33:09:95:47:d0:43:
e1:8f:8f:b5:b5:8a:30:b2:cc:99:74:bb:2e:d2:10:
9e:d6:ac:97:14:fa:a0:ee:b1:99:06:dc:f1:96:90:
c6:36:b2:ed:0c:02:1e:15:47:46:f2:bb:1f:bd:7b:
88:64:aa:05:62:1f:af:5a:ca:16:8d:f2:15:3b:33:
58:1f:0e:3f:86:c9:23:71:45:c9:2f:22:51:c3:d5:
ef:c8:3e:9c:53:95:55:45:86:3b:68:63:44:54:e6:
dc:df:fe:3a:4f:33:2d:fc:56:79:be:18:a4:f1:4d:
3b:fa:f8:a8:3f:c1:c8:f6:6e:8b:e0:5e:11:21:ee:
cf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E9:5D:60:C5:73:5E:05:AB:02:33:04:AA:F3:C6:B3:FB:52:E0:A1
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:77:70:ed:3e:8d:9f:e8:a4:3d:8d:14:2e:d3:e1:fe:32:
ed:b7:cf:bd:1d:12:d1:7a:eb:7b:4a:13:fb:20:8c:08:68:1e:
98:eb:7d:6e:fb:cb:9d:79:d4:32:8a:ad:12:7f:18:b5:66:05:
91:0a:f0:1e:d2:b1:8e:52:42:24:0c:aa:cc:55:da:e6:15:07:
cf:b4:b2:ba:ac:ff:75:ca:64:85:1d:90:77:c5:9e:ce:50:74:
5f:f7:09:9d:26:46:c7:4b:3f:35:4a:22:c5:7a:bc:df:52:d1:
de:68:6e:35:84:30:ab:23:46:d4:9f:c4:a8:70:e7:55:e5:b7:
78:df:63:9f:12:31:59:18:74:78:05:7a:98:c9:82:0e:c9:ac:
93:c0:5a:31:ad:05:47:25:e5:eb:4c:40:7d:2b:60:b6:e4:ec:
ba:84:ce:e3:4a:6c:42:59:e4:b3:53:78:b5:d6:bf:d6:89:45:
c7:54:87:fa:ea:50:8f:ed:41:7b:51:c3:64:02:b5:6c:34:06:
40:ba:87:13:62:33:18:56:f6:6c:e3:59:75:4a:bb:b3:c1:2c:
91:22:0a:fc:89:72:cd:90:5c:85:4c:48:ec:59:fb:ce:06:de:
e4:f9:15:9a:b8:28:5c:6a:66:5f:cd:68:bc:0f:58:38:a6:41:
20:e0:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 03:19:36 2025 by rpki-client