Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: iBiK7+3SXTyPRJuqXvefJq1zOgKlZ6/icuYO7UB5LfM=
Subject key identifier: B0:D3:00:96:84:64:F0:CA:9F:3F:49:1F:F7:42:1C:82:08:6D:6E:1D
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 019A72CA4449D69A658D004988EC5970F76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0C90
Signing time: Tue 11 Nov 2025 12:00:49 +0000
Manifest this update: Tue 11 Nov 2025 12:00:49 +0000
Manifest next update: Wed 12 Nov 2025 12:00:49 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: 44ptiyVEsGpdRQnSkELWfizXVfluLoTL5EALpLeSGj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:44:49:d6:9a:65:8d:00:49:88:ec:59:70:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Nov 11 12:00:49 2025 GMT
Not After : Nov 12 12:00:49 2025 GMT
Subject: CN=b0d300968464f0ca9f3f491ff7421c82086d6e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:58:a9:96:9d:5d:65:46:2e:fc:c2:c2:c0:
a9:71:81:48:70:f3:3c:4e:a7:eb:f9:7e:33:79:16:
53:1a:a2:78:76:30:6c:88:a6:b7:e4:15:3a:6d:c2:
78:7d:55:0c:51:60:dd:33:2e:cf:8f:20:2a:32:0b:
ed:b6:41:1c:37:5d:a6:7d:1d:38:4e:0a:d7:af:9e:
bc:da:d6:c6:5c:0c:c2:fb:b4:49:3a:3f:5f:0d:78:
b0:85:22:0c:16:be:11:9e:db:ee:d6:50:9e:d5:e3:
2f:f3:8c:bb:a9:7c:a3:ca:51:5f:a8:08:80:79:56:
ed:d0:23:a6:d5:6b:73:e0:f2:90:94:1d:2e:fd:d6:
1b:3f:2d:4f:56:de:ae:41:9b:f4:fd:7b:7d:e7:78:
a1:e0:bd:d6:4b:ed:fa:b2:93:03:ad:aa:79:20:7c:
78:5e:bc:07:a3:15:02:86:cd:79:3c:23:1e:7e:ff:
4e:c3:95:8d:2d:ba:35:12:d9:e0:57:0a:dc:f0:3e:
8f:4e:3b:58:84:8a:5d:96:d9:44:87:6f:d2:d0:92:
c2:2e:28:2d:c1:a6:ee:d2:3f:3f:15:42:1c:e4:a0:
37:ba:cd:ae:da:1a:9c:2e:30:f4:60:34:10:ad:7d:
2f:2f:b8:25:58:d9:f7:7a:c9:b2:a2:f7:99:2e:0a:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D3:00:96:84:64:F0:CA:9F:3F:49:1F:F7:42:1C:82:08:6D:6E:1D
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1f:31:59:e3:75:50:89:8c:0c:e6:55:03:46:34:44:ca:92:
7a:15:b4:62:8d:54:51:5e:fa:6c:33:c0:08:9f:5b:b7:72:44:
59:79:cd:f8:8c:e8:55:d8:dd:6b:67:7c:7f:53:a5:20:e9:db:
b2:3f:67:ac:46:cb:6a:d2:a0:e4:f4:04:91:75:63:bf:23:84:
d0:3e:a8:a2:9c:78:9f:0a:36:99:b8:5c:81:b4:72:f9:e5:97:
33:b1:00:d2:5d:eb:dc:d1:a2:6c:a9:d3:e6:28:be:2d:05:40:
88:20:65:8f:12:77:4f:1d:c4:54:2b:b2:cb:22:2b:f1:a1:5a:
3e:ee:50:a5:a9:b3:24:e6:d9:01:b9:82:4c:2c:28:dc:2e:38:
86:67:ed:31:46:6c:33:d5:db:71:47:f1:6c:57:40:fc:32:3a:
47:09:ff:d5:ac:49:d1:b8:5f:77:a6:75:e3:32:a6:e3:27:2a:
2b:d9:e6:fa:63:59:26:01:30:61:5c:02:78:4f:8e:bc:03:72:
77:94:1f:6b:01:43:4a:88:06:e4:db:85:0f:60:81:86:83:5a:
20:d8:d6:4a:75:18:32:14:c5:2b:29:1d:d3:92:cf:a9:53:60:
46:52:42:a8:64:f9:1a:96:6d:e7:d5:b3:c0:2d:8b:eb:a7:25:
f4:77:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:58 2025 by rpki-client