Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
File: qGBXhZ0WYOjYcpee5tamssQzowU.mft (raw, json)
Hash identifier: GGJrrOK7fShbGHOaoWAFUZIFqqO92rRpnfi40nWFhtg=
Subject key identifier: 7A:B6:FA:B7:95:B1:63:2C:49:EE:75:E6:C6:C2:BB:54:51:CA:0D:AC
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 019A2A7A1BDE6EDC4BB51B2F9F3D630B2B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 11:00:36 +0000
Manifest this update: Tue 28 Oct 2025 11:00:36 +0000
Manifest next update: Wed 29 Oct 2025 11:00:36 +0000
Files and hashes: 1: PW17_Y421OHbEdWMpqGOAItDAMQ.roa (hash: L2gpot5aAwJ9/O+fD4LlOhf1tqLhMij+IcuFZyDR7dA=)
2: qGBXhZ0WYOjYcpee5tamssQzowU.crl (hash: 5zgdjliibKgzG9sZssGRuvanycTRd+C4qgejv5R7DMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:1b:de:6e:dc:4b:b5:1b:2f:9f:3d:63:0b:2b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: Oct 28 11:00:36 2025 GMT
Not After : Oct 29 11:00:36 2025 GMT
Subject: CN=7ab6fab795b1632c49ee75e6c6c2bb5451ca0dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:1e:2d:10:7a:67:9f:eb:2a:ed:38:fe:bb:
3b:5f:e2:bf:91:e6:77:71:7c:48:f0:54:e0:df:82:
f2:64:5c:63:ea:f5:17:28:23:7d:10:03:b1:77:a7:
ef:37:a4:5c:bf:50:35:34:74:a0:eb:4e:33:cc:cd:
0f:6d:e8:5a:06:a7:16:fa:70:ee:b5:fc:1c:f0:86:
ff:2d:d0:cc:33:c3:a1:aa:ae:b2:29:4f:2e:90:0f:
73:07:0f:6f:89:0d:d3:45:4b:c6:d6:ee:40:6b:2b:
df:06:83:5b:f6:b9:3f:5e:32:c4:31:c8:d6:bb:3a:
03:30:1c:ea:59:b1:f8:ab:3b:fb:e1:3c:8f:32:e4:
47:00:43:cb:7e:df:b4:1c:3c:01:0b:46:55:ee:29:
09:13:43:d6:57:76:7f:fe:60:0d:ee:bd:7b:35:69:
30:05:13:df:45:7c:f8:bd:47:10:e8:c7:e4:f7:b5:
86:22:19:88:8a:5a:76:99:33:c2:09:b7:2c:59:7c:
fd:74:81:f8:b0:9c:aa:53:97:66:ae:24:15:80:b6:
b9:91:c9:88:b7:dc:13:bf:9d:ad:24:bb:32:50:3d:
c6:7d:e6:89:32:75:7b:df:39:b3:eb:70:96:70:e4:
c6:54:95:e4:24:3f:1a:6e:38:5f:1c:69:12:33:fc:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B6:FA:B7:95:B1:63:2C:49:EE:75:E6:C6:C2:BB:54:51:CA:0D:AC
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:04:5e:15:79:8e:8e:47:ba:ad:af:dc:74:0e:5b:6b:05:43:
db:7b:c7:b6:af:76:5c:9e:59:b0:4d:df:51:e5:96:04:db:fc:
85:b3:8a:e5:43:c9:df:97:bb:7b:1a:7f:82:1f:97:d3:12:3d:
28:bb:9a:e7:64:f5:f2:f5:36:6f:09:a2:1d:df:e2:c9:59:3f:
85:d6:0b:e9:e7:9e:3a:69:94:3b:e4:e8:0a:bf:69:ea:f6:6b:
36:12:05:e4:f4:bc:77:3b:58:11:ce:4b:33:6e:32:03:bb:5c:
06:c7:15:16:df:43:de:c6:94:4d:14:b9:95:db:cb:1e:dc:b0:
05:47:28:8c:69:7c:c5:8b:c9:6f:5b:39:5b:b5:13:51:10:93:
ef:af:a4:1f:8d:61:f0:1a:bd:5c:10:83:63:c6:95:22:87:b3:
cb:5e:93:32:b8:a2:d1:d7:1c:02:5a:ae:51:70:30:e6:ad:33:
0b:03:f5:c1:d5:de:3a:d7:a2:00:bb:45:7e:1e:a7:50:2c:f7:
71:41:83:0c:57:8a:07:59:01:eb:dd:d6:39:51:ac:01:3c:89:
3f:ef:e4:8b:d1:4d:5d:0f:13:da:c4:54:21:e5:f3:51:10:12:
66:ff:8f:04:d5:a1:4c:a2:be:05:d2:a4:fc:4e:8b:a7:be:fe:
b4:df:f3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:05:46 2025 by rpki-client