Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: 5m7W0HAmRVHT4XYrOkWwN+dpmcQZz2SV4KOnxe+Nkuk=
Subject key identifier: 2E:AC:61:95:10:19:16:5C:63:AC:20:3B:8A:11:93:E9:8F:3D:2B:E3
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 0199C7FCA163F4EF4EACE1A2BB9C11CEB178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 16CA
Signing time: Thu 09 Oct 2025 08:00:46 +0000
Manifest this update: Thu 09 Oct 2025 08:00:46 +0000
Manifest next update: Fri 10 Oct 2025 08:00:46 +0000
Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: T/DHpv+ibIOy5kiI+QjaHGp5Xpd+jejxG7jTUCiD5Xc=)
3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:fc:a1:63:f4:ef:4e:ac:e1:a2:bb:9c:11:ce:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Oct 9 08:00:46 2025 GMT
Not After : Oct 10 08:00:46 2025 GMT
Subject: CN=2eac61951019165c63ac203b8a1193e98f3d2be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:fe:32:e9:a7:31:82:b8:ac:61:b2:d0:20:
5b:67:d7:35:f1:31:f9:0d:0d:4a:84:72:00:16:1e:
61:0e:23:ad:dd:e1:cc:da:b1:6e:7e:ae:ab:c8:39:
82:f2:4a:0d:de:a2:c4:49:19:3d:05:95:78:f6:78:
2f:19:fc:dd:b8:20:a4:85:26:26:98:75:d4:19:15:
1c:69:46:12:3a:07:b0:be:d7:3c:99:c1:99:e6:fa:
f9:2f:86:92:86:43:78:f4:d5:47:9b:ed:56:76:e5:
a2:eb:3d:6c:e6:ca:c3:b0:d6:28:0b:67:79:65:f0:
e4:f9:c3:fa:ce:7c:c1:52:d2:b6:09:7b:76:6c:54:
57:ab:9e:5b:19:47:31:40:97:b5:83:56:67:71:8f:
04:22:64:c2:6a:39:b3:62:7f:87:0a:14:1d:64:77:
d3:f5:7d:d7:a3:d7:6c:2d:49:a7:0e:c5:1c:6f:e7:
31:8d:92:1f:8d:06:9a:b4:6b:a8:1d:4c:51:7c:90:
df:49:51:d9:f6:00:8a:08:35:04:62:54:3c:63:5e:
c8:dc:e4:46:b2:72:e6:13:da:aa:1a:aa:3c:ba:64:
8b:49:b5:c7:da:99:43:b4:1d:77:f0:1d:e7:76:9c:
b1:35:74:90:00:7d:0f:a3:84:57:62:94:32:3a:2e:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AC:61:95:10:19:16:5C:63:AC:20:3B:8A:11:93:E9:8F:3D:2B:E3
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:74:43:dc:19:e7:af:2f:89:cb:e1:1a:8e:f1:37:cf:a5:4c:
85:02:f0:0e:d9:4a:77:db:3a:35:39:c4:c6:cd:12:c4:16:ff:
42:b2:75:46:d5:9d:09:c5:be:7e:77:80:79:29:ac:5d:5c:f8:
dd:d3:2e:1a:5c:34:a5:11:77:6d:d4:a9:ae:37:aa:9d:37:b2:
ef:68:57:59:0d:1b:be:ce:30:dd:90:b4:4e:8b:de:ca:87:68:
24:a5:ee:dd:73:f9:90:68:67:24:fb:d2:b7:1c:96:65:55:8e:
d5:15:e5:f3:9e:1d:ec:f4:da:8f:db:cf:5c:a4:08:8e:70:fe:
90:b5:a1:1f:79:ff:88:5f:34:89:f7:10:cf:e3:ee:b9:3d:42:
1e:41:19:97:ed:8b:4d:bc:01:a7:be:4a:ab:fd:43:60:d0:1a:
59:31:40:6c:51:34:b7:3e:f1:eb:4e:7a:dd:f6:59:7c:00:ec:
34:0e:c8:9d:98:ad:66:53:c4:bb:1f:01:fa:7e:73:e9:c0:fc:
d3:4a:9b:32:d6:f4:52:9b:cb:ea:a2:b1:e9:67:31:d6:e3:bd:
75:ab:28:83:94:7e:d8:ce:e9:31:24:e1:da:43:ea:ca:ac:f6:
c1:04:51:70:2f:1e:dd:60:bd:c7:94:5d:70:11:85:21:68:c3:
08:20:d2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 14:20:46 2025 by rpki-client