Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: nRBf4jPEIlwsNHODd2VBk5lpbY7ENuSKc9xfHMq4XF8=
Subject key identifier: 79:2E:5C:DC:27:41:F2:FB:AE:07:26:FF:A1:A8:7F:AF:10:90:6F:EC
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 019A221B667E18B7CB7127DEB40EEA05D6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 20:00:12 +0000
Manifest this update: Sun 26 Oct 2025 20:00:12 +0000
Manifest next update: Mon 27 Oct 2025 20:00:12 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: GaavAVHu/2O0/gHfe/N1sy6raBN9eTbRBKZVRfGNV+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:66:7e:18:b7:cb:71:27:de:b4:0e:ea:05:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Oct 26 20:00:12 2025 GMT
Not After : Oct 27 20:00:12 2025 GMT
Subject: CN=792e5cdc2741f2fbae0726ffa1a87faf10906fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:c9:34:36:7c:93:4f:3c:6b:09:81:8e:f6:
19:3e:3a:17:bb:28:25:f3:a4:29:07:cd:b4:68:b0:
49:da:0e:13:72:6a:bf:50:db:8f:c2:4c:51:77:26:
77:45:29:e0:a1:f1:a8:d5:93:a4:d0:ef:3c:44:10:
ae:24:4e:21:cd:fd:cb:3f:73:aa:a4:3a:d1:c9:37:
cb:63:14:06:e0:fb:20:09:7c:63:86:a1:95:18:c3:
4b:4d:06:5e:69:64:e8:c8:fe:6b:27:ca:a1:fb:4a:
9c:ae:ec:53:2b:7a:c2:e0:e1:ae:57:4b:ab:c9:c8:
92:73:9e:e8:68:fe:e1:33:b3:df:35:f8:4a:59:e2:
ae:02:1f:16:03:c9:8b:28:06:40:73:3b:df:4f:20:
13:bc:32:f9:4d:3f:ca:f5:a1:c2:3e:5b:94:b3:d4:
7a:b5:bb:e3:ea:e8:17:d7:1a:14:ca:69:2b:9b:6b:
9b:21:53:e4:4c:e7:c4:c4:1c:55:43:2a:fd:87:85:
17:e7:9c:c9:95:58:a7:53:16:88:ac:16:b4:b7:e5:
f2:c0:89:65:ba:2a:db:48:67:01:8c:8a:2e:ba:b6:
ac:10:4b:21:82:8b:68:a2:4c:f8:6f:be:1f:dc:9b:
b8:02:6d:5d:28:aa:50:0e:4d:5c:05:43:bf:38:08:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:2E:5C:DC:27:41:F2:FB:AE:07:26:FF:A1:A8:7F:AF:10:90:6F:EC
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bc:23:d5:5b:61:29:31:f7:c5:d4:86:64:c2:94:8b:0e:6d:
15:ca:2c:02:f1:36:c0:f0:c7:fd:60:f0:c7:2f:a8:c2:25:29:
d4:63:67:2e:f1:b6:e9:ff:09:f1:cb:a3:96:c9:01:91:79:40:
1a:f4:f6:cf:ce:5d:34:8f:a7:26:90:82:51:93:8f:ea:e9:9b:
00:0e:6b:cb:5e:e3:86:a8:eb:83:aa:6f:74:10:18:a3:35:d1:
94:67:4a:38:c5:62:dc:04:50:72:0d:80:9c:e3:fc:84:00:63:
09:aa:bb:67:f4:c0:ea:e0:33:fd:b5:4e:da:1c:96:b1:60:a2:
d6:48:f8:75:b0:af:bc:fe:eb:9f:6f:2e:b5:af:9c:c6:49:cb:
1d:8d:33:5c:bd:46:e2:82:76:92:e4:90:dd:31:32:f9:53:04:
fd:a5:69:d1:1e:22:c9:db:dc:7f:c5:f5:a6:5a:1d:ca:6a:72:
92:69:37:a7:dc:83:01:04:28:1b:2f:e7:7c:95:c6:80:fc:0f:
8b:3a:9d:e7:82:59:92:47:c4:e3:47:02:c1:41:f0:bb:e4:42:
35:ca:ef:5a:9d:ea:70:29:aa:4c:e4:f3:83:70:66:25:04:46:
9b:fe:1f:0d:1f:d1:df:1c:63:52:f6:7b:15:90:ba:1c:73:59:
44:65:07:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:11:06 2025 by rpki-client