Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
File: qnARDTDVLoppaViLP2IUFrzfZEs.mft (raw, json)
Hash identifier: YCrYwry1SXG09rDJnvb1zB3XdPu+Talj3t4O7+CnKH8=
Subject key identifier: 32:16:7D:92:2C:CB:FE:0A:0E:C0:E3:54:32:56:81:98:B9:CB:66:0C
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 019A28557B7C9872B3879B53EE3556BE12C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 01:01:21 +0000
Manifest this update: Tue 28 Oct 2025 01:01:21 +0000
Manifest next update: Wed 29 Oct 2025 01:01:21 +0000
Files and hashes: 1: AJtxlRhC18CSM9vDFJ0bVbhxN3Y.roa (hash: fBqbrVqiGsFpDlku7pjNXfyrY6CdOCxCpNnDRdqo0xM=)
2: hFPPHhOMQW_4XkqhjXSBTCjwlfs.roa (hash: 4m3xa6SKPtpxIGZbIvqkpRqzc55Dx3AnOKG3Nnp54nM=)
3: qnARDTDVLoppaViLP2IUFrzfZEs.crl (hash: aTM3R3hW8tLgMK7CBaoQl24tsIa7j9hJUpdyc9iJ3pQ=)
4: z9pLNQSZNKFYtIVw9GxMfA_dzlc.roa (hash: ceBAqvnBw6p+b98UNKLSzZv2TyxRWLOoeu9xMf4knvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:7b:7c:98:72:b3:87:9b:53:ee:35:56:be:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Oct 28 01:01:21 2025 GMT
Not After : Oct 29 01:01:21 2025 GMT
Subject: CN=32167d922ccbfe0a0ec0e35432568198b9cb660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:24:5f:7f:40:24:2a:c1:e8:c4:12:e6:38:
54:4c:22:8b:5d:8b:22:5d:dd:c2:09:91:2d:70:c7:
a5:68:0f:8d:2b:8e:01:3b:38:f9:5b:91:bd:b3:7b:
32:3c:60:61:e4:49:3b:3f:36:ec:9f:26:b3:c9:69:
0b:9e:f6:e0:9d:42:11:fa:58:52:78:f7:c7:d4:0f:
64:c6:75:f3:85:67:53:c1:9d:e3:58:c5:98:ce:66:
43:40:e2:1c:4f:ba:e1:0e:ab:b7:65:fa:79:29:57:
15:bd:95:cf:1b:68:60:9b:20:27:40:a7:52:3e:e1:
39:7b:d0:e0:d5:6a:86:d6:62:38:61:b1:15:13:7c:
ce:1b:58:b2:61:be:3e:72:90:92:0e:d1:b7:be:02:
f2:a3:5d:c6:1d:9e:c0:66:41:94:cc:d1:78:7b:00:
b0:3d:12:07:f5:a0:36:d4:cd:bf:a0:cb:16:2b:24:
25:27:3a:cc:52:48:f5:7a:f0:d7:a7:5e:d5:cf:db:
fa:f1:5d:a1:b9:90:41:4e:3f:e3:60:67:84:cd:37:
70:84:4c:b9:c8:4f:8c:98:d2:23:40:26:de:3f:ec:
99:22:3c:33:79:7d:3e:61:88:e5:75:e7:1c:22:d5:
88:ec:e7:62:d8:b9:d7:76:bb:84:de:52:86:42:09:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:16:7D:92:2C:CB:FE:0A:0E:C0:E3:54:32:56:81:98:B9:CB:66:0C
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:b3:81:53:74:25:5a:09:54:46:d0:3e:d2:c0:09:db:78:
5c:68:d4:91:01:68:dc:b3:43:c5:b5:0a:4f:a6:3e:45:b3:23:
e2:f7:32:0c:3c:7f:13:d8:b1:85:18:8e:df:d2:e7:5c:c2:cf:
2d:b5:9b:bb:4d:b0:3b:5f:2d:d7:e5:e8:41:29:79:90:16:92:
c9:df:5e:ba:4f:60:dc:24:84:db:5b:dd:20:bb:47:4b:38:62:
86:a1:cb:62:54:9e:6e:00:9a:eb:fa:9a:71:e9:e2:9c:b4:a1:
b1:77:c3:72:38:02:f9:30:57:2e:50:4e:c5:ec:10:86:88:29:
be:a4:24:ca:02:b3:22:73:a2:f6:47:00:61:9e:c9:da:22:12:
96:e7:35:11:b3:29:39:ae:c3:4a:f6:12:9d:28:e7:08:64:23:
f4:48:cf:78:97:7f:6c:7d:f8:9f:66:0f:9b:6f:c0:d9:fd:28:
a3:13:24:96:ed:e7:00:10:2b:5f:4f:5e:81:f6:c2:84:f7:c8:
43:34:2e:72:41:25:e0:e7:54:2d:b8:d1:66:cf:9c:22:64:7d:
dd:a4:14:00:a3:25:0e:4d:06:80:a1:23:79:08:76:68:b8:f3:
4e:cc:d6:6f:ba:1d:c4:0e:07:f3:91:8b:aa:6b:6f:25:29:38:
93:44:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:40:26 2025 by rpki-client