Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: NRqdBObSm7TyvgBF1ZwT4WfPTVXceeyFbTVzpm6FZsw=
Subject key identifier: 7C:89:DF:FF:84:A9:43:5C:BA:EC:AC:40:FC:99:BF:DA:6D:AD:FD:12
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 019A1EADA796382F5D99ECB49BDBC8CE7F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 16FC
Signing time: Sun 26 Oct 2025 04:01:28 +0000
Manifest this update: Sun 26 Oct 2025 04:01:28 +0000
Manifest next update: Mon 27 Oct 2025 04:01:28 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: n/l7/lzrnOIrmu/Y+v/JjwfF+OYq/Yst9+s64okj6HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:a7:96:38:2f:5d:99:ec:b4:9b:db:c8:ce:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Oct 26 04:01:28 2025 GMT
Not After : Oct 27 04:01:28 2025 GMT
Subject: CN=7c89dfff84a9435cbaecac40fc99bfda6dadfd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:69:49:c2:59:c4:ad:45:81:37:58:98:83:
88:a7:54:6c:45:cc:d8:4f:60:76:b3:f1:e0:c2:f9:
80:ee:b0:c8:d4:b8:69:e9:98:8f:64:f0:db:f4:23:
a0:a0:ac:34:49:5b:c1:c0:45:b3:45:2e:35:e5:54:
3f:c1:34:82:e9:a5:47:73:40:a8:db:72:7f:33:ca:
93:1c:62:96:e1:91:43:41:bb:08:61:69:0a:98:76:
52:fc:3e:ac:cc:ea:e9:9e:aa:75:22:02:6a:d8:a0:
06:e9:e5:15:65:f7:31:d3:db:ae:13:6a:b9:8b:f8:
29:4e:fa:04:4f:70:e9:7e:e8:91:78:e5:c6:07:5b:
08:ce:45:8e:e5:9d:d5:71:88:94:51:33:47:f5:dc:
a7:32:d2:07:c6:44:30:b5:68:b5:96:ff:73:73:6d:
f0:78:8c:3e:b0:6e:c1:d8:93:42:a7:1a:41:f4:8f:
ac:b1:19:0e:80:28:7d:4c:3c:4b:88:07:88:0b:fb:
84:9c:2d:50:8b:25:67:0f:a2:1d:95:75:51:82:7b:
73:b3:2c:5e:a3:83:b2:c2:cf:fe:d2:49:8a:6b:90:
7f:c5:45:a7:19:5e:1d:4c:9a:55:0e:40:e2:79:dc:
e2:f9:8c:c6:3f:9e:45:29:08:72:80:0b:a2:f7:64:
62:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:89:DF:FF:84:A9:43:5C:BA:EC:AC:40:FC:99:BF:DA:6D:AD:FD:12
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f1:b3:34:92:cd:3c:18:8b:4f:16:00:9c:a1:66:d9:3e:55:
5e:0b:92:8f:9b:ee:34:16:15:cf:99:27:c8:5f:34:13:ea:9e:
5f:f0:e3:73:1f:ea:26:d5:7a:c2:0b:99:4f:1a:de:fe:f0:17:
a6:43:2e:d3:5f:fb:d9:21:f8:33:53:c5:ee:d7:16:26:2e:a9:
83:a8:91:ec:87:3d:70:8a:72:13:60:00:02:ef:58:32:c5:15:
16:e9:5a:ba:a8:cb:39:f5:1e:9d:4d:3f:ee:4a:c9:87:8a:93:
38:f4:8d:7e:ea:e6:b9:e1:65:cd:e5:40:a8:92:d7:54:46:d0:
5d:08:6d:4b:18:42:2e:69:0b:de:db:ff:35:41:14:e7:b2:92:
fa:25:5b:80:39:fd:31:aa:f4:ff:37:b1:53:3b:03:d9:8b:29:
1f:af:4e:20:a7:68:97:c5:08:95:cf:78:51:c1:0d:95:da:c9:
19:90:0b:e1:16:c4:46:fa:c3:95:4d:2b:68:27:54:47:21:1b:
86:33:49:9f:11:cc:79:ff:75:b5:46:6a:a8:a6:f7:ad:77:ca:
70:09:21:44:01:a3:09:4e:e7:58:f2:78:95:9e:ab:3e:6d:c2:
9b:52:aa:e4:c8:a2:69:0b:74:64:75:fb:ca:f5:9d:be:1c:7f:
11:25:6a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:00:44 2025 by rpki-client