Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: gMwmg0lvzcjL52BpTLr7rxuP/9c2QfWbScyP7mwAEFc=
Subject key identifier: 4C:05:FD:71:35:58:C5:26:72:D8:FD:18:56:BC:45:12:E5:D8:27:80
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019A1B74976F94D9B45485BF3DF61672E244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 13E7
Signing time: Sat 25 Oct 2025 13:00:17 +0000
Manifest this update: Sat 25 Oct 2025 13:00:17 +0000
Manifest next update: Sun 26 Oct 2025 13:00:17 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: tDRoY5Irnr1WmN7tiLf3eGM64bOOX0VEyAW8CBhCmVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:97:6f:94:d9:b4:54:85:bf:3d:f6:16:72:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Oct 25 13:00:17 2025 GMT
Not After : Oct 26 13:00:17 2025 GMT
Subject: CN=4c05fd713558c52672d8fd1856bc4512e5d82780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:3e:33:7f:11:32:f4:d0:3a:80:1b:19:fa:
9a:53:80:75:5d:fd:29:36:41:9e:6e:28:48:b7:bf:
26:4e:fc:27:63:70:7f:ac:ad:34:28:93:16:1d:e7:
3e:de:bb:45:af:2d:dc:a0:0c:47:19:7d:bd:e8:5d:
0b:be:e1:03:7c:22:22:5c:89:a1:b7:02:aa:c0:e3:
cb:2d:34:19:f7:3b:6c:a1:19:1c:2a:fe:2e:93:c4:
b2:5e:0a:94:ec:a6:5d:06:c9:cf:c2:62:21:20:01:
91:e7:b1:a5:61:da:11:93:ce:26:c4:19:57:b1:fd:
49:be:01:bc:b8:d4:38:c6:b7:fc:8d:0c:d2:8c:8d:
a1:b2:42:f8:cd:8b:2c:a3:10:eb:9b:d5:e9:22:b6:
92:cf:1f:6b:7a:36:94:83:da:b5:50:fd:77:78:42:
66:8a:6d:7c:ed:62:de:9b:eb:c2:ea:1f:87:06:2d:
7d:65:30:44:56:cb:cb:b8:45:54:6b:55:f3:c5:c7:
d0:db:9a:cf:d8:84:78:c4:bf:3b:10:a0:31:28:d8:
ca:dc:f0:c6:51:0b:b7:54:2d:45:de:e3:40:0f:23:
ad:61:92:3f:47:b9:5d:40:be:0e:1d:47:b7:78:a2:
a9:e7:af:de:d2:1f:e8:d3:47:0c:5e:c5:18:46:75:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:05:FD:71:35:58:C5:26:72:D8:FD:18:56:BC:45:12:E5:D8:27:80
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f0:30:44:79:ef:1e:fd:a5:7c:8f:2b:05:04:cd:dd:80:1c:
1e:12:db:fe:e8:f5:8e:6a:4b:63:3d:0c:0d:94:fa:bd:a2:0b:
ba:ce:fa:5a:d3:86:97:e3:de:5a:5c:e9:02:b8:45:a2:70:f8:
13:20:4e:f5:52:e9:2b:f6:c5:a0:f8:76:82:79:81:21:24:94:
71:26:ca:cf:88:40:45:2c:0b:e3:03:63:04:6b:ae:8a:cf:fc:
7e:36:2d:96:d8:a3:dc:fb:cf:48:e3:5e:e1:79:d0:64:52:8a:
7a:98:dd:c1:33:54:b3:51:67:27:2f:85:f4:d5:70:53:a9:a6:
04:eb:c3:14:c1:6b:dd:48:65:af:45:1b:9e:0b:c0:28:b3:1a:
93:8a:b4:4b:d6:bc:0a:e7:26:98:c9:84:2e:4e:42:de:ba:9a:
4b:48:5f:af:2e:d0:82:0a:cd:43:24:20:76:2b:93:1e:b5:c2:
9e:b7:4d:a6:bd:ce:72:d7:dd:85:5f:89:33:84:b4:75:e4:ac:
ed:bf:d6:64:76:21:1d:c0:1a:06:79:ed:ce:b2:93:96:0a:1e:
ac:5d:6f:f2:29:1e:dc:78:a7:cc:dc:1a:22:ac:9f:be:bb:a5:
05:cf:67:c8:ef:d1:16:c8:b2:1e:bf:d3:61:e4:bc:8a:25:97:
e4:57:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 16:29:20 2025 by rpki-client