Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: ZPvzCEQMXOnOX3wHKEvhdB9uWcOp3rSte8f3WUjeIT0=
Subject key identifier: 65:F9:3B:7B:C5:76:59:5B:6C:19:1F:62:02:36:93:B6:CC:2E:AD:30
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019A00A30008262C49164B713396C4EBFCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 98
Signing time: Mon 20 Oct 2025 08:01:13 +0000
Manifest this update: Mon 20 Oct 2025 08:01:13 +0000
Manifest next update: Tue 21 Oct 2025 08:01:13 +0000
Files and hashes: 1: IuBa70BDMg0yPa-auzZdBIfQXlM.roa (hash: P7DlWRmLUo7YIyLqEcKhGguGrK8gKl8k7uHLBwT0v4U=)
2: NHd08g9X-MuopAlLpgKXbxukW8k.roa (hash: qCjWNPKActqOGuKEjDGHdWjpl9WS29egZUeHGegFoKg=)
3: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: BT6zzuQkJgNMJAnTxBzze0GbkVw7nUrdETKCwyqPEyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:00:08:26:2c:49:16:4b:71:33:96:c4:eb:fc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Oct 20 08:01:13 2025 GMT
Not After : Oct 21 08:01:13 2025 GMT
Subject: CN=65f93b7bc576595b6c191f62023693b6cc2ead30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:77:68:f4:92:a0:3b:39:15:4e:92:9f:6a:
ee:ec:f8:05:0c:21:07:d1:70:c9:2e:2a:1d:a4:a7:
fd:ec:71:6b:a0:be:0f:7e:92:48:16:2c:a4:70:79:
b2:ea:d7:2b:3c:aa:81:99:8b:d1:50:3c:9a:f9:dc:
0d:a9:3d:52:50:e9:b3:7d:1d:c4:23:6b:9a:e8:e6:
00:e8:09:42:5d:94:20:74:f8:59:95:ce:db:4a:23:
3b:95:bc:f4:79:5d:ad:70:21:2a:6e:b3:6c:61:7e:
1c:ed:c4:5f:8e:e9:14:21:03:83:46:dd:44:64:c0:
72:c4:8f:c9:ff:50:dd:8c:e0:b2:a3:c5:63:e6:ab:
2a:b6:a4:b6:1e:e0:73:1c:06:3b:9d:0c:e0:5e:15:
c6:7b:f6:5c:6a:87:21:9e:46:4e:a2:15:f1:cf:99:
6f:4a:a3:36:73:b1:c7:be:33:09:01:f7:4f:90:3d:
14:94:0f:70:31:35:95:9e:cf:90:76:93:b4:82:77:
a1:ae:a7:80:c1:80:48:dd:1a:4b:26:7f:ba:2a:4b:
34:91:2d:91:41:6e:e7:54:d4:b9:1b:48:fb:b0:01:
60:57:4d:f3:d5:4b:04:e7:22:b5:1e:f7:3e:c2:aa:
f6:3d:dc:80:a8:5e:7b:3a:f2:cc:41:d5:33:94:4f:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F9:3B:7B:C5:76:59:5B:6C:19:1F:62:02:36:93:B6:CC:2E:AD:30
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e6:67:9f:89:ff:b3:64:cf:e7:5e:69:8c:d5:df:1e:5d:58:
d2:11:4b:cb:26:09:c9:56:56:ec:18:16:2f:7c:b5:8b:c2:48:
89:e1:83:c4:fc:9b:34:5c:ea:55:86:06:d9:4f:29:d8:4f:76:
0c:c1:8b:19:b6:16:0a:9d:a6:93:98:91:f6:de:63:6a:63:07:
ad:f1:3c:77:84:c5:b0:e4:e7:d4:57:5d:01:f3:ef:45:d4:96:
85:b0:cb:78:48:c6:c0:58:e6:67:51:10:c3:58:8c:79:72:7d:
f0:92:41:76:cf:20:da:e0:58:8b:14:cc:48:af:98:85:ad:94:
02:5c:8b:53:72:c2:91:71:09:23:3b:1b:f1:ae:00:49:2d:93:
e7:e8:e2:a4:68:6a:23:c7:3c:38:ae:7d:35:1d:9d:20:b7:f2:
4d:0e:30:05:3c:11:54:2a:ee:2a:38:63:22:10:b7:9c:f4:7e:
01:2b:7c:a1:29:43:dc:76:0f:83:e7:15:d2:0e:45:e3:c8:77:
d9:92:1c:82:9e:f2:a2:83:a4:60:5e:f2:8a:32:b6:10:e3:0d:
ad:a3:57:c1:a1:0e:8d:83:c3:f6:b0:1b:bd:c8:b0:23:04:d9:
9b:82:29:b5:24:f3:7a:e5:12:3d:41:8c:7b:00:d2:c9:48:88:
5f:9d:03:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:16:34 2025 by rpki-client