Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: ar7cQznUUVS73ln56ieo+eWcQ6jb7SsUd1SjkH4FGmU=
Subject key identifier: ED:DA:29:DB:A0:61:05:1B:79:A8:FC:E0:73:9A:4E:21:48:41:7D:0A
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019A209BD8F05E2E794500811ED8DCC3BCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 13:01:15 +0000
Manifest this update: Sun 26 Oct 2025 13:01:15 +0000
Manifest next update: Mon 27 Oct 2025 13:01:15 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: 9YYr1hoUt0HvGD7W8mM5X+tgMQhcYuZtje0D1VWggEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:d8:f0:5e:2e:79:45:00:81:1e:d8:dc:c3:bc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Oct 26 13:01:15 2025 GMT
Not After : Oct 27 13:01:15 2025 GMT
Subject: CN=edda29dba061051b79a8fce0739a4e2148417d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:04:a6:3c:26:1e:08:26:52:d6:ff:e1:81:
ec:c7:f4:8e:fb:34:ae:e6:73:98:27:9b:2b:dd:59:
05:c7:a8:00:93:90:63:18:a4:d3:98:d2:18:e2:81:
3a:48:bf:4a:ff:d6:98:57:b0:71:ab:d0:f3:dc:b0:
31:98:e7:9b:9c:c8:17:79:17:75:24:c8:9c:95:43:
57:ff:29:05:c9:1f:f5:42:d0:60:c2:b2:15:94:ac:
8a:a8:8e:9c:62:5b:89:1b:a9:ca:b5:b4:a0:e7:41:
a5:2d:f4:cc:7b:a5:8a:3c:ab:23:5c:8f:47:77:ca:
fd:25:ab:76:0b:b9:25:ec:ab:61:14:3d:28:84:e7:
05:49:b8:88:d3:4b:68:19:7b:3d:48:cc:51:0d:9c:
ec:cc:48:38:3d:ab:b8:12:2d:52:6b:4d:bf:e0:a5:
e6:de:a0:28:8b:ba:50:98:86:bc:38:2b:65:f0:ee:
d9:8a:59:2b:26:c3:f0:9c:07:bd:50:a9:75:2f:e6:
08:0b:e2:5c:de:e8:cb:06:40:82:f7:34:32:ee:1b:
0d:27:f9:62:47:39:91:b5:ef:61:16:01:1b:61:ad:
72:42:ad:48:3c:4a:f3:05:e2:29:e9:da:49:c7:a6:
03:0b:e9:bf:e8:b0:41:cf:18:8b:6f:27:d5:18:94:
b8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DA:29:DB:A0:61:05:1B:79:A8:FC:E0:73:9A:4E:21:48:41:7D:0A
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4a:9c:d0:2b:c8:a0:22:ca:3c:81:8f:99:93:0a:f8:17:c4:
2f:34:d1:b9:3e:1e:6e:0c:33:67:43:47:12:9b:82:37:ca:d7:
14:d1:59:1a:ff:44:3c:3c:69:60:b2:52:af:3e:b6:80:6b:67:
24:07:22:56:39:2e:6f:f9:f3:aa:35:01:45:2f:2b:a0:b4:a3:
07:fa:4a:80:99:2d:57:93:c6:01:62:e3:5a:97:d1:8b:24:f5:
43:fc:19:10:67:4a:3d:f4:9f:49:72:11:86:a6:3f:37:1d:cc:
27:c3:cf:6e:c9:e7:07:6a:33:6e:4d:80:b4:db:55:53:77:67:
6c:1c:85:08:e9:ab:20:80:6c:35:f7:08:04:be:ff:e9:91:75:
31:e4:b3:7f:6f:ca:4f:e5:00:ac:95:bc:66:3c:cc:fb:3e:09:
aa:0d:52:a3:72:5f:ce:6f:06:0f:72:b5:d5:79:49:b1:ea:ba:
ca:be:bb:df:bb:c0:70:dd:d9:0f:a7:b7:25:c9:4c:5c:14:2d:
37:3a:46:1f:c5:a5:c4:80:7e:92:ae:cf:ed:83:1d:cc:96:5a:
8d:33:ee:8f:fc:01:03:60:94:87:3f:f7:af:e9:73:f4:8d:24:
bc:b1:03:ea:a8:6c:d0:b4:cd:ab:06:ce:3d:a9:82:29:a7:86:
af:65:c5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:26 2025 by rpki-client