Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: dqRAN1BbgqJWsVAaxU5WOTQJGpGbRELe9LZGcEaPCRc=
Subject key identifier: 0C:DE:EB:9D:38:C4:A9:70:51:6C:AD:0D:2B:52:1F:E3:BB:7A:A5:50
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 019A71B80FF81E39660F01680B4421BA8D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 0B5E
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=)
2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=)
3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: SQ9DJVPXZ9rfNs/knagIrfZYu5/8ipbIK7kCvIU6nd0=)
4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=)
5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0f:f8:1e:39:66:0f:01:68:0b:44:21:ba:8d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=0cdeeb9d38c4a970516cad0d2b521fe3bb7aa550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:c7:0f:2c:1c:13:11:1b:c5:33:97:97:2e:
7a:3e:5d:14:fd:c3:f9:ea:e6:8d:3d:fd:9e:1e:38:
25:e1:79:bf:11:c0:fa:c4:a3:0e:fe:53:4a:a8:e1:
01:ce:20:71:6b:31:aa:88:16:cc:f8:ff:ad:5b:a4:
32:6e:b2:24:4f:87:3d:d5:69:86:dd:77:af:d7:54:
fd:59:dd:ac:ae:87:79:c5:63:29:73:3a:a4:a3:1a:
e2:ed:94:ad:8b:8d:0f:1b:04:ca:2e:e3:f3:b8:93:
d1:60:e0:97:a1:8a:05:ee:0f:09:51:c4:fd:bd:7c:
0a:bf:82:ad:ef:89:d8:a4:78:66:82:66:5c:d7:bf:
d8:75:1a:17:0d:0a:af:81:6f:7d:49:ab:e1:91:ed:
33:ab:6d:d4:d2:dd:08:31:52:1c:f8:e6:ec:1a:97:
5c:1b:9f:ca:6b:18:09:b0:76:32:1b:77:40:77:a2:
db:9a:8f:53:44:70:2b:7b:60:e1:7d:72:1b:38:ce:
ea:72:90:e8:40:da:21:16:1c:50:8e:41:bb:3e:2a:
92:bf:f8:05:46:e1:a3:db:ee:da:d6:2e:6a:22:9f:
6a:13:a5:ef:08:f7:a7:e5:6d:6a:73:db:e1:c5:18:
73:bb:c8:45:60:f5:c1:e8:f6:9d:5d:6d:84:bb:53:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:EB:9D:38:C4:A9:70:51:6C:AD:0D:2B:52:1F:E3:BB:7A:A5:50
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cb:6a:fe:c3:b7:00:a7:92:83:b1:58:c7:48:0c:02:85:65:
ac:8d:b5:dd:ee:3e:a1:d7:53:c0:a0:eb:64:c2:2b:b4:f0:8b:
36:e4:a9:a9:77:c7:27:87:2b:d5:50:4f:bb:d8:a4:05:d5:c7:
9a:0d:dd:c7:2e:90:a5:3b:ae:93:3b:53:25:fa:63:4e:6a:80:
bb:88:ab:21:4b:16:e7:81:6f:71:07:b4:2d:e3:90:b3:65:99:
2b:d3:be:d7:8b:80:83:52:98:29:e6:85:a4:4a:c2:53:3b:46:
d0:29:72:6c:8d:19:77:94:bf:8c:90:53:e6:ab:e4:74:bd:1e:
e2:06:ec:aa:31:34:33:71:54:20:c9:8f:ea:2b:79:fd:1b:c8:
e2:c2:49:a1:08:19:7c:16:b5:96:22:f5:24:e5:af:fe:a7:59:
ae:53:f0:0a:14:ee:81:aa:18:16:ff:f7:f4:42:8c:80:2d:91:
35:77:e1:9e:88:95:20:a8:b2:fd:09:4a:7b:94:3a:50:fd:40:
da:97:29:68:43:98:68:07:50:86:6d:81:81:12:69:19:10:bf:
87:eb:c9:5d:f2:86:2d:45:75:c9:fd:90:3e:c7:7c:e1:6e:1b:
42:a7:92:33:80:fb:37:5a:77:7f:09:55:d3:8d:96:5d:35:eb:
f0:b7:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:57 2025 by rpki-client