Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: 9eoYp90GJWSeCZM1HCRLIoGeo7G+AHuIUSTZ2W6hbSU=
Subject key identifier: 0F:89:62:1A:1B:99:3D:B6:5C:0D:9F:C9:F0:43:55:59:72:40:DF:EE
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 019A1CF5AEB0CF815EA6A9778636C2B65C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 16F6
Signing time: Sat 25 Oct 2025 20:00:54 +0000
Manifest this update: Sat 25 Oct 2025 20:00:54 +0000
Manifest next update: Sun 26 Oct 2025 20:00:54 +0000
Files and hashes: 1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: n+zqIdaw+WWRTjkv9scsK448VMtuOu5EqnBXH6ZnyYI=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:ae:b0:cf:81:5e:a6:a9:77:86:36:c2:b6:5c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Oct 25 20:00:54 2025 GMT
Not After : Oct 26 20:00:54 2025 GMT
Subject: CN=0f89621a1b993db65c0d9fc9f04355597240dfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:92:af:cf:0e:d1:8f:39:a0:4f:7a:bf:42:
04:23:1f:24:e6:88:93:72:2b:97:d0:49:5e:70:85:
bc:b9:8a:fb:e4:66:6b:5d:64:04:b1:b4:0e:cc:8f:
3b:73:c0:2b:3b:03:02:91:e7:d2:3e:dc:20:d0:76:
c6:a6:46:32:04:4d:56:73:76:18:81:54:1c:bb:5b:
86:8a:3d:9f:f7:b8:21:15:18:44:92:57:d4:16:f0:
c5:47:07:aa:f1:84:37:c8:12:db:82:7d:76:50:a8:
5f:3b:91:e1:92:d3:d5:7b:79:c5:7d:af:29:95:f5:
f0:1a:1e:3b:e9:1f:03:51:a0:7b:99:7e:5b:fd:76:
0d:c6:c3:c5:f1:f0:15:3f:c7:c7:aa:22:79:46:b7:
7f:7e:f1:e7:15:cd:18:c0:54:a3:b7:0a:3f:5c:51:
f5:38:c0:69:6d:0b:9c:9b:72:93:be:cd:8b:99:b7:
b1:cd:dd:e5:c5:22:96:47:02:f2:58:7b:ea:e1:8d:
24:24:a4:ed:fa:53:fe:42:64:59:fc:76:c1:73:db:
8a:76:d7:46:7c:f8:3e:83:55:bb:f3:47:ae:e4:fa:
18:86:50:9d:69:5b:69:e2:55:78:83:17:19:34:50:
75:01:a8:e4:17:65:37:f9:7e:91:b1:5e:da:25:24:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:62:1A:1B:99:3D:B6:5C:0D:9F:C9:F0:43:55:59:72:40:DF:EE
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d5:f6:3b:97:f3:9e:46:2a:5b:37:29:33:5c:6a:60:65:1a:
74:86:2c:9f:53:b1:8c:64:2f:79:60:4a:bf:63:bd:13:2a:a6:
cc:00:92:92:99:16:8a:72:78:26:ef:fb:88:db:d2:0a:54:dd:
59:33:8e:e0:1d:cf:2f:8f:de:6a:5d:26:ec:20:e9:25:36:be:
d4:3d:cf:52:3a:d2:6f:61:90:df:5d:fb:e6:69:04:40:a5:d9:
50:4d:77:00:94:5f:f2:46:ec:9a:45:73:f4:25:c7:b8:db:04:
c7:db:6e:c2:c9:1c:85:ea:52:85:a0:d5:c7:e0:ed:29:10:4b:
ed:c6:9d:3e:08:d2:aa:00:88:41:80:0d:31:21:03:6b:f6:5d:
9d:e4:7f:92:a9:68:be:84:cf:ee:a4:78:88:88:a9:26:a3:ce:
37:bc:a9:58:92:ac:48:5a:d2:7b:eb:01:17:8e:9c:98:5b:f1:
4c:4f:f1:00:b6:00:f5:98:36:8a:e1:78:05:e7:69:36:c1:ff:
7e:99:49:24:b6:a4:e3:11:52:54:33:ce:48:13:80:c6:1e:1f:
b5:b8:1c:50:11:13:98:16:51:b5:26:e6:d7:fd:cf:e2:f1:41:
14:42:1f:7e:50:6d:42:ac:38:b9:43:25:4e:36:3d:1c:c0:1f:
dc:7f:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:27:58 2025 by rpki-client