Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: sPRZAJX7CLqrS2EE9VPn74KpXqQx3VMhHUrByG17z18=
Subject key identifier: DB:F2:D9:41:37:95:96:B9:7E:73:EE:8F:5A:3B:02:E8:9C:BC:55:5A
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019A221BD04F4938CB4ACBE741A36C14C140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 20:00:39 +0000
Manifest this update: Sun 26 Oct 2025 20:00:39 +0000
Manifest next update: Mon 27 Oct 2025 20:00:39 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: PHGv-iP3-GV5PUVRHcEuKvBjePw.roa (hash: 7jlPPnbCBHtnfInB0g3T4zwfv1LlUHpXKaShvtDGxfY=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: TQsp+Cho/eJpg8u9zzzcTy7yp20TG16BpNXCX94N7p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:d0:4f:49:38:cb:4a:cb:e7:41:a3:6c:14:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Oct 26 20:00:39 2025 GMT
Not After : Oct 27 20:00:39 2025 GMT
Subject: CN=dbf2d941379596b97e73ee8f5a3b02e89cbc555a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:23:11:cf:83:75:a6:40:b3:b7:58:e6:e2:
f3:e4:75:54:c3:53:8a:27:81:40:69:9f:c3:ab:72:
1b:00:05:14:25:11:dc:c9:28:18:39:71:5b:23:c6:
ec:f4:f5:48:d9:09:f7:f6:f0:0e:83:dd:d0:0f:c7:
3b:d5:16:d1:d3:71:89:ba:4e:c5:87:63:13:b4:24:
93:5e:29:e6:55:e0:3e:a5:88:53:7e:6b:38:e7:83:
c5:fa:7b:2b:0e:a3:c4:b2:3d:1e:09:10:23:f5:60:
a4:88:54:a6:96:6e:74:2a:0c:aa:9e:c4:21:3a:25:
95:82:d6:ba:e8:27:22:20:21:b7:7e:45:26:f1:c6:
93:e2:cb:66:aa:b8:e3:55:75:b2:d1:4c:2c:3d:a7:
5a:b9:ad:eb:dd:d5:70:c2:54:f3:1f:36:1a:5e:a1:
03:2e:86:e5:a8:9c:f0:2e:13:f5:7f:cc:53:cf:3d:
f8:53:47:13:fe:ef:7c:0e:2d:4f:ed:e0:73:ca:d5:
68:bf:a5:3d:ad:b4:c6:dd:c5:99:e9:20:19:51:d0:
f9:f8:c4:df:12:d9:3b:a4:fb:61:e6:5f:88:13:b3:
1e:c4:ce:b0:19:d1:7a:9d:84:e3:2c:39:6c:d3:2e:
90:44:7f:5b:5e:cc:ba:6f:1b:05:e1:3c:6c:79:a6:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F2:D9:41:37:95:96:B9:7E:73:EE:8F:5A:3B:02:E8:9C:BC:55:5A
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:87:25:1e:e5:d4:a2:32:9b:12:0e:6a:2f:63:c3:55:bf:
fe:42:d4:69:f9:06:1c:5d:00:68:0a:1d:5a:85:81:5a:4b:11:
db:ad:b1:ab:7d:71:c2:b9:55:76:7f:b6:03:9e:55:77:b0:61:
fb:97:d8:2c:08:38:e2:f6:dd:cb:ff:f8:ce:4e:8e:a3:86:d9:
3d:22:e3:b3:75:a6:45:94:52:fa:98:33:78:0d:41:a1:64:46:
9c:fc:2c:4c:16:51:64:a2:d9:6b:60:3c:45:f1:25:73:c1:9e:
77:32:c4:39:d0:eb:e8:ae:d9:cd:f4:4d:f7:df:35:5c:0e:0b:
4f:ff:c4:96:5a:1d:6f:38:81:1c:47:39:b0:0a:9d:92:d8:03:
07:cf:f2:be:23:a4:09:29:50:b0:2c:2e:8d:0c:06:0c:a1:5f:
30:41:30:5b:73:f3:03:a8:46:65:87:da:75:3d:d3:41:b4:2b:
cd:2c:49:13:0b:92:dc:3d:5b:47:5f:22:9b:dd:63:4f:5d:82:
5f:de:2f:2a:bf:19:6b:60:b0:76:56:75:1e:ba:74:85:9c:24:
a0:c4:c9:33:a0:3c:11:2b:1e:5f:a3:26:a5:54:8a:b0:93:d8:
d5:74:76:0c:7a:f0:a5:5e:38:15:94:cb:07:74:cf:26:de:04:
0b:da:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:32:44 2025 by rpki-client