Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: pEwMjjUiM6/iP9howW2uBDKklE9NHT0qh1iNkC8tALc=
Subject key identifier: CC:14:D7:C0:49:4E:B1:FA:CE:B7:C2:39:6B:8F:DE:A6:84:35:23:30
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 019A2C3193AA8A2E3225072242B6FF25402F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 19:00:37 +0000
Manifest this update: Tue 28 Oct 2025 19:00:37 +0000
Manifest next update: Wed 29 Oct 2025 19:00:37 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: 59YyjKpkXtEWYYqk3uWDOXaFzROLUDIzzU0cjVETmCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:93:aa:8a:2e:32:25:07:22:42:b6:ff:25:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Oct 28 19:00:37 2025 GMT
Not After : Oct 29 19:00:37 2025 GMT
Subject: CN=cc14d7c0494eb1faceb7c2396b8fdea684352330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:43:47:7b:e4:21:3a:8b:97:4a:97:6d:3d:
00:77:a9:fc:ce:8d:f0:4d:d2:f0:b6:d0:74:22:c8:
ce:4d:8c:6b:a3:2e:8d:23:17:e7:c1:8c:a1:1c:9b:
1d:1d:fc:51:b1:f3:4c:8a:3f:18:4f:1a:a6:49:a4:
6d:66:59:c6:f8:b9:d9:1f:43:67:52:84:d4:b3:53:
d0:8b:80:25:b2:52:11:c3:a1:05:e7:f0:2f:5b:3a:
21:bc:bf:ec:49:9b:d1:03:ac:71:60:b3:33:2d:e1:
29:fd:1d:ca:e8:0f:5e:4a:53:51:8f:d9:94:48:e8:
df:a1:f6:3c:06:ba:cd:a4:3b:72:69:c6:2a:6d:53:
f7:a2:5e:5c:de:de:f7:2f:dc:68:a3:53:be:49:f6:
0a:b2:9e:55:b0:46:f2:b2:b1:8c:98:2d:bb:8b:ea:
18:d9:17:ee:03:85:04:66:64:08:14:23:fe:93:44:
ce:a2:0c:c3:6f:61:f7:2c:78:38:41:af:c3:76:fb:
1f:92:93:69:f7:0a:bb:aa:1a:93:1f:37:fc:5f:46:
5d:97:37:fc:f5:21:7c:3f:db:7f:c5:96:9d:24:0e:
0b:4c:21:72:51:ca:30:38:2d:3d:7b:6d:cc:cc:d5:
23:c6:48:69:7a:a0:38:c6:cb:47:79:fa:1b:5f:52:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:D7:C0:49:4E:B1:FA:CE:B7:C2:39:6B:8F:DE:A6:84:35:23:30
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:89:eb:63:c5:bf:5c:44:0c:87:c9:3e:54:f1:a6:73:2b:38:
46:6b:ed:d6:2c:ac:df:f6:a9:91:1a:b1:f7:5f:27:06:dd:09:
1e:07:cc:32:16:56:dd:f4:0b:b1:f9:54:62:59:30:b0:72:d3:
5e:81:77:2a:9a:0b:5b:62:e5:a0:db:ed:7d:34:97:a0:ed:81:
d9:70:f9:04:19:8d:eb:9c:59:ac:18:1b:e2:e5:18:72:08:fa:
27:06:f6:e8:71:b6:ed:ec:eb:99:fc:65:2f:11:08:e6:29:14:
36:fe:a4:3d:08:fd:64:b4:3e:61:61:4c:6a:fa:e8:82:71:26:
a5:f3:63:06:c9:99:d6:0c:60:a7:57:fa:c0:6a:af:17:d8:b1:
9d:b8:eb:06:09:68:f5:13:05:f1:64:df:4a:75:42:cd:49:6f:
a8:63:29:93:ee:b7:3a:35:ff:5f:43:12:b4:b4:b6:1a:4a:2c:
77:3e:0e:16:43:7f:21:a8:7c:c5:6c:3f:08:35:6e:c7:de:c9:
bd:e9:ac:9b:21:c3:ba:73:8a:4d:8a:75:46:9c:8b:e9:35:4c:
f8:16:dc:e3:38:31:e4:04:2b:53:4d:55:37:60:73:f6:72:be:
8f:32:11:0b:07:1d:13:0f:79:8e:79:6e:20:76:bf:fb:6a:c3:
55:5d:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 00:18:10 2025 by rpki-client