Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: RAxOoJCq9HeaD5jjxrytm1kjjdtTPB3fWNVgvWNijcU=
Subject key identifier: 19:50:47:77:EB:B8:F9:DD:A1:A2:7A:E1:49:62:A9:43:17:CF:8F:63
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 019A522BF67A00DF86DAE63465DC61497A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 1012
Signing time: Wed 05 Nov 2025 04:00:03 +0000
Manifest this update: Wed 05 Nov 2025 04:00:03 +0000
Manifest next update: Thu 06 Nov 2025 04:00:03 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: J86jkAZCUcNfoKp/7q0ow+8mtA4fhpEz5oWbQ8EB9Iw=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2b:f6:7a:00:df:86:da:e6:34:65:dc:61:49:7a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Nov 5 04:00:03 2025 GMT
Not After : Nov 6 04:00:03 2025 GMT
Subject: CN=19504777ebb8f9dda1a27ae14962a94317cf8f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:4f:fa:12:a8:c3:10:7b:1a:2a:69:38:b8:
63:eb:b7:79:9a:54:d2:6d:fc:0f:cb:db:e4:5a:46:
bb:49:54:b3:a4:61:a3:a0:7b:b0:0e:f2:da:a4:a8:
c5:a5:ec:d4:ca:bf:88:b0:9f:19:c2:d9:0a:b2:0b:
3c:9a:28:36:04:fa:a3:3d:3a:89:0a:23:c3:71:dc:
51:f5:30:05:d1:b4:38:dc:c1:3f:0b:3c:b0:c1:af:
84:fc:be:85:37:1c:3a:14:71:3c:04:41:48:cb:5c:
07:41:40:e7:fa:21:80:03:fa:10:a7:64:52:8b:c8:
08:08:57:b9:44:35:ec:43:0c:f4:cc:f2:67:a5:af:
90:e0:c8:c3:d8:af:38:bc:87:8a:62:c4:2d:59:17:
de:d4:b8:f8:7f:16:15:13:f7:21:98:bc:12:65:81:
d5:34:8c:e9:6e:a5:0f:ae:d8:71:7d:70:0a:bf:7c:
ce:09:4c:ff:c8:a4:d1:e1:9a:86:44:5f:03:9c:d0:
57:38:96:e7:89:81:bf:40:6e:c0:0c:5b:7f:c3:e0:
ab:b3:f6:b8:79:01:82:5f:71:d2:a6:76:a1:31:2d:
c8:b4:92:0f:1d:26:9c:50:03:85:c2:ce:5d:d8:58:
c2:aa:fb:d0:9d:74:5a:31:e2:9f:bf:d4:74:0c:ce:
a3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:50:47:77:EB:B8:F9:DD:A1:A2:7A:E1:49:62:A9:43:17:CF:8F:63
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:67:2b:51:86:9f:2b:26:55:d2:75:8e:6c:82:21:96:37:85:
23:33:a6:2a:8d:27:d2:3f:18:97:1b:1f:c5:34:b5:00:4e:d6:
b4:f5:70:19:6f:5e:58:6a:ef:f4:a2:18:e7:e1:27:ce:56:2a:
6d:c6:f9:8a:fc:fd:02:40:ac:3b:f0:7c:ab:6d:d9:52:a9:89:
81:b7:28:71:f0:ed:37:f7:27:81:c2:52:b8:ed:a4:cf:cf:f9:
08:64:36:e1:44:a1:96:12:9e:c7:d2:a4:e8:9b:43:43:2b:1e:
11:83:2a:6f:b0:01:4c:7f:74:b6:3f:ea:47:45:ea:19:e0:23:
a8:f6:38:3a:d4:41:2c:28:76:2f:ef:5f:25:53:ee:b6:03:e0:
57:f6:40:cd:06:19:89:2f:71:44:90:f0:04:35:e3:8d:3b:00:
ab:8c:3c:6b:d9:2b:f5:d5:01:ec:e5:b3:d0:92:1b:39:c1:52:
75:75:8a:b4:e8:ab:ce:a9:32:49:62:92:41:e6:06:78:b2:b5:
e6:45:48:8e:f1:06:58:3c:79:f3:5f:6c:37:23:5d:ab:a5:95:
27:24:a0:3b:05:e9:aa:95:4a:09:27:63:ed:93:be:59:bd:4e:
8b:90:3b:c6:89:20:8a:b6:50:a5:3e:22:a7:73:22:6b:79:12:
a3:9b:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:25 2025 by rpki-client