Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: RHMylsaR2OiwgoPeGX6hRIcE23JxUW3OiWezTfg9T5E=
Subject key identifier: E0:12:4B:8F:6F:50:E9:7D:7E:E8:91:E2:2A:6C:F1:AD:99:DB:08:BB
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 019A4E4F6F1DE56901881A201A4E75E46908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: LsR5OcLI6gweexv7IGg_v67BF8g.roa (hash: wQT4g6ONPKKCv+h71REBPVqXb0/wIS8oFMXQ2jJwDUM=)
2: agUI1vHmqHIc2nUx-x5wLY_TV_A.roa (hash: FA12851IZb0A3QT14G2l2dek6vgakWfjtEihLLMc5Fo=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: 39ox3x+Mf7z7skA7iYUCg9Em0IXcyQUliO2lUENMgDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6f:1d:e5:69:01:88:1a:20:1a:4e:75:e4:69:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=e0124b8f6f50e97d7ee891e22a6cf1ad99db08bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:c2:0f:21:57:8b:89:dc:a0:b1:8b:24:a9:
49:4b:f3:80:47:99:04:f9:1d:6f:8f:5e:dc:8b:1f:
d7:96:33:82:bd:fb:f6:75:7e:e3:d7:76:68:28:c9:
a6:0f:d4:2e:ea:9c:76:ed:77:39:f6:04:9f:92:63:
7f:25:cd:f2:6c:31:e1:52:9d:63:d9:ef:21:ac:9e:
6a:f2:2f:64:66:55:c9:be:0d:f9:8e:9a:84:f4:7a:
c2:39:02:e4:eb:12:d4:18:2e:52:08:74:f4:17:52:
04:04:41:83:53:97:85:3d:af:0f:e5:68:d8:47:cf:
47:8f:e2:06:e7:b5:40:4d:36:dc:da:4f:d7:af:30:
2c:17:94:9d:a3:8b:8c:e5:bd:13:26:99:2e:a5:7d:
68:85:4d:f0:42:69:30:03:5f:3d:47:3c:7a:b7:f9:
46:88:9d:de:0a:0f:35:39:d5:67:7c:e0:7c:0d:a7:
32:2d:37:c6:71:c2:e5:a4:33:9a:f4:5f:8c:70:0c:
ba:76:a6:3b:a1:27:bd:12:f1:14:ae:22:23:36:57:
7e:b8:36:0a:97:76:6d:c4:04:d4:9d:30:de:d9:46:
6c:ea:5b:fa:c7:7e:65:b2:d7:b7:49:88:03:2b:0a:
f8:50:7c:4b:07:54:a2:0b:f8:d0:3d:cd:2f:02:22:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:12:4B:8F:6F:50:E9:7D:7E:E8:91:E2:2A:6C:F1:AD:99:DB:08:BB
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7e:fc:da:be:5c:93:9d:19:ee:7e:f2:4f:6b:46:c6:c0:f1:
d9:00:1b:47:3a:02:35:d9:8e:77:c7:39:59:55:d9:32:63:6c:
3d:45:ab:ac:0b:ca:80:ea:75:1c:78:8e:f4:19:eb:ca:31:5b:
f6:a6:de:64:c0:08:75:2d:8c:ed:24:5c:aa:b1:3a:c7:a6:f4:
49:1b:96:c2:59:5f:d8:93:09:8a:da:59:6d:c9:55:03:0f:81:
00:a7:e6:58:3a:d3:1e:6c:24:a9:c8:ee:58:5f:19:7d:5a:59:
4b:df:e4:21:d1:a3:a4:94:fc:49:87:93:f8:26:77:32:ed:a6:
c2:01:b0:ff:59:a8:84:76:ee:6a:56:2e:c8:64:37:f2:23:b7:
cf:07:4b:ae:b0:ec:09:c8:02:f0:cf:8a:14:56:e0:19:5d:67:
a5:71:1c:e4:75:cb:e9:37:e6:70:46:d7:9e:a0:9b:cd:c6:96:
5e:53:48:02:9c:86:c8:77:b8:9d:5f:b9:42:db:39:ed:4a:28:
77:07:c6:c5:05:7b:ce:54:8f:22:6c:e2:f9:52:e0:cb:5b:17:
09:95:99:06:18:32:ec:b0:51:1f:27:b4:38:cd:30:ee:a8:5d:
05:3f:75:fa:25:7a:fe:73:c3:a5:50:ea:7a:3e:26:e9:1a:01:
73:49:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:57 2025 by rpki-client