Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
File: qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft (raw, json)
Hash identifier: uZQZBW8rsHzbCCXJ/O2Vaf6F+rifV+EtyTJ3KrCRMTg=
Subject key identifier: 09:0C:B9:0D:48:E4:6E:12:54:AB:A6:3D:46:13:64:3C:BB:C7:52:63
Authority key identifier: A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
Certificate issuer: /CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Certificate serial: 019A4E8639A79D8D374CEAEB7965FE4B01ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
Manifest number: 0479
Signing time: Tue 04 Nov 2025 11:00:10 +0000
Manifest this update: Tue 04 Nov 2025 11:00:10 +0000
Manifest next update: Wed 05 Nov 2025 11:00:10 +0000
Files and hashes: 1: 5lkgevE67JqLPCJiuIVDQvx8C9s.roa (hash: TbV0l1n+K1FvkmmG4RWk4U+vij9oLV2Tx8NUa3IQ8as=)
2: qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl (hash: o7MeBkFuBZxwCGKTgITwvz5rHb8TNC3n0kZrKKD8fr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:39:a7:9d:8d:37:4c:ea:eb:79:65:fe:4b:01:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e5148b399b53ba52fd68eabdbdf6ad99cc71f4
Validity
Not Before: Nov 4 11:00:10 2025 GMT
Not After : Nov 5 11:00:10 2025 GMT
Subject: CN=090cb90d48e46e1254aba63d4613643cbbc75263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:88:7f:f4:95:bc:6d:ad:86:20:56:82:b1:2e:
78:47:af:c2:c9:d1:0b:62:99:49:c9:f9:00:a2:8c:
78:dc:d4:64:22:b0:c6:ec:2d:7f:8d:37:19:b0:4e:
59:9c:02:2a:1a:6b:68:01:db:3a:a6:7a:c5:6b:ca:
72:c3:ba:e5:af:72:f1:b9:d9:93:aa:63:1f:da:e5:
d0:8f:93:d3:6a:7f:84:ff:27:15:a2:22:1e:80:48:
2a:e3:bf:96:6a:a8:4e:08:1d:68:b6:57:96:a8:1e:
8c:f6:c6:eb:3b:8e:97:dc:94:10:b3:c2:79:73:d9:
63:61:76:93:ee:c8:c2:20:51:95:c1:8f:42:41:32:
43:da:b8:b7:44:b1:22:fe:1d:1d:ec:d3:e5:3a:5a:
62:8f:c9:d9:0d:66:e6:04:d4:c3:9f:01:de:6f:cf:
d5:b6:a7:37:62:1a:ba:42:45:e4:e6:81:66:10:7a:
3a:36:b2:12:f1:ad:33:02:42:fa:21:f1:ad:73:d7:
96:d4:20:c9:87:e2:7e:02:6e:83:35:47:ff:2d:da:
24:8a:e9:41:45:9b:db:d8:da:c6:c0:44:70:1b:a1:
f0:1a:31:d5:5e:f8:74:d3:6a:a3:6f:1b:84:56:37:
9c:8f:53:1b:94:25:4a:19:0c:18:fa:82:94:79:a0:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:B9:0D:48:E4:6E:12:54:AB:A6:3D:46:13:64:3C:BB:C7:52:63
X509v3 Authority Key Identifier:
keyid:A8:E5:14:8B:39:9B:53:BA:52:FD:68:EA:BD:BD:F6:AD:99:CC:71:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOUUizmbU7pS_Wjqvb32rZnMcfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a32b1c-f841-4f5a-9ce4-e734993f11ac/1/qOUUizmbU7pS_Wjqvb32rZnMcfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:c0:fb:bb:16:7d:e5:ca:8c:e8:6a:26:98:a7:89:34:db:
22:25:2d:81:bc:64:9a:7c:00:59:89:03:68:a8:de:5d:aa:54:
87:c1:2c:c4:03:24:ac:17:f7:18:7f:e9:b9:ac:52:53:57:33:
b4:59:f8:c5:77:2f:d4:ef:ab:ce:11:4c:ed:18:23:14:1c:72:
20:b6:5a:00:aa:69:9f:7f:a6:46:ad:73:fc:6e:6e:21:39:21:
ed:e8:a9:27:1d:e1:1e:72:86:a6:52:37:32:df:8f:ec:b3:29:
59:5d:7f:56:c6:f5:f0:79:05:aa:49:f6:d7:98:da:b8:a1:1b:
69:5e:02:91:eb:a0:8c:20:0e:1c:1a:9e:76:86:30:46:df:c8:
17:32:d8:2f:6d:b6:f1:11:68:ac:38:f0:e2:53:94:bf:cf:14:
8d:63:85:f6:f4:1d:dc:1e:cb:13:1d:af:b3:dd:cd:6b:95:46:
07:ae:8a:fb:a6:d7:fa:4e:49:1a:ce:b6:a1:7f:53:99:81:f5:
98:7b:f8:e8:73:fe:da:5a:bd:c5:ae:25:b2:19:d3:d4:65:56:
9f:24:c6:7e:28:1a:e2:9a:a5:5b:f2:7f:8d:f1:91:78:c9:bc:
44:da:1d:b7:f3:8f:92:a1:47:4f:48:7a:58:95:99:d7:a5:e2:
97:59:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:02 2025 by rpki-client