Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: DyX6cYnypzkdWIDmJV/Jv8uN8fdJ2Vc1JSN3gZHdiDE=
Subject key identifier: F0:A4:CE:D7:AE:DA:8A:EB:93:9E:51:A3:06:A1:94:BF:BE:8C:D3:5D
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 019A4F62E0F386F0BB0470DE38BB20D41D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0AF8
Signing time: Tue 04 Nov 2025 15:01:11 +0000
Manifest this update: Tue 04 Nov 2025 15:01:11 +0000
Manifest next update: Wed 05 Nov 2025 15:01:11 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: ZKeGkQWkhS6KGPIGBD3XBxFVrIhHgLf9mtbcdOpspxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:e0:f3:86:f0:bb:04:70:de:38:bb:20:d4:1d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Nov 4 15:01:11 2025 GMT
Not After : Nov 5 15:01:11 2025 GMT
Subject: CN=f0a4ced7aeda8aeb939e51a306a194bfbe8cd35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3e:7a:34:13:b3:87:8c:7e:99:7d:c7:ed:78:
52:0a:5a:95:2d:a3:cb:7c:20:33:5c:83:f2:1b:0c:
4d:f5:00:42:ea:0e:9a:b0:b6:1f:2b:aa:c0:21:a1:
ec:a2:ef:3d:85:57:01:d6:d9:8e:69:f8:12:13:09:
73:89:40:48:d5:98:6f:43:3d:f5:64:7b:38:5a:87:
7b:df:45:53:f9:e3:e1:63:09:8f:3b:c7:b9:7b:fa:
16:40:02:8b:80:c3:b8:3a:8a:18:55:2a:1c:d3:d6:
19:d8:f1:f7:68:da:01:e4:4e:7e:90:2b:d6:6b:22:
b7:79:2f:be:8d:f6:d7:2d:65:7f:dd:0d:03:9c:82:
0c:b1:bc:50:95:a6:17:5e:c6:e3:30:38:28:7e:ed:
03:bb:37:da:e8:63:f2:0d:3d:38:ff:9c:87:0f:15:
c4:7d:26:2e:45:3b:e7:22:47:56:97:75:6d:d5:9d:
52:86:6d:9a:03:49:e0:75:74:6a:de:76:a8:5c:d0:
92:11:7b:d1:02:58:37:ec:85:50:83:86:fe:44:47:
79:c9:a1:33:3e:94:ef:8d:1a:79:04:d7:80:26:85:
62:30:0f:89:a3:2b:ee:be:4e:1d:06:b2:46:45:10:
4a:6e:bb:2d:a8:3b:de:32:05:7a:1c:01:d7:7f:3a:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:CE:D7:AE:DA:8A:EB:93:9E:51:A3:06:A1:94:BF:BE:8C:D3:5D
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:90:57:3b:02:f8:cf:be:a5:6d:eb:b8:43:d9:09:01:ee:00:
71:a5:32:53:8c:1a:fc:b7:92:3c:e5:3c:4d:fb:c8:b5:4f:80:
31:51:33:7b:a6:4b:88:da:f0:0a:0a:72:86:7d:41:74:65:64:
51:41:0c:e6:94:d1:0c:59:7c:30:47:32:ff:1a:0e:f8:4a:40:
04:2a:77:2c:c4:73:25:40:93:32:cd:6c:6a:9e:3e:15:56:5f:
36:5a:17:8e:3d:29:f3:77:34:2c:ff:3b:cb:8f:d8:08:a4:02:
2c:fd:f0:68:57:bd:89:6a:1d:40:49:ef:e7:7e:bb:1c:7d:04:
f6:4d:e2:c1:ad:5c:d6:42:f0:0a:1c:22:b2:62:ee:1d:b6:7d:
15:dd:1b:bd:c1:ad:2a:d5:12:69:a9:4d:4f:34:70:69:b9:7e:
8b:be:17:18:60:14:8d:16:0e:6e:aa:2a:e4:75:91:d0:6d:e4:
8b:72:3d:45:26:c5:a0:67:f3:d9:10:20:89:72:c8:8d:1b:7f:
00:71:d8:7e:52:d7:67:d3:99:c5:bd:38:d9:4a:1e:56:8e:55:
a2:a6:dd:61:10:f2:6a:05:6c:a7:6a:c0:aa:9d:56:e0:81:75:
2a:2f:ae:1f:50:63:49:89:dc:fc:53:ea:c4:f4:fd:3e:b8:80:
cd:63:45:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:41 2025 by rpki-client