Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: ykdKfFcIAbJ1NlTUmzbERF4T7NgE89qOKv0sq+nQVLg=
Subject key identifier: B5:7C:DF:21:44:58:CA:C0:A3:A9:CA:04:8C:A2:B5:02:0D:AB:BD:F9
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 019A4D3D0ECAE000B3F5F5BB82CE821C7735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:38 +0000
Manifest this update: Tue 04 Nov 2025 05:00:38 +0000
Manifest next update: Wed 05 Nov 2025 05:00:38 +0000
Files and hashes: 1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: ieynqUAkTbcs/spjmv5uJ0XDKUH2iABnKwOIY0cCjS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:0e:ca:e0:00:b3:f5:f5:bb:82:ce:82:1c:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Nov 4 05:00:38 2025 GMT
Not After : Nov 5 05:00:38 2025 GMT
Subject: CN=b57cdf214458cac0a3a9ca048ca2b5020dabbdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a3:c3:5a:b4:dd:38:10:e4:fc:cf:de:00:30:
e3:c3:b2:45:2b:22:51:df:06:27:13:e3:5c:c9:47:
ce:fd:14:6f:8a:26:cc:5e:b0:8f:e5:ba:f2:e5:9e:
cd:92:24:c8:b5:4c:1e:62:f9:f0:9d:34:ec:df:f6:
ea:71:1a:67:ba:bf:6d:6e:8a:10:d5:16:ba:91:3b:
8f:cc:6d:87:bf:ff:7e:f2:8c:97:30:92:79:62:a0:
ce:56:35:fa:e6:f7:2f:23:ac:e1:bf:fc:c7:c7:36:
62:3a:60:0a:be:d4:b6:6e:13:48:c3:41:78:74:3f:
62:bc:00:39:1f:4d:a3:85:5f:72:a7:7b:33:3a:eb:
ea:ba:23:41:c2:8b:84:82:7c:0e:9c:bc:70:12:c1:
89:fd:51:88:83:25:85:db:de:57:4d:cb:2d:6a:89:
a6:ea:1b:bc:1a:5a:af:4f:8b:7c:8c:f9:1e:18:a4:
66:d8:dc:02:e8:45:d8:ea:15:3f:41:b3:92:dc:50:
42:a9:15:4f:82:3d:99:7d:a3:e6:2c:5c:c0:99:64:
b2:17:81:21:e6:56:9e:f7:0f:2b:96:6d:d3:af:e5:
f7:a0:06:7b:cd:94:07:f1:ce:67:25:cd:94:4b:7e:
68:87:ea:6f:20:cf:54:f2:a0:7c:c8:8f:f7:e0:91:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:DF:21:44:58:CA:C0:A3:A9:CA:04:8C:A2:B5:02:0D:AB:BD:F9
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:75:87:97:54:e7:53:f8:95:6d:b4:c7:b1:68:dc:99:16:c9:
66:16:30:69:14:32:e7:e1:76:60:29:06:c6:01:53:fb:4a:3d:
86:25:63:ff:ae:95:d2:e4:49:66:d0:7d:bd:89:80:00:2f:93:
0b:19:24:65:3d:1c:65:42:61:8b:fa:b6:32:e2:8b:8b:85:a5:
69:13:a3:1d:c4:a5:4c:36:73:7c:33:1b:82:16:d1:65:bc:ab:
16:94:22:3f:10:2b:fb:11:ae:65:20:dc:60:60:c4:aa:31:f0:
e6:cf:52:64:fa:08:46:63:8f:f5:66:3f:73:d9:d1:76:19:40:
71:6c:69:ae:3d:a9:93:82:69:99:f9:92:42:17:de:46:58:34:
6e:f9:59:3d:cb:d5:30:12:1d:2f:ac:64:ac:60:9a:54:00:b9:
64:60:18:c6:a0:32:4b:c4:a4:cd:a6:5e:87:c3:f1:9a:8a:d3:
0f:cc:95:e3:3a:6e:81:7c:75:bc:3e:52:ec:17:1d:34:25:db:
af:09:44:e8:d6:15:be:18:10:81:1d:c8:dc:1a:d5:27:0f:14:
23:3a:19:fe:98:96:cd:e5:fb:73:65:02:d0:c1:68:7f:27:4a:
f9:75:ec:dc:53:39:4a:ca:97:2e:ba:59:25:f5:22:73:3d:1d:
e5:96:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:27:33 2025 by rpki-client