Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: 3GUdS3CARSw6uMTCM/L4J7STaKkYrL0nIuQIxqB6qsY=
Subject key identifier: 5B:E2:10:65:13:2B:85:96:B6:AA:B9:3F:9F:60:AE:0D:70:BE:DE:CE
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 019A50E3D154A7040BFE2669249EE761B296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 019C
Signing time: Tue 04 Nov 2025 22:01:38 +0000
Manifest this update: Tue 04 Nov 2025 22:01:38 +0000
Manifest next update: Wed 05 Nov 2025 22:01:38 +0000
Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: 9u3tK50c5cVHbRx3MB7hvKBJDUwwtyshfdjZ4KbrfeU=)
2: iuZqfYD0hiTIvYqwWHAL_dTt-d8.roa (hash: TADQbHhC3NVuwnA1AHCcNT5GSSVPXnhWpWfVu/iqF94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:d1:54:a7:04:0b:fe:26:69:24:9e:e7:61:b2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Nov 4 22:01:38 2025 GMT
Not After : Nov 5 22:01:38 2025 GMT
Subject: CN=5be21065132b8596b6aab93f9f60ae0d70bedece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:53:55:d8:23:41:41:ed:f4:90:0e:6b:b6:
6f:57:62:89:df:26:9a:b4:65:c8:9f:93:e4:a3:c0:
1a:ea:45:c2:b9:47:87:2e:1e:d3:28:1e:16:f7:93:
3c:f2:77:55:4d:59:59:36:b5:d3:12:0f:ce:f5:bd:
56:a5:80:87:66:b2:5b:91:80:08:53:6c:4c:71:e4:
c9:29:a0:64:06:a9:3e:eb:8a:1c:8c:43:c1:51:9e:
55:d2:f8:52:7d:c2:a3:5f:19:b7:6d:27:87:1e:b1:
f2:67:61:c8:4a:90:7e:e5:9b:d1:d3:e5:54:3e:43:
64:89:43:95:50:de:59:d5:fd:46:35:1c:3a:7d:6a:
cb:81:68:87:ce:04:85:c9:e0:9c:85:b6:06:19:43:
60:57:db:56:65:6a:e6:9c:d3:e4:5f:d8:04:8d:6c:
d2:4c:d2:28:e3:4f:81:c1:73:2e:c2:fc:1d:bb:2b:
7d:1f:2a:8c:5f:63:a1:4f:91:0d:7b:f9:b4:87:38:
d4:9b:0d:f6:d9:27:cd:8a:68:3f:94:1e:71:f6:45:
aa:a2:06:98:ae:db:0c:e4:b8:fd:80:02:50:ea:58:
d6:7f:ab:a9:71:1a:00:b0:72:cc:f8:68:6c:79:e1:
e0:b7:dd:64:65:72:dd:66:02:1c:de:3f:0a:da:3f:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:10:65:13:2B:85:96:B6:AA:B9:3F:9F:60:AE:0D:70:BE:DE:CE
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:03:c8:f0:b2:27:a8:42:e8:a2:4b:28:be:eb:90:9a:46:02:
9b:b0:45:17:2a:0b:4a:8f:d0:36:c6:29:54:f9:25:f0:67:3b:
4b:c9:b3:1d:e1:95:d6:3a:81:be:57:c9:47:a3:d3:23:f2:39:
45:97:e3:3a:6c:74:0d:3e:7c:22:2a:07:c7:d3:94:e7:c6:ec:
39:fb:4b:36:45:d3:13:7c:0c:ea:d6:de:50:2d:f6:4e:77:39:
3c:e8:d9:4e:90:80:2c:e5:be:9d:c4:c3:8a:65:aa:59:01:43:
67:32:14:36:9e:22:a9:fb:87:47:0a:0b:d8:8a:11:1a:e0:67:
28:39:aa:62:95:b6:21:bd:00:54:cf:e1:a8:a2:77:72:35:40:
3e:be:d2:fc:a1:da:ba:94:65:94:90:a2:25:f8:39:b2:96:53:
f8:73:28:f5:67:a3:35:a8:63:ed:86:a7:a9:2e:9d:18:a3:08:
a9:62:21:c4:12:a7:bc:58:54:cf:f5:49:60:5e:a1:0c:09:56:
1a:66:90:b2:7f:12:49:29:cc:64:ff:34:af:32:0b:78:75:ee:
23:b7:6b:b0:28:14:3c:14:58:5b:91:fb:c6:ae:ea:4e:8c:92:
a7:58:52:3c:71:51:aa:ad:d1:d0:ff:45:63:54:3d:6d:46:02:
fa:7e:68:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:36 2025 by rpki-client