Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: x8JqV5K1vb2HuDCaNseqYpBHu1RG8wGHVOBYAcSBKbw=
Subject key identifier: DA:14:10:D8:EC:4A:5E:B2:B8:AF:77:B3:1D:29:18:55:47:A4:7F:95
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 019A4EF51DA7D43E8757E8FFB226AD62D5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 1674
Signing time: Tue 04 Nov 2025 13:01:18 +0000
Manifest this update: Tue 04 Nov 2025 13:01:18 +0000
Manifest next update: Wed 05 Nov 2025 13:01:18 +0000
Files and hashes: 1: oS0baXfZNGyY1D73J2ZM4dbyUEc.roa (hash: Etkc7DGAN6PIaAjm/aO1aFavjNa8wspYkBLe0PvWnjU=)
2: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: RJNKvLCrwTNt9oqHjYlY2FitX47jEOaS7/azvHJWzvo=)
3: r-zsasbUjJEaU71e8kbXi99TukU.roa (hash: gv3XffgL881eMS9I6xI/He9cs/3EXg91NLNFK1oWx0g=)
4: zeGJY-nsOInvvd3T0IdWJNf1k28.roa (hash: p/aKgF7SzmiRfhNkcpLsPCyw0fGJ04jvtIbzFNx9GZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1d:a7:d4:3e:87:57:e8:ff:b2:26:ad:62:d5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Nov 4 13:01:18 2025 GMT
Not After : Nov 5 13:01:18 2025 GMT
Subject: CN=da1410d8ec4a5eb2b8af77b31d29185547a47f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:e5:62:bc:35:a3:b9:48:f9:40:a3:76:7a:
61:2c:df:a4:f2:ac:e1:bc:4b:a1:c9:64:c2:15:8a:
81:18:3b:08:7f:d8:73:6b:ad:49:cb:6a:cc:c6:8b:
ff:dc:23:14:2b:c8:61:82:40:2b:f9:50:b4:de:cf:
28:ef:cc:74:7e:8c:88:82:29:6c:82:45:de:96:e0:
db:7a:dc:59:9f:46:a3:d4:c9:11:43:3e:3f:5b:b2:
49:c0:3a:bb:6a:4f:90:94:18:5e:e9:0f:af:ba:69:
7d:50:01:2d:f0:08:4f:72:f4:71:00:f8:b2:d2:19:
72:23:7a:fc:66:3e:60:e3:16:3c:fd:7c:d2:ac:5a:
04:c8:ae:05:0f:22:dc:6f:c2:a7:32:37:3e:70:86:
3a:20:e9:69:38:28:9b:a2:a0:cf:48:d9:de:e4:4b:
10:34:0b:46:7d:be:b9:48:78:c5:04:de:49:76:c7:
d3:96:3d:89:de:55:d2:13:ba:dd:94:54:d8:bf:30:
9c:1c:58:79:17:01:e1:fd:1a:a8:97:56:77:b2:cc:
2c:17:4c:db:34:79:a1:33:73:03:eb:a2:97:86:68:
c9:4b:34:32:f1:4a:2e:11:3e:c2:9c:1d:a0:0b:1d:
0f:53:7b:60:79:43:9c:6e:2e:81:e7:9f:db:d8:0e:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:14:10:D8:EC:4A:5E:B2:B8:AF:77:B3:1D:29:18:55:47:A4:7F:95
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:95:e1:c2:e4:80:87:4c:da:bc:40:74:3a:a7:df:67:89:2a:
40:1a:5d:ca:d9:92:c3:45:5e:e7:7d:52:55:7f:26:19:29:3b:
e6:b1:f1:ac:6d:fd:4f:86:ec:0a:e8:5c:f3:6c:74:16:28:b6:
e9:fa:0b:7e:64:94:9a:f0:90:73:a0:f5:30:d3:49:70:da:3f:
8d:d8:01:bb:a7:e4:5d:57:f9:4a:5c:01:3e:27:5f:e3:c9:98:
23:c5:f4:94:32:dd:8d:bf:a1:85:fc:25:e6:e7:aa:84:3a:e6:
24:92:41:cb:94:64:4b:2a:0b:cc:02:07:f5:cd:b3:91:79:54:
27:2c:80:74:91:45:57:73:57:66:78:dd:30:4e:86:99:5b:d4:
f9:a0:23:7a:68:40:a2:ab:9d:c3:cc:0e:f6:02:da:59:d5:bb:
a7:3d:52:df:b4:d0:db:b6:69:4c:d6:38:c3:c3:90:e5:76:3f:
e2:48:e8:15:0e:87:f3:b4:fc:9f:ea:02:a0:1b:ef:ed:21:62:
57:6d:df:8f:7f:e6:a8:d3:58:a5:93:68:8a:1e:57:0f:42:b1:
b3:f1:bc:74:df:0d:9e:bd:84:63:10:76:f3:b2:5b:60:57:85:
18:07:80:b4:fd:e0:57:67:d3:97:1a:ad:13:ad:a9:17:5c:49:
53:f0:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:30 2025 by rpki-client