Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: jwE/sEgw0vonvzfFoHtseI79CgyL3fN0DODaf7eKG0M=
Subject key identifier: BC:33:73:87:1B:7D:84:DA:7E:AF:19:90:AD:2A:F6:95:57:53:ED:02
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 019A51876E7E4039C1CFA592C263EB9E38B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 1403
Signing time: Wed 05 Nov 2025 01:00:21 +0000
Manifest this update: Wed 05 Nov 2025 01:00:21 +0000
Manifest next update: Thu 06 Nov 2025 01:00:21 +0000
Files and hashes: 1: KgttFz6IodgLZeLta7RLneUK6Ro.roa (hash: IYP5zin82ggYoVWQmz/dnK+iP1pdsQlzD5cbI7kYfRQ=)
2: T1_HIEmvBSvtxZPEKcCF4aZsCPs.roa (hash: 0CEooqGIOmFXehL8CMLN24SE73s+yk1wsCLjJu3HBUc=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: LdrsuvXmz7WxT2qSGA9fAT6CvCD3QIXVJBdinPBMmHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:6e:7e:40:39:c1:cf:a5:92:c2:63:eb:9e:38:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Nov 5 01:00:21 2025 GMT
Not After : Nov 6 01:00:21 2025 GMT
Subject: CN=bc3373871b7d84da7eaf1990ad2af6955753ed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:de:94:0f:c1:af:fa:0a:34:86:e3:89:2b:
ce:da:80:a4:2b:56:1f:e8:19:a1:83:5c:d6:0d:96:
7d:8b:f8:be:0d:e6:dc:2c:e9:92:f9:41:b8:08:eb:
63:6a:54:ab:7f:fc:6e:f5:cf:f0:13:23:a5:4a:b9:
ca:95:11:75:a0:4a:78:83:9d:45:d2:ae:47:fb:2d:
9a:a2:25:06:02:20:68:80:6f:7e:80:b0:5d:ed:42:
f3:a5:ae:82:c3:b3:e6:d9:0b:1d:82:33:e9:e5:82:
55:e8:19:1a:6c:3b:1c:cb:d2:1a:ec:f2:b9:38:c9:
d4:1c:3c:8e:44:e3:02:b5:0a:c2:3c:51:57:5c:9c:
e6:78:d3:cf:63:ae:5c:0f:c4:d5:c0:1a:ff:84:7e:
2b:1d:19:04:3b:b7:e4:5f:36:68:15:a6:2b:62:d1:
1b:86:64:8c:f9:c3:71:12:48:16:ef:dd:4e:f4:81:
b3:40:ad:9b:ce:a6:58:ce:45:06:cd:10:dd:e2:34:
82:5e:b3:39:65:63:ef:cb:61:7b:c0:aa:f2:ef:21:
e5:3d:57:00:c4:f9:4f:01:bb:13:16:47:c7:fa:28:
72:7b:97:05:3b:85:12:32:30:cb:a6:c6:0a:2d:71:
f0:36:d1:e2:85:e7:f0:2b:8a:17:bf:c4:02:bb:a9:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:73:87:1B:7D:84:DA:7E:AF:19:90:AD:2A:F6:95:57:53:ED:02
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:98:8a:44:56:4b:e3:ec:af:ee:26:b4:fe:f1:8e:d9:ae:90:
dc:d5:96:7d:f4:ef:5a:67:79:2f:83:50:6b:00:48:a5:4c:16:
8b:8f:00:56:16:c6:c0:05:4d:c9:6b:93:15:4c:28:e8:d6:48:
cc:bb:96:1c:32:b3:d3:c7:fd:ab:34:cc:e6:70:09:21:05:b0:
c2:47:2e:a3:d9:47:9b:16:7a:e6:b7:87:54:3d:02:6f:17:48:
fc:57:d7:da:87:44:09:05:e5:26:e3:d9:50:39:ff:35:e4:23:
41:21:d0:ba:15:e5:bf:a3:65:9f:db:0f:cc:87:c1:dd:fe:e6:
23:2e:b7:66:8f:ca:26:f6:f7:46:6d:44:8f:99:55:e4:04:62:
b2:40:ef:69:fa:43:9b:e8:05:86:ed:c5:91:51:bc:51:54:5b:
64:a9:d2:95:52:d5:57:7e:8c:da:1c:f5:04:a6:ee:ba:d3:22:
b7:34:cd:97:ea:fa:43:af:d7:dc:c6:c1:1e:36:9d:fd:82:82:
07:77:89:83:29:30:67:1f:1d:08:30:a2:f3:b5:d6:3a:0d:46:
9e:b5:48:93:5e:d0:3c:76:9f:8e:00:82:01:ae:8b:17:3d:87:
2e:9f:d9:50:0d:94:66:61:03:45:cb:7b:7b:b5:a8:16:f4:86:
6b:dd:99:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:49:21 2025 by rpki-client