Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier: xKSGr+B+rEmLbAThsios1YyEiv1sRh0oPS8YA1fD6y8=
Subject key identifier: 36:04:FB:BA:F4:D5:5F:95:D5:A9:62:D9:D8:37:C6:C4:62:9E:77:FA
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 019A503DDCD335FFD6A818F57212941B7DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number: 08BA
Signing time: Tue 04 Nov 2025 19:00:22 +0000
Manifest this update: Tue 04 Nov 2025 19:00:22 +0000
Manifest next update: Wed 05 Nov 2025 19:00:22 +0000
Files and hashes: 1: 4F9izwsHHxNkuKU97mIzesCX1fA.roa (hash: 9EEtKc3sBCyfxrwHugYM/2yhW3k3q6DEwjqGSNZdJ9g=)
2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: Br4tYu3EdU9wu71Y78XWAKv6TQtSCHF7O43M0GRx28U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:dc:d3:35:ff:d6:a8:18:f5:72:12:94:1b:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Nov 4 19:00:22 2025 GMT
Not After : Nov 5 19:00:22 2025 GMT
Subject: CN=3604fbbaf4d55f95d5a962d9d837c6c4629e77fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:18:49:e1:5e:90:25:1b:76:5a:f1:e7:7f:
bb:f8:cf:c7:ef:8d:6a:d6:9a:1c:40:4b:62:fd:02:
68:a4:48:41:ad:bc:93:3c:a0:60:b3:05:88:ce:d6:
40:53:2b:c4:13:f3:9b:d1:1f:ad:a2:b5:08:58:42:
de:c2:88:87:92:f9:b0:b4:2f:2e:ec:d7:b4:f8:45:
f7:2c:b7:94:7a:86:d4:7b:a7:53:eb:b3:37:cb:2f:
b0:26:01:16:f3:ea:9b:c5:5c:60:73:a1:a7:5b:bc:
eb:83:72:fb:e3:de:fb:09:13:a1:e5:b3:0d:96:8e:
83:51:2a:96:fb:04:07:b1:d3:13:39:74:35:0f:84:
83:af:3a:65:4e:a6:98:22:15:73:b0:af:59:b1:c8:
58:93:95:b9:93:3b:06:87:c7:70:58:f8:d4:1a:7a:
36:c4:79:09:1a:fb:92:fa:19:ed:1f:7d:d0:58:81:
1d:e2:e9:c4:b8:0d:7b:40:5b:6b:73:74:75:e6:54:
df:a2:af:8d:5d:e4:4e:b5:1d:6f:8e:46:99:39:08:
75:33:af:72:7e:a6:63:66:5f:0e:ff:74:07:97:80:
49:a5:d5:ff:0d:b1:05:4a:74:dc:b0:43:69:aa:5f:
68:7b:f7:de:17:e4:0d:32:ed:87:b9:1b:8e:4c:2d:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:04:FB:BA:F4:D5:5F:95:D5:A9:62:D9:D8:37:C6:C4:62:9E:77:FA
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:ea:86:ce:e0:0f:09:3f:9e:69:c9:00:5e:4a:0c:5e:e4:
5b:11:98:28:57:7e:27:7c:f4:8a:06:60:5d:80:2b:38:20:ec:
fe:a5:f0:ff:83:8e:2d:a4:76:a3:16:00:a5:38:de:c5:08:f7:
cf:c3:61:83:49:c9:08:8d:11:f2:87:f1:45:2b:4f:90:f4:94:
f0:d0:e1:2d:9a:fb:2f:98:b4:6b:e3:8a:ec:6a:af:8c:bf:4d:
23:37:c1:fc:dd:9b:6a:a7:27:e4:7a:7c:5c:9c:3e:27:e9:74:
a5:45:a1:e0:6a:0f:b9:d1:34:62:4d:b3:2a:a6:da:7a:87:07:
11:19:44:22:ed:24:79:14:2c:f7:c7:bb:c3:7e:e3:0d:e4:93:
ba:82:6c:d8:b1:65:ee:fb:05:fd:69:7e:8e:03:de:cd:57:5d:
82:27:1c:bb:20:43:79:87:d9:91:40:cf:b9:78:6c:77:a2:05:
f9:a7:d8:9b:bc:93:d1:cf:31:74:b1:5c:ad:79:5a:35:5f:18:
b1:f4:bb:53:11:1d:f1:24:46:36:ed:d9:11:72:78:d7:aa:37:
bb:42:40:55:89:26:f3:44:0f:2d:09:e9:25:dd:09:31:fd:86:
3b:30:a4:3f:23:aa:0c:7e:b3:85:1c:b8:b7:b6:cd:62:39:0e:
c9:c2:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:33:17 2025 by rpki-client