Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: XssSgQLFA1pORLiEi+uLvgscJKzTbn4vODhdQdDpKI8=
Subject key identifier: D2:26:87:6E:69:C9:52:44:BB:81:A3:EB:32:EB:11:96:19:44:56:9A
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 019A50E41D7D3B0302926C83C235BD3983AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 0B4D
Signing time: Tue 04 Nov 2025 22:01:58 +0000
Manifest this update: Tue 04 Nov 2025 22:01:58 +0000
Manifest next update: Wed 05 Nov 2025 22:01:58 +0000
Files and hashes: 1: LGoIVCfyeg-EZH_cOgrdiy2TPwk.roa (hash: dGCLqqCykyXwmqrTu57eC+iNpUcOeyFsBoySlkBpsAY=)
2: f00necdCYsOtLA09vtcvA-KOmsA.roa (hash: Ln1z19NPMKA7PbsbJsMQ04rbx28+DicO/rDcVFYN3W8=)
3: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: 7d0F6PXZ9znwSgvwSex2EBzSZGOehDyDfN27aw76c3I=)
4: tPirfcovOkq_f6ORw4qTDcBMYwM.roa (hash: YI04iLKTA2ElngcnawjReFNoZnCJvny+G11HRulhdOo=)
5: wCVsvqWRahQ-a8qZpU_P5hfC6fo.roa (hash: zXnXIwQPC/ukVsvs/CWHd4opckhB/IeyNk2RyXjvBzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:1d:7d:3b:03:02:92:6c:83:c2:35:bd:39:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Nov 4 22:01:58 2025 GMT
Not After : Nov 5 22:01:58 2025 GMT
Subject: CN=d226876e69c95244bb81a3eb32eb11961944569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:97:66:8a:ba:d4:60:c5:b2:4b:8a:c3:35:
04:8e:eb:a0:7f:ba:97:fa:bf:44:a7:ad:36:91:0e:
69:8d:d6:9a:9e:7a:54:1d:03:ed:34:96:7f:70:6e:
eb:62:cb:70:a6:7a:86:7f:c1:ca:fa:e7:24:54:1f:
d4:bf:6c:59:82:51:b5:db:8a:12:b2:b2:3e:39:92:
93:ae:f5:97:1c:dc:14:1f:48:94:f7:e6:8d:bb:dc:
b5:05:a2:c8:15:e0:91:54:56:6e:53:e1:89:b8:d4:
ae:bb:69:50:cf:14:0d:a3:38:bd:07:72:d4:3f:ac:
27:19:a6:2d:15:0c:d6:db:99:c3:63:58:8d:6f:a1:
45:ad:e7:64:02:fc:6e:f6:72:bd:e4:97:b3:0c:6a:
0d:ce:4d:39:9f:8f:a9:bb:27:57:c7:e8:46:d9:b0:
2c:dc:87:43:ba:3f:88:f2:3d:e8:1a:d6:d5:85:3d:
b8:8c:35:67:6e:95:3e:f5:c7:81:b8:d7:98:7a:87:
42:9e:84:48:a1:00:40:49:8f:8e:fd:09:0d:9b:fd:
a0:f4:76:a8:58:20:e0:d1:11:6f:b4:26:26:35:6a:
87:ad:b2:05:57:45:52:33:b6:c8:bc:6c:75:02:64:
65:33:12:f8:75:dd:c3:2b:3a:8c:a9:d4:6b:8f:d0:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:87:6E:69:C9:52:44:BB:81:A3:EB:32:EB:11:96:19:44:56:9A
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:da:79:c7:bb:ee:f9:fa:1f:55:b0:44:a5:f5:ac:9a:bb:f1:
6a:0d:d5:24:22:c0:1d:f5:aa:22:ed:c9:db:6f:05:51:f6:88:
23:a6:72:96:b2:82:73:b7:f0:82:02:ea:3a:12:6b:cf:39:d1:
f5:b8:7b:32:d0:58:40:a7:7d:e8:43:8e:e6:b6:2b:b6:5f:0f:
a2:15:83:a9:d2:25:72:de:ec:d5:de:d8:d8:06:18:44:e7:46:
da:fe:4f:93:da:32:99:0d:61:cc:db:6b:cc:53:d2:f7:40:c6:
bb:4f:d4:09:62:85:bf:21:e8:63:66:00:ab:f7:25:f3:06:cc:
f4:e3:28:20:ca:d1:5d:62:20:6a:33:00:3a:f0:5a:15:76:ae:
b0:65:fd:4e:9c:59:fa:88:49:3a:30:40:5f:c7:31:7c:bb:d2:
e5:79:21:e5:59:68:25:88:e7:a7:4c:37:f1:23:65:d9:77:0e:
0f:85:9b:14:6a:ea:4d:d0:20:0c:a2:fd:20:f6:b8:c2:9c:ee:
3a:66:9b:25:1a:06:b9:63:52:37:d2:42:a9:0c:7f:78:f8:94:
e2:e6:08:dc:d7:cd:ba:f1:f1:fe:94:b6:1c:30:6b:2a:49:67:
04:fc:ab:eb:89:d8:d4:47:fc:de:0f:fd:a4:9c:cf:20:ee:4a:
ef:e9:ca:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:26:21 2025 by rpki-client