Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: OIcY0nriP14q5ihjP/QeenBw0fJ1sjymgBgTYH5U6Go=
Subject key identifier: 69:CC:A4:4F:92:26:16:D0:66:F6:86:05:06:5B:96:3F:E7:CC:33:2C
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019A4E4FBA70B8B3199B0D72FC7959BD03D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0E26
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: zjP76zeP3KfBZlPDb6wnCL3C3BPqtWa187w9n4ChkYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ba:70:b8:b3:19:9b:0d:72:fc:79:59:bd:03:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=69cca44f922616d066f68605065b963fe7cc332c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:13:11:d3:f6:46:9e:f2:09:82:e1:61:dd:
46:41:fc:2b:0b:93:e7:1d:a9:74:ba:00:f1:83:84:
fd:41:5f:92:6b:8b:cf:68:4a:ce:61:28:13:88:5a:
14:c3:a5:47:eb:a7:e6:6a:cd:cc:75:43:76:67:f2:
54:27:dc:f2:2d:35:d7:a0:ca:d0:29:c6:31:76:e6:
ce:a1:4f:2b:d4:c5:ad:d9:39:56:2a:56:0e:34:24:
48:ab:64:f7:ed:16:c1:bc:1e:96:2b:3d:5b:d9:65:
4b:5b:18:7e:42:ca:8c:91:aa:71:d6:ff:9e:12:86:
df:b9:51:aa:39:0f:0c:ec:7f:76:7b:d7:62:ba:3b:
65:d3:d0:bb:0d:be:45:3f:04:cb:85:df:30:42:1d:
a4:e4:ae:24:3a:9b:74:a5:16:61:02:2a:9a:f4:64:
42:61:7b:2e:de:1b:2a:8e:9e:16:59:67:b8:99:c3:
b1:79:20:65:49:32:b5:46:65:1e:2f:5c:95:54:be:
63:05:0f:83:a0:19:ba:6a:2c:dd:f1:0e:ce:8e:65:
dc:32:90:ad:51:5c:3e:ef:0b:92:45:7f:cc:53:b4:
43:6a:b7:b4:32:7b:e2:42:59:b1:59:3b:cf:0f:4d:
27:5e:2d:14:bf:a2:24:dc:60:ec:cd:b5:38:64:2a:
69:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:A4:4F:92:26:16:D0:66:F6:86:05:06:5B:96:3F:E7:CC:33:2C
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ba:7f:26:f0:a2:ad:ef:e0:3d:27:82:aa:f6:0d:f3:f0:06:
59:67:98:29:75:26:14:8e:65:71:25:ec:ab:a4:52:34:06:90:
ad:e0:20:65:df:a6:bd:8c:bd:9b:91:ad:ba:9f:d0:20:46:14:
23:d0:fc:a7:93:e3:60:2a:01:59:8b:d4:a8:1a:a3:e6:d2:55:
52:b9:14:d1:3b:12:70:35:0b:c2:c6:e4:d4:da:0a:32:ae:60:
b7:c2:91:52:c6:57:4f:ae:7e:be:39:2c:9b:77:87:3c:78:d6:
bc:8f:1d:54:b6:d2:02:e9:64:f4:fa:71:cf:91:86:c3:b4:53:
4c:4d:d1:fe:ec:9d:bb:79:49:07:48:5c:c2:67:fb:56:59:47:
a7:9a:15:8c:7a:24:30:93:0a:65:b1:f4:b1:04:da:04:12:68:
40:6e:f1:b5:3e:a9:01:59:4d:1f:6b:e8:d8:e8:ac:3c:1a:0b:
56:9b:85:40:59:49:31:aa:01:4d:bc:19:80:56:d8:84:df:61:
0c:b9:6c:fa:24:7c:13:67:67:09:75:1e:e8:4c:3c:a8:5d:a6:
fa:de:40:79:e7:0b:88:49:ae:86:cd:47:d8:7f:fa:1f:ef:a0:
86:a0:2a:91:4e:7c:f7:a1:c7:1c:62:ae:bb:df:f9:2f:20:24:
4a:82:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:04 2025 by rpki-client