Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: w6tyMXxzxJU6oC5yHUvZAH4IeXnErWrwRpZQ5SaYHjw=
Subject key identifier: DB:20:38:47:8D:62:4F:A2:F5:06:E5:97:AB:9D:78:C5:BA:2E:EF:27
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 019A4F993E02EC01A78EAF8355336E16B860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0DC4
Signing time: Tue 04 Nov 2025 16:00:34 +0000
Manifest this update: Tue 04 Nov 2025 16:00:34 +0000
Manifest next update: Wed 05 Nov 2025 16:00:34 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: vlW3/TOtGlkXmAR0s7pYW2vHOQkqUSBgshYsLo7sbkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:3e:02:ec:01:a7:8e:af:83:55:33:6e:16:b8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Nov 4 16:00:34 2025 GMT
Not After : Nov 5 16:00:34 2025 GMT
Subject: CN=db2038478d624fa2f506e597ab9d78c5ba2eef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:68:ea:f4:c3:8f:b7:f8:d4:fc:f5:4f:1a:
98:36:1c:c0:f7:93:ee:73:a1:6f:e8:23:f9:02:99:
23:71:6d:e4:62:9e:41:10:d2:1b:08:26:47:3e:7e:
fe:81:03:75:b9:31:5c:57:b5:14:d9:ab:31:78:fe:
4c:ff:ef:85:57:89:49:a4:cd:af:87:55:b3:8c:37:
83:11:a2:48:6d:6b:e3:68:e3:24:fe:92:5a:92:3e:
3c:05:65:31:33:c1:72:ce:dc:86:9b:06:39:4e:6d:
80:99:2f:08:dc:33:18:71:9f:f9:63:2f:c8:e9:c3:
31:77:7f:91:4b:48:d1:54:d3:64:2b:3a:af:00:18:
a1:31:e6:f1:c5:a9:8c:8a:0f:fc:ce:c8:43:e6:81:
2d:08:5a:cb:35:4c:ec:8e:69:ba:13:ac:cf:ff:05:
2b:93:33:2a:56:07:c0:a6:a3:7b:19:eb:37:ba:6d:
54:22:da:f4:e5:f2:86:1c:1a:7c:f0:16:2c:50:e7:
a3:71:cb:7b:65:4f:88:bf:16:33:2a:86:04:73:12:
df:1f:8e:3f:21:09:d7:53:8e:68:fb:51:21:64:2f:
f9:33:6b:7b:d3:79:e8:50:8f:84:ab:1b:3c:f4:87:
96:62:e4:66:8e:15:65:25:1b:76:6d:72:40:f9:5e:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:20:38:47:8D:62:4F:A2:F5:06:E5:97:AB:9D:78:C5:BA:2E:EF:27
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:89:d8:51:30:ac:7e:bb:1d:04:53:ec:22:a3:16:ee:84:13:
7a:f3:d7:b8:67:f8:55:15:d2:0e:c4:d3:33:76:ca:a3:cb:32:
bf:3c:eb:bb:57:1d:2d:f1:bd:93:9c:a1:0e:e8:e3:7e:fe:ba:
e4:27:5c:ac:9a:47:61:10:b9:06:28:9d:43:2a:ef:94:e7:92:
5b:c5:53:2a:3e:e9:97:d9:3a:4d:94:49:af:3a:a4:cd:16:1c:
ff:b3:d2:26:ae:dc:f5:5d:b7:40:41:74:4a:fd:f8:96:34:d1:
88:8d:6c:b8:e6:94:a2:bc:a2:bf:17:71:02:4d:a0:a2:d9:03:
02:06:7d:93:61:56:37:9c:02:c6:a1:14:c1:c6:31:4a:9e:bf:
d8:b2:e7:f0:74:6e:1d:b1:bf:58:d9:c1:41:ed:86:c4:02:f0:
85:14:12:22:61:21:d6:43:95:97:2e:7b:73:cd:a3:54:c4:8d:
69:68:0d:09:a9:db:4b:48:00:04:24:d4:ba:7f:cb:19:93:7b:
9e:27:dd:54:eb:d4:02:21:5c:78:80:d4:c2:00:8f:81:13:64:
71:c8:4a:f0:ed:46:33:cf:78:92:62:0b:b9:c2:da:b7:a9:57:
03:91:26:70:c1:e7:e2:2b:d1:15:1b:85:d7:32:ed:2c:d1:90:
85:05:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:06 2025 by rpki-client