Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: xJxQgIsTsdlEY0Q+PTqQRfZd2A7EkNhv5dN5WPeE4EY=
Subject key identifier: 2F:FE:7F:7C:5D:66:66:FB:F7:CF:A0:E4:F5:C1:81:FD:C6:88:7E:C3
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 019A52D28FC15E54C204763FF8F1AA731631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 0569
Signing time: Wed 05 Nov 2025 07:02:02 +0000
Manifest this update: Wed 05 Nov 2025 07:02:02 +0000
Manifest next update: Thu 06 Nov 2025 07:02:02 +0000
Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: U0AeUMdp07yL4Zak6qXLXERGwVU12KHYWZwHeFWfRLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:8f:c1:5e:54:c2:04:76:3f:f8:f1:aa:73:16:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Nov 5 07:02:02 2025 GMT
Not After : Nov 6 07:02:02 2025 GMT
Subject: CN=2ffe7f7c5d6666fbf7cfa0e4f5c181fdc6887ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:06:f1:73:b9:bc:d9:2d:0e:00:e9:b9:b0:
94:6d:f6:8f:76:05:c3:81:40:9b:74:cd:4c:e2:74:
4d:da:57:ad:b7:d7:28:02:ff:3c:c7:2e:16:d7:6d:
51:e5:82:c2:b0:d2:9c:5c:0e:db:a9:1b:13:4c:de:
af:0c:c5:d0:c9:d8:3b:57:d0:cb:9b:c8:26:68:3d:
3e:4b:6a:c2:6a:ef:76:a0:36:20:47:c1:70:4b:a4:
b8:6d:8c:85:23:b7:37:89:ec:55:e2:dc:6d:fc:3d:
46:66:b8:0e:14:31:c5:73:9a:bc:68:64:6e:f6:60:
2d:42:23:aa:b4:ff:a8:94:47:e5:4a:c3:89:f7:a2:
8b:1c:91:81:4e:23:45:71:c9:12:51:e9:c6:ea:81:
80:9e:f3:4d:02:10:5c:4f:28:a4:8c:41:62:8b:9c:
ea:23:06:88:5e:12:d3:a2:a9:38:d2:35:a2:30:97:
d8:13:af:b5:53:e0:68:19:28:42:6b:f6:3d:4b:cc:
a4:7d:25:0e:0b:3b:b2:f9:ad:59:ad:9d:0d:c3:4b:
88:b6:06:69:b6:cd:05:aa:d5:45:2f:dc:be:72:94:
9f:7f:0c:89:82:a4:3e:58:0d:02:07:5c:09:e6:60:
10:6d:14:5c:92:06:d7:6a:7a:22:07:00:bb:f4:71:
2d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:7F:7C:5D:66:66:FB:F7:CF:A0:E4:F5:C1:81:FD:C6:88:7E:C3
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:20:30:d2:6f:56:db:3a:23:f7:e3:5b:29:54:7e:17:99:e9:
f7:de:9a:d7:c6:76:38:a0:84:a5:b5:03:4d:34:59:d3:f3:6d:
38:62:cd:d3:cd:5a:52:ce:5b:25:df:7a:ee:32:3f:c0:c1:a5:
bd:4d:29:86:bd:2b:5e:d7:70:7b:5b:a3:c0:6c:c1:73:d1:f7:
96:c8:02:be:4d:99:c1:41:7f:a0:8e:7d:14:14:fc:9d:72:96:
9e:24:69:bc:ba:cf:bd:d7:61:20:c9:a1:50:64:c6:40:f3:8d:
31:26:b3:bc:a2:38:aa:00:b9:fc:17:6d:39:08:a4:e8:e2:e7:
69:dc:87:51:d1:19:d4:b2:78:86:70:df:07:58:80:b2:94:6d:
74:14:6f:96:cf:6f:e3:d0:2a:79:5d:af:4b:ee:03:90:3d:ef:
a0:dd:4b:ad:28:67:fb:d8:80:13:ce:16:92:d0:09:f0:0b:b6:
ee:25:4b:12:ed:55:de:5e:b0:c2:74:ef:15:a0:36:1c:7d:30:
42:42:6a:9b:da:79:37:cf:bc:a0:aa:2c:76:9a:1a:24:2b:3f:
b7:5a:e3:38:cd:65:1c:84:fd:12:48:2a:14:18:39:6c:06:81:
b0:75:7e:b7:10:e5:e6:60:57:4c:35:eb:44:f5:c7:1a:b0:48:
3c:7f:b6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:56 2025 by rpki-client