Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: enOM90+psFRo8GdYzdSeW7Q0AIxwDq4n8C8ex+GIxi8=
Subject key identifier: 5B:97:EB:32:79:B3:77:2E:AB:BC:2F:F4:B9:F4:7E:67:C1:6F:32:86
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 0199FE4749058C8AA86D06F6AD8E3AA01469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 21:01:48 +0000
Manifest this update: Sun 19 Oct 2025 21:01:48 +0000
Manifest next update: Mon 20 Oct 2025 21:01:48 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: 0msLVAEiOpMwIbg6HiViggOzef2rjSTV1AUR2/yQuTI=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:49:05:8c:8a:a8:6d:06:f6:ad:8e:3a:a0:14:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Oct 19 21:01:48 2025 GMT
Not After : Oct 20 21:01:48 2025 GMT
Subject: CN=5b97eb3279b3772eabbc2ff4b9f47e67c16f3286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1c:7f:99:0a:18:4b:c0:f9:d9:0a:89:be:25:
3b:93:c7:b4:9f:ae:cc:24:5f:ee:0f:12:4b:72:d7:
b1:d5:fa:19:c5:44:d1:45:6a:91:73:dd:cf:34:98:
ce:ca:3a:86:1b:95:c6:7c:db:4e:76:59:29:c8:9a:
4b:d3:5b:7c:2b:f8:14:7e:dc:b3:20:e4:dd:76:2d:
47:da:ee:5e:aa:d9:35:3c:a6:b8:fc:2e:3a:f5:9f:
50:0a:ca:8a:67:63:e3:52:d7:e2:45:c2:a5:f7:09:
64:d1:fe:f3:d9:23:b4:bb:9f:52:8d:09:46:31:31:
55:71:63:ec:7c:b5:41:0d:65:d5:15:6e:cb:64:67:
1d:50:ab:57:c5:a1:b8:da:df:96:51:42:ff:dd:55:
79:c5:c7:b4:11:53:7e:1a:9e:2b:a1:ac:97:d2:20:
1c:cf:6b:89:ca:24:08:2c:e4:77:7e:86:ce:bc:72:
97:63:8f:68:1a:40:0e:13:6b:9b:83:9a:25:08:dc:
5d:cf:58:f4:f7:de:77:a9:8f:d1:37:18:74:f5:5f:
98:f4:f8:bc:42:68:35:c0:82:be:de:7e:21:68:ed:
6d:23:b7:1c:19:21:52:d6:3b:c6:a4:a3:1c:fd:72:
c8:34:8a:da:d1:7e:2c:9d:24:75:6d:11:10:3a:ab:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:97:EB:32:79:B3:77:2E:AB:BC:2F:F4:B9:F4:7E:67:C1:6F:32:86
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:90:24:47:66:de:cf:b6:76:55:e4:cb:87:d7:f2:57:6f:ed:
35:87:a7:77:b8:62:82:92:c3:89:df:55:69:2e:d5:ca:2c:1d:
42:67:0d:d9:36:ba:f0:81:f7:45:dd:2d:70:c3:56:d7:5d:ba:
44:05:0d:97:05:1d:6d:7a:0e:75:33:5f:aa:c1:e4:e7:78:5d:
08:7c:89:c9:e4:9d:00:d9:09:f4:4c:c2:9e:2f:45:32:8a:31:
d7:80:71:41:52:0e:3c:86:68:a3:1f:ce:0f:25:aa:0d:38:a8:
6c:04:6d:a6:b2:d6:7d:9a:82:57:e1:88:e4:56:69:2d:82:30:
83:c0:47:1e:1a:82:36:2a:4a:b9:ff:1f:c7:c8:36:7c:22:c8:
69:eb:bf:ba:a2:66:af:4c:7a:d8:41:dc:f0:9c:16:1f:63:cc:
f0:32:38:ae:5d:78:f8:2a:f4:55:0f:b2:e2:43:94:18:90:96:
80:2c:68:65:04:98:f7:f8:51:be:99:67:98:5f:4b:12:cc:44:
34:fc:c7:c4:c1:9e:1d:b3:69:3d:a6:14:67:80:c0:57:d8:32:
b3:a5:c8:0c:db:ab:5d:19:37:65:84:8c:19:ed:77:41:ea:ac:
b4:07:52:d1:fc:55:6e:1a:f1:6e:51:1b:ab:52:c9:ad:95:e9:
2e:6d:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:50 2025 by rpki-client