Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
File: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft (raw, json)
Hash identifier: dSz0Vxeaa9v6mL5Zj/UDtI5bxudm6U7q7yAfB+nHM+I=
Subject key identifier: 0B:66:05:3A:64:0D:4E:19:DC:79:DE:DE:A7:87:0C:60:3B:4F:43:35
Authority key identifier: 43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
Certificate issuer: /CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Certificate serial: 0199FB45A57E44E5C8FAD9DCE1323EF49B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
Manifest number: 140D
Signing time: Sun 19 Oct 2025 07:01:09 +0000
Manifest this update: Sun 19 Oct 2025 07:01:09 +0000
Manifest next update: Mon 20 Oct 2025 07:01:09 +0000
Files and hashes: 1: Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl (hash: UF7MyW4iaLi47LqxqsYNgltJrHTE3bHKH9UQJfll7lA=)
2: rz-RdiM9IWT3IB5wGzMs1ZBSN0Y.roa (hash: o6qyEqxDzSGkgBN+te6/IqxauC6oKPYhjWorkJVF6Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a5:7e:44:e5:c8:fa:d9:dc:e1:32:3e:f4:9b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4368330bea2dfe880ffa62f67b566aeae2d287fd
Validity
Not Before: Oct 19 07:01:09 2025 GMT
Not After : Oct 20 07:01:09 2025 GMT
Subject: CN=0b66053a640d4e19dc79dedea7870c603b4f4335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:80:c3:1f:ca:51:8a:4d:a3:8e:90:c9:26:
82:35:9d:ad:72:10:b8:6e:aa:53:19:01:d9:39:72:
92:87:2f:9e:c1:fe:39:4a:2b:88:b3:fc:db:31:a5:
1c:d5:48:1d:4a:98:4a:7f:22:4e:cb:44:73:29:9a:
33:61:a9:69:16:6e:ca:6e:3a:0a:b9:a9:0d:b1:72:
c6:c7:89:07:77:85:f4:20:57:f4:4e:33:6d:db:a4:
6b:1b:f7:bf:1b:31:f2:87:e9:07:90:d0:9a:a5:b2:
03:6c:27:ea:6a:5c:0b:85:72:01:ba:c8:a3:a1:18:
43:74:6a:16:90:24:17:34:22:dd:3a:87:6f:79:2b:
69:7b:5c:72:5e:46:0b:b4:53:57:b0:a8:bd:90:7a:
dd:d6:c9:f0:24:11:7d:fb:19:21:95:f7:c4:49:4a:
c8:a8:39:18:49:de:25:ea:be:53:0b:5f:fa:a3:02:
05:a7:31:f0:0e:0c:73:4f:a1:cf:b9:37:6f:79:c3:
f5:4a:0e:7d:39:ca:07:a1:c7:2d:47:cf:3d:16:76:
4c:dc:07:7f:77:66:2d:50:8e:ff:fd:2f:a1:b8:bf:
9b:8c:9c:0f:ba:5c:a1:59:ff:c9:4d:28:bb:a3:79:
1b:3d:66:fc:52:6d:98:49:30:e6:fb:7d:1f:02:d9:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:05:3A:64:0D:4E:19:DC:79:DE:DE:A7:87:0C:60:3B:4F:43:35
X509v3 Authority Key Identifier:
keyid:43:68:33:0B:EA:2D:FE:88:0F:FA:62:F6:7B:56:6A:EA:E2:D2:87:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8fc3b0-9704-4751-b149-5a37f6a1bca9/1/Q2gzC-ot_ogP-mL2e1Zq6uLSh_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:f0:82:03:48:7e:e1:a0:90:06:0f:b9:92:2e:36:29:47:
5c:e4:4e:f2:88:0a:00:0e:24:53:8c:74:6c:35:11:7f:4c:97:
b5:5c:3a:12:ba:36:ba:7e:7d:33:8b:b5:55:69:e0:fc:37:90:
d1:98:0f:67:ae:b8:46:5a:fa:0e:70:d1:11:48:ef:ca:fb:0b:
cc:af:ed:ac:27:96:1f:9e:1d:e1:af:3a:96:08:3c:94:1b:14:
b3:46:65:08:03:a6:0f:7b:03:13:53:97:40:48:dc:4f:59:bd:
45:af:24:ff:ff:ea:17:b5:a6:25:13:41:4b:91:bc:96:e5:39:
76:99:ad:44:11:db:d8:b8:29:61:ab:f7:2f:8d:ce:40:fb:b9:
6a:b5:4c:e0:55:96:97:f8:39:33:88:5a:15:22:d7:9e:ce:ab:
b0:0c:e0:14:64:98:1d:eb:3c:15:b2:82:26:75:11:84:52:49:
e3:bc:c1:7d:7d:8b:7c:1c:0c:4c:b0:7f:a6:2e:d9:12:7a:11:
36:db:a5:de:1d:b0:01:9a:fe:60:e9:20:b1:02:cd:b2:fa:4e:
5a:95:bc:a0:a7:f4:d1:89:84:5f:80:4b:1d:12:f3:f8:7a:31:
18:03:62:4c:17:85:db:0d:c4:b2:24:1d:e6:fc:86:3d:f7:68:
fa:b8:e6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RaV+ROXI+tnc4TI+9JtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNjgzMzBiZWEyZGZlODgwZmZhNjJmNjdiNTY2YWVhZTJk
Mjg3ZmQwHhcNMjUxMDE5MDcwMTA5WhcNMjUxMDIwMDcwMTA5WjAzMTEwLwYDVQQD
EygwYjY2MDUzYTY0MGQ0ZTE5ZGM3OWRlZGVhNzg3MGM2MDNiNGY0MzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoSAwx/KUYpNo46QySaCNZ2tchC4
bqpTGQHZOXKShy+ewf45SiuIs/zbMaUc1UgdSphKfyJOy0RzKZozYalpFm7KbjoK
uakNsXLGx4kHd4X0IFf0TjNt26RrG/e/GzHyh+kHkNCapbIDbCfqalwLhXIBusij
oRhDdGoWkCQXNCLdOodveStpe1xyXkYLtFNXsKi9kHrd1snwJBF9+xkhlffESUrI
qDkYSd4l6r5TC1/6owIFpzHwDgxzT6HPuTdvecP1Sg59OcoHocctR889FnZM3Ad/
d2YtUI7//S+huL+bjJwPulyhWf/JTSi7o3kbPWb8Um2YSTDm+30fAtlJgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtmBTpkDU4Z3Hne3qeHDGA7T0M1MB8GA1UdIwQY
MBaAFENoMwvqLf6ID/pi9ntWauri0of9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTJnekMtb3Rfb2dQLW1MMmUxWnE2dUxTaF8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84ZmMzYjAtOTcwNC00NzUxLWIxNDkt
NWEzN2Y2YTFiY2E5LzEvUTJnekMtb3Rfb2dQLW1MMmUxWnE2dUxTaF8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84ZmMzYjAtOTcwNC00NzUxLWIxNDktNWEzN2Y2YTFiY2E5
LzEvUTJnekMtb3Rfb2dQLW1MMmUxWnE2dUxTaF8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdTwggNI
fuGgkAYPuZIuNilHXORO8ogKAA4kU4x0bDURf0yXtVw6Ero2un59M4u1VWng/DeQ
0ZgPZ664Rlr6DnDREUjvyvsLzK/trCeWH54d4a86lgg8lBsUs0ZlCAOmD3sDE1OX
QEjcT1m9Ra8k///qF7WmJRNBS5G8luU5dpmtRBHb2LgpYav3L43OQPu5arVM4FWW
l/g5M4haFSLXns6rsAzgFGSYHes8FbKCJnURhFJJ47zBfX2LfBwMTLB/pi7ZEnoR
Ntul3h2wAZr+YOkgsQLNsvpOWpW8oKf00YmEX4BLHRLz+HoxGANiTBeF2w3EsiQd
5vyGPfdo+rjmig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:41 2025 by rpki-client