Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: CCrrCCHuRf6WNK4osb0ly1SEpUr9eA3bQK7/DLOYsX0=
Subject key identifier: 63:0D:58:05:0E:91:CD:70:12:21:F3:1C:C1:E8:C3:CC:29:31:9D:88
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 0199FDD97028D2F52BEA47285FBD0605F996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 06F7
Signing time: Sun 19 Oct 2025 19:01:49 +0000
Manifest this update: Sun 19 Oct 2025 19:01:49 +0000
Manifest next update: Mon 20 Oct 2025 19:01:49 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: eY6gM2XvckHSrLE8EdlqR3vgAykmxHSi2NRGxBQZXKM=)
2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:70:28:d2:f5:2b:ea:47:28:5f:bd:06:05:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Oct 19 19:01:49 2025 GMT
Not After : Oct 20 19:01:49 2025 GMT
Subject: CN=630d58050e91cd701221f31cc1e8c3cc29319d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:3c:06:08:75:c6:d3:9e:da:81:55:7c:b1:
0c:3b:fa:f0:79:b7:a9:6a:d5:b0:fa:84:ce:d7:07:
94:2b:36:bd:76:0c:63:ff:9e:a3:8a:c6:8d:87:9d:
85:3c:e2:01:e1:2d:cf:9e:18:9b:bb:a4:6b:2c:9b:
1b:72:ea:08:d9:9b:4b:39:9a:18:f2:b4:0a:d9:69:
cc:c2:37:e6:76:47:dd:6f:3a:15:a0:2e:3b:8f:2a:
65:20:ce:06:94:9d:18:69:e1:92:bc:40:ee:ee:40:
b2:24:a0:ab:9d:1f:e1:9e:5d:71:d8:d5:ca:32:47:
ca:f9:35:b8:46:bf:1f:e8:f5:20:1d:e6:84:c9:88:
23:c4:7f:09:a3:00:b0:9a:66:0a:5b:19:35:c5:92:
0a:95:92:4c:7b:d6:29:bd:68:ee:ca:3b:ab:41:f1:
c1:05:12:45:f8:99:d7:30:ab:9c:be:3e:fe:0a:ae:
16:62:ce:a4:08:cd:76:ef:fa:02:21:19:1c:38:ee:
bc:14:5f:a4:df:4a:a1:3e:68:c3:e1:34:8d:7b:c7:
32:8b:3f:e4:24:b4:81:f0:03:53:61:8a:4a:a7:ae:
3f:21:a5:87:33:7a:f4:9e:d1:78:e0:54:00:28:24:
ca:9a:6d:f2:17:ac:5c:c1:df:f7:82:50:1b:b0:d6:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0D:58:05:0E:91:CD:70:12:21:F3:1C:C1:E8:C3:CC:29:31:9D:88
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:60:86:b7:33:e7:49:57:ee:78:2d:c2:43:db:70:91:4d:13:
d0:40:50:88:e7:f3:44:db:64:2d:01:cb:37:d7:0a:50:06:c5:
48:2d:c0:73:29:14:01:3b:e0:f5:31:09:81:61:9a:59:2a:8e:
49:70:5e:65:dd:df:3b:02:17:60:aa:77:6a:78:04:e9:0b:ae:
bd:3c:cb:f2:8b:67:7e:d5:50:2a:c0:b6:01:8b:cd:bd:56:93:
30:23:64:35:92:d2:a8:71:90:88:48:a4:f5:ad:89:f2:fb:22:
71:b7:5e:66:24:84:1f:b5:00:42:c9:a9:f7:12:8d:06:14:93:
1f:cd:69:34:4b:e3:e1:7b:7c:0c:76:e6:b6:9b:85:e1:92:ce:
77:4d:02:58:d2:7e:31:84:cb:25:d1:52:17:4a:51:93:3a:57:
b8:f6:21:ce:0b:54:b9:13:26:15:da:ea:d6:45:d3:79:13:50:
d8:c8:57:13:96:b6:7d:61:52:43:9b:dd:e5:a1:53:ae:f0:6b:
bc:e5:f1:b6:8f:7f:4c:fc:5e:2b:c9:ba:07:a9:b7:0f:e8:6e:
4f:fa:a1:f6:ee:f7:04:e9:51:13:c5:71:05:32:7d:fd:db:a5:
c1:14:b1:8d:3c:c3:3f:30:8d:88:d3:2f:fe:6d:b4:56:12:42:
c9:d7:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:38 2025 by rpki-client