Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: pcWGldUGn7aoiY6dS46VhRjD3ahUxxtmmJu9J0E62+Q=
Subject key identifier: ED:18:27:F1:49:A1:D8:47:A1:1B:F9:82:4C:E1:1B:E0:85:96:8C:CE
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 0199FC8F90849F554A450FF0A14DB020CCAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 15D3
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: 60dsK2nakC60LAvzLzScCoB4LliFba5kPTg0JXCtjOM=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:90:84:9f:55:4a:45:0f:f0:a1:4d:b0:20:cc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=ed1827f149a1d847a11bf9824ce11be085968cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:a8:90:ee:2a:12:37:d3:a9:b2:06:e0:9a:
db:2a:1e:37:c7:1f:8d:35:fa:86:f1:46:5d:e1:f2:
35:5d:a6:22:f0:50:99:50:b8:55:c6:3c:d6:82:1e:
6d:e5:2d:e4:a6:3f:a0:5f:13:2c:f4:f4:c9:48:dd:
ac:ef:15:ba:d5:43:0a:bb:e2:24:69:48:5e:b6:3f:
55:a2:d0:1d:74:c3:ae:91:ee:59:4e:1d:d6:a8:0f:
88:27:09:1d:26:7b:39:08:69:55:b0:ba:e7:fc:c6:
fd:c3:80:fb:7f:ae:e4:6f:19:3c:f6:4f:67:28:54:
8e:da:4e:d3:a8:4d:a2:29:74:ed:83:5e:a5:07:57:
31:f8:91:8b:80:3c:1a:7a:72:1c:20:b6:6c:0d:09:
58:7c:8d:08:c7:8d:53:27:d0:0a:96:23:64:1b:a6:
c6:f1:a3:f1:d5:a2:3e:1c:8c:fa:c6:9b:a5:73:c1:
a4:6a:9b:b5:49:5e:db:e3:de:4e:bc:62:5f:7a:48:
0c:e1:11:24:20:43:fc:84:14:d5:97:f1:06:8b:d5:
aa:18:92:08:6b:4c:51:9b:72:99:8d:ed:f4:43:21:
2a:80:ba:ce:de:99:62:a8:7b:ca:a7:96:11:f2:f0:
6e:e9:c0:25:65:e1:05:2d:e2:e7:01:12:f0:6e:de:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:18:27:F1:49:A1:D8:47:A1:1B:F9:82:4C:E1:1B:E0:85:96:8C:CE
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f7:81:d2:fd:d1:c2:32:19:f7:9b:e4:a9:84:2c:80:af:2f:
7c:d5:48:b4:74:a7:c5:60:e7:b7:c9:82:2e:30:c0:0c:50:ee:
4d:b6:15:12:e0:41:8f:c3:5b:64:18:c3:9e:b0:a1:51:3f:50:
14:62:c0:79:2c:ab:f5:d1:d5:7b:b9:a8:38:07:10:c5:08:d2:
83:0d:47:18:5e:29:f6:9a:74:ce:fe:96:97:7b:ee:65:90:2e:
21:d9:1a:0d:0c:b4:ad:e0:62:14:c8:a6:9b:ed:5b:75:3c:31:
ab:6d:09:26:10:c3:89:10:15:39:33:15:b6:2f:aa:6c:31:7b:
cd:68:6d:f0:ec:66:09:65:8d:44:50:a4:3e:c0:65:3c:d8:44:
c3:72:fb:fd:aa:35:81:d5:fc:0a:4c:b0:7f:c0:a0:3b:28:8e:
52:f6:69:49:90:c8:25:8d:de:a5:3a:37:b8:c8:3a:de:5e:cd:
03:0e:00:bc:37:d6:d3:93:e2:85:3f:98:36:6a:24:a2:31:e2:
6e:71:3d:21:f4:35:d1:e2:de:7e:e5:5c:ea:89:8c:48:d1:7b:
ae:37:93:a5:cb:52:de:c6:f4:43:51:84:46:04:75:3d:35:5b:
33:fd:7f:76:3d:ed:48:cd:0e:e1:b7:4b:7c:e4:4e:e9:58:8a:
a2:5e:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:24 2025 by rpki-client