Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: yp1tsadrPS2+GnJeSEztfB/85+kimGRIohI5p9gbydU=
Subject key identifier: FA:A6:6D:32:B2:0C:02:B2:43:BA:BD:B6:7C:BF:25:8F:BD:88:CA:86
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 0199FF59BD56A740B898B291F0D822425E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1629
Signing time: Mon 20 Oct 2025 02:01:35 +0000
Manifest this update: Mon 20 Oct 2025 02:01:35 +0000
Manifest next update: Tue 21 Oct 2025 02:01:35 +0000
Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: h3YZca1DHUmLw+4fZiFAufv+GI+T8cD6RhVSdDws3ek=)
2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:bd:56:a7:40:b8:98:b2:91:f0:d8:22:42:5e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Oct 20 02:01:35 2025 GMT
Not After : Oct 21 02:01:35 2025 GMT
Subject: CN=faa66d32b20c02b243babdb67cbf258fbd88ca86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:81:4e:8a:56:d6:5f:19:53:99:94:00:d3:
3b:5c:83:55:7d:cb:24:d2:0e:4e:dc:1d:94:68:68:
e8:65:d6:53:e0:56:98:79:a4:96:96:70:ca:f2:be:
f4:9a:1f:16:5d:30:0d:6a:08:bd:86:98:30:51:0f:
8d:51:71:4b:02:7e:c7:64:73:c8:95:73:7f:18:41:
29:32:31:cc:84:ae:9c:fb:db:db:72:b0:8a:15:00:
df:39:13:c6:b0:4d:d5:65:e2:51:bf:01:9c:c9:c3:
03:fa:45:85:24:03:87:25:5b:a5:45:64:6a:04:20:
26:f5:02:81:ca:41:a1:e2:ab:01:80:70:82:ea:40:
5c:3a:b7:23:7e:f3:93:39:31:11:c8:ef:13:e2:c4:
96:5e:48:9a:ed:fe:69:a8:48:1e:bd:88:a2:45:18:
95:59:c2:ed:0d:ac:08:32:d5:ca:5a:2d:7e:4a:b9:
23:71:ab:77:31:14:72:57:4e:84:c9:d7:20:02:36:
36:23:4a:93:1a:a8:b8:31:a6:e3:c3:0c:3d:c8:bc:
b8:2d:59:b9:76:ea:32:7e:9f:ad:56:4a:06:09:71:
33:2c:b4:a1:25:5a:c8:c1:02:db:13:e2:78:35:03:
0d:fc:27:71:ef:b8:53:ef:21:6f:c7:83:54:69:91:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:6D:32:B2:0C:02:B2:43:BA:BD:B6:7C:BF:25:8F:BD:88:CA:86
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:eb:24:0e:05:43:e5:55:9b:37:1a:81:9b:02:a8:37:b4:
1a:8a:41:db:e3:06:ee:53:db:c8:ea:a1:c6:b1:58:72:eb:75:
6f:be:1a:02:66:fd:29:38:cf:c2:7f:7b:9b:c9:4b:96:3f:c8:
21:09:3d:b3:74:cc:00:28:96:28:96:9d:f9:3a:cd:eb:d1:90:
15:a0:a6:97:ce:59:f6:76:95:15:ab:d7:d6:d1:18:80:db:4d:
fe:bf:f7:8c:a3:80:cf:46:5c:63:dc:2f:3c:f2:ca:1f:53:8a:
e0:1d:c7:44:0d:10:25:a0:7e:1c:8d:98:19:65:12:5d:38:d9:
e6:81:06:58:d9:4e:b3:56:b3:3a:a2:94:56:3e:f0:c9:8f:14:
d2:cd:59:11:b8:60:6d:3f:6c:0e:df:33:66:3d:15:e3:4f:61:
da:d7:98:bc:b9:f0:a4:d3:55:aa:a3:74:d8:d6:f1:fd:e6:45:
34:1d:54:16:40:af:94:9d:70:f3:f7:8d:57:1e:e8:c7:e4:cb:
9f:d8:14:3c:7e:f3:d3:d5:8e:c8:54:82:9b:21:e0:ae:ee:39:
f3:d0:37:45:c9:ae:56:38:a2:90:41:ea:26:c9:08:19:27:d8:
bb:ea:f9:a3:51:80:ad:cf:c1:39:c2:ab:22:63:9c:f8:07:fd:
25:fe:82:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:23:52 2025 by rpki-client