Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: fM1NVRqdFgLQ9BpxcuyFGACWBIPAcHd95QhHc4BfR0w=
Subject key identifier: 19:A3:1C:58:52:60:97:60:2F:69:46:0D:E0:60:0D:E6:37:DE:7D:9A
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 0199FC8F6CFB2AC8DD6FAA05101236D34602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 03F3
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: hGPSdNFhphNX3EVM+d/WAXSkF3xA7w6beggx4PamkAI=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6c:fb:2a:c8:dd:6f:aa:05:10:12:36:d3:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=19a31c58526097602f69460de0600de637de7d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:cc:11:41:fc:76:24:b7:d8:3f:3e:5c:9d:
8f:36:18:37:27:30:8e:c2:3f:d8:5e:17:80:ef:98:
0b:9c:01:f9:12:73:e5:7d:4b:9b:21:09:ea:8d:be:
25:c6:78:d6:83:9c:27:9c:c1:f3:c3:1f:74:2a:64:
66:54:51:d0:ac:7e:a2:0a:48:00:dd:be:0d:49:46:
63:63:fe:03:e6:17:c7:45:41:dd:06:8e:00:4f:7a:
f6:51:07:0c:64:9e:c0:c5:00:1b:0d:ec:2e:b5:6d:
15:0a:82:22:ea:63:51:bc:17:a8:87:9d:d8:b2:3b:
6e:bb:72:21:ed:db:ac:e4:6c:81:7f:f7:44:8b:71:
46:75:c2:83:68:81:f7:2f:ee:26:18:96:60:bb:1e:
50:80:86:56:aa:e1:99:2a:bf:03:46:af:07:bf:90:
67:83:d9:15:03:0c:cd:e1:e9:76:3d:d8:c0:0f:74:
f1:e8:08:da:65:ce:d7:2a:b1:1e:dd:78:fe:8b:e0:
4a:1f:59:99:76:3b:3f:ab:87:3c:8a:6b:bb:28:37:
39:56:03:cd:ca:ce:e6:8c:fa:04:78:85:5d:46:ed:
e0:f6:53:f7:7f:0f:c4:0b:9f:f6:a9:f2:13:eb:a1:
e2:b9:30:cb:21:1c:da:4e:4d:fe:3b:5f:88:f0:73:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A3:1C:58:52:60:97:60:2F:69:46:0D:E0:60:0D:E6:37:DE:7D:9A
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:0c:22:57:06:bf:a2:35:7a:bc:35:8b:22:1c:ad:61:20:2f:
ef:cf:1c:a4:45:17:05:f2:fd:0b:1a:4e:a6:ad:33:70:24:11:
a9:63:6e:72:c8:b1:33:78:a1:c5:be:32:4a:81:6f:c9:f1:55:
e4:db:36:86:6b:93:37:52:d8:be:31:bd:d6:db:f7:6b:12:fd:
f2:d0:5d:af:d5:ce:a8:a9:db:34:25:c7:36:21:88:98:a7:f3:
dd:06:90:e2:73:13:c1:9e:83:f7:b9:37:a0:cc:b6:d5:d4:99:
74:d9:e0:a4:c5:ac:54:95:ed:26:0b:2f:65:db:e0:ea:81:8a:
8e:b1:4a:34:62:67:88:0b:1c:ce:31:d8:16:07:19:0e:c3:15:
0a:4b:4e:2a:03:6a:d0:1f:14:19:14:6b:ca:4f:3d:28:23:f0:
62:89:28:4e:0f:d8:ff:59:57:d0:96:f8:45:9d:09:e5:47:ec:
b3:db:b5:1e:9e:eb:5e:4d:49:e6:fc:28:9b:d1:84:ed:df:2d:
3b:75:46:3a:28:1a:1a:38:5e:5e:a8:fa:eb:fa:25:94:42:f7:
c3:02:4f:50:4a:94:58:af:aa:55:63:80:98:8e:df:4b:1a:31:
64:af:50:38:3d:11:64:a6:ba:7e:25:c4:78:88:32:1d:70:b5:
21:95:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:00 2025 by rpki-client