Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: 7AV9jh1/Dtg0tnUchIJm7bGkNcNpaY0QNfFsnZ9wosA=
Subject key identifier: C6:3F:43:81:C6:89:72:3A:9F:80:D1:77:10:D3:91:2B:1A:42:8A:4F
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 0199FCFD33686AC40494BBC231196A7B1EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 11A8
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
2: jGJqFQVdzPNIuq__x_RJveRfPgI.roa (hash: l/kSncaCyGC+QqprUZGRI2OdInXO3OkPgy+W2EUBUIg=)
3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: T9miLfShHHBHgO25BCFPyLYeZ7HSmm7phtdKnCNfAKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:33:68:6a:c4:04:94:bb:c2:31:19:6a:7b:1e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=c63f4381c689723a9f80d17710d3912b1a428a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:a3:f9:0e:64:3c:12:b0:cb:31:f4:56:15:
e1:84:f1:ef:82:6f:d3:00:b1:1d:24:cb:14:56:da:
dd:26:88:67:86:79:e6:1d:74:a2:26:8f:48:91:bd:
f5:5b:b1:48:fa:5f:b2:a7:8e:9d:4f:9d:47:34:11:
e0:37:cf:1c:8d:ff:99:cb:22:f9:45:11:e1:df:fb:
8a:32:21:18:71:e4:5c:ee:5f:25:7b:39:79:46:52:
44:1b:91:8f:a0:48:74:94:cb:9e:82:a7:c9:5a:36:
70:99:2e:d1:4c:23:38:23:77:5b:d4:4a:88:16:34:
be:cc:8a:48:12:20:b8:15:e6:c7:97:47:cf:6a:38:
17:fa:f1:1f:09:1f:03:3f:ec:0a:a6:4d:f1:57:e9:
89:da:5d:31:0d:e1:cc:d8:bc:1c:88:b4:7e:1e:f0:
58:68:91:21:f1:92:0b:a7:54:9e:6e:98:f8:f4:7a:
f5:ed:15:fd:ff:2d:ec:97:3f:35:22:49:43:e6:1c:
6a:96:3c:c1:09:68:6b:9b:ff:d8:a0:9b:01:81:cb:
4b:9b:2a:44:d3:87:02:6e:a3:6a:52:88:22:f4:58:
50:a0:27:4f:02:e1:29:47:19:ef:da:46:20:0b:45:
dc:aa:e4:cc:df:85:d5:09:00:ed:4f:22:c5:18:cd:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3F:43:81:C6:89:72:3A:9F:80:D1:77:10:D3:91:2B:1A:42:8A:4F
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:24:0d:8b:46:ba:cf:37:89:cd:5a:9a:1d:19:50:65:bb:eb:
bd:9e:3b:15:7b:33:c1:7e:87:e0:cf:f2:89:1b:c8:4d:0f:69:
82:9b:4d:07:12:78:a5:d6:73:00:8d:8a:25:82:e2:e0:3d:3e:
02:c3:d7:90:cc:df:9a:64:0f:a5:28:20:3e:ae:e9:3e:1e:a5:
a0:69:2b:1e:25:68:fa:1b:1d:cf:08:50:26:0e:30:2f:59:e1:
47:e4:4e:9b:7a:cb:2d:2f:89:26:a5:71:70:2f:08:24:9f:a6:
9d:96:81:71:e5:9e:65:7c:72:30:a2:0c:9a:a5:9a:a4:f6:b4:
da:13:1d:a5:30:8e:0c:aa:4a:02:b5:cd:2d:ff:c7:d6:83:80:
99:37:f8:be:ff:97:6b:d4:4c:a3:a3:39:90:c8:fa:fb:a4:e5:
d7:52:97:4b:71:58:d2:ad:32:06:e9:38:5c:2d:e2:8e:e5:4e:
0e:5e:dc:62:ae:36:cc:ff:ca:3e:ea:e3:cd:fd:54:5e:e5:4f:
86:0d:e1:ba:c4:e2:c9:51:eb:d9:d0:af:61:e4:00:86:0b:f8:
1e:e6:86:46:49:b0:a3:df:90:bb:4a:17:d2:92:6c:ea:64:99:
c6:23:02:29:6a:2d:8f:1a:af:5f:46:ee:c3:55:d0:4a:c1:c7:
91:8a:fd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:04 2025 by rpki-client