
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: wltLKrIgMCa4/sG6nhS8Ig8JeRCn0I1KR7TuCEja3cU=
Subject key identifier: 7F:91:AA:FD:B8:F8:7D:BE:1B:CF:65:C6:29:77:D1:98:88:EF:B3:C8
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 0199FD33E77658B66871C4D47EF4F003F5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 1630
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: +G51CRjPajgM4YXsQDKSBRF9NE2dbU1h7wDKiI6IAlQ=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e7:76:58:b6:68:71:c4:d4:7e:f4:f0:03:f5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=7f91aafdb8f87dbe1bcf65c62977d19888efb3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:23:ba:5c:5a:18:63:97:ee:de:90:b0:aa:
33:40:ec:a8:f6:08:8e:13:bc:d9:7a:09:c2:d7:7d:
58:76:a8:4f:f5:cd:08:6b:02:81:ee:95:e5:98:9d:
ff:a2:47:4d:78:1e:c2:83:95:c8:48:3c:48:d7:e3:
29:2c:db:ef:b2:77:cd:df:1b:e5:f3:c2:e1:cd:b4:
54:00:a8:6d:de:a3:18:ea:0c:13:6d:b5:4a:0f:bb:
57:d8:e0:bb:0d:7c:4e:44:2b:75:a3:ee:f8:95:b4:
a2:b2:cc:bc:c4:11:31:a7:98:0a:e8:0e:98:41:71:
8c:d1:92:93:cf:d1:00:1e:ef:e0:31:0f:8d:6b:5a:
c6:f3:04:94:f3:02:af:83:84:fb:c9:7f:02:d4:ca:
be:11:f6:fe:2a:65:92:df:df:43:c7:5a:a6:cc:5d:
dc:5a:82:1a:5b:c6:b1:b5:56:30:26:67:5e:f1:6b:
7c:7f:0f:ca:68:3b:f2:a7:15:94:5f:3f:3e:ce:12:
c5:72:26:ba:8a:33:e5:0e:ec:f5:6c:15:da:f1:87:
41:29:68:75:9c:27:12:d3:1f:e5:38:0a:8f:1e:6f:
42:2b:d9:47:7f:86:a6:5e:ef:dd:a8:8b:f2:e3:a6:
61:18:0c:70:ba:fc:07:8f:2e:66:cb:ec:f1:08:7f:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:91:AA:FD:B8:F8:7D:BE:1B:CF:65:C6:29:77:D1:98:88:EF:B3:C8
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:92:83:ab:6c:29:ec:ef:9d:4d:64:ba:42:39:47:9f:47:9e:
6c:f2:ca:56:06:df:1f:56:a9:da:aa:3b:45:e5:f4:43:8d:2d:
98:7d:b0:d2:28:56:90:ad:6a:82:32:77:77:7b:17:ab:95:2f:
c7:ba:be:df:a3:8a:df:51:07:41:5f:44:8f:dd:68:56:99:e5:
39:b1:b7:ee:a7:7c:a4:68:2e:89:e5:e4:d6:96:eb:9a:a5:bd:
2c:03:80:41:1c:6a:c5:0e:8a:4b:c7:89:b6:34:b5:4e:74:8d:
8f:9d:87:5c:0f:dd:b0:20:f8:ca:41:f9:a8:83:8f:f7:0d:9c:
ca:b3:50:b8:16:3d:d1:ba:71:29:55:05:e6:af:a5:05:0d:5c:
c1:dd:83:47:78:ea:66:16:d7:6b:b9:87:a7:76:61:64:7d:0a:
2f:17:49:7d:b1:69:ae:0a:7d:fd:e9:8f:26:7a:c1:f4:bc:43:
fd:61:74:09:f2:6a:14:94:2a:e7:9d:ce:e0:86:b0:d9:b8:b4:
86:4d:09:42:b4:f9:9f:53:9a:b8:84:9a:39:35:12:5f:eb:66:
e4:ad:6e:a3:0d:bd:41:c1:fc:0d:48:fb:3f:3a:80:d5:83:fa:
0e:af:1b:b7:f3:14:e3:56:8c:ac:6b:89:d1:0c:1e:c5:5b:cc:
27:65:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:26 2025 by rpki-client