Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: vZmkf9piaLbflX42q9MJ7qdEXIuqSyg+CdlUOOOoHog=
Subject key identifier: 24:1C:F3:2D:8F:8C:A8:CB:E4:A3:2B:0C:0A:02:E7:C2:F5:A5:D6:95
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 0199FC217CCF12179B74DD4513920119BEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0878
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: w3h41bfBMFjsJtcMUy1nBRjODKX0PLWJr8r8CdgPLGc=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7c:cf:12:17:9b:74:dd:45:13:92:01:19:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=241cf32d8f8ca8cbe4a32b0c0a02e7c2f5a5d695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:ed:3e:25:a4:59:0f:b1:5b:d8:40:ad:58:
94:bf:f2:4f:54:66:b1:de:89:dd:41:ce:97:45:18:
b7:25:c0:bf:c0:c3:09:a7:5d:39:18:89:b1:b2:99:
3b:96:27:67:e0:35:8c:4b:2f:78:3c:d9:52:e3:63:
f5:12:94:79:c8:a1:09:54:49:01:2a:89:99:49:79:
c1:18:fd:11:b4:c6:29:c4:da:9e:1c:9e:84:85:2e:
4c:e9:9b:35:58:ac:13:87:df:f0:1b:ee:d1:41:08:
5d:72:d9:b7:25:52:10:da:c6:04:dd:fa:fd:6a:ef:
cf:36:71:86:87:df:ad:80:7f:b1:6e:e6:b4:2b:04:
67:de:d5:2b:b0:dc:40:32:a6:a8:0e:4e:d0:c0:c0:
b8:d6:53:9b:b3:ae:cd:98:26:cc:73:62:bc:fb:16:
ec:c1:8e:0a:c9:83:76:95:a5:77:ef:be:c7:66:4a:
1f:e7:e1:58:a0:eb:15:a9:ef:de:6c:74:7f:4c:4a:
ba:21:ef:65:16:a8:43:92:9d:09:df:31:59:91:5f:
4b:21:be:c7:0f:96:4f:3d:28:41:3a:c5:2f:bd:7d:
44:82:30:9f:35:60:34:d0:b5:91:f0:85:d1:04:56:
ab:8f:78:4f:46:81:52:fa:fb:2c:90:f0:17:ba:de:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:F3:2D:8F:8C:A8:CB:E4:A3:2B:0C:0A:02:E7:C2:F5:A5:D6:95
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:94:c6:e3:97:6f:7a:21:1a:56:87:32:9d:6f:15:9c:a5:8f:
49:34:c0:01:09:05:7b:29:19:de:04:6a:c5:ed:76:a4:41:f3:
76:6f:c9:b7:15:21:36:ee:33:a5:a0:9e:a7:6a:af:41:f8:30:
2a:f6:dc:5f:df:98:02:74:9b:2d:7d:dc:21:d8:a5:e1:55:0d:
eb:a1:13:cc:64:09:f9:0d:ea:ca:f2:2e:d0:57:7a:79:06:ac:
5b:6f:9a:26:5c:fa:94:6d:62:ee:bf:f2:a6:fc:4d:c3:45:99:
2c:5d:21:20:ae:29:af:20:7b:d4:ba:ef:3d:a2:be:d4:cb:67:
ce:07:21:fc:77:ba:f7:9f:cc:58:cc:69:9c:5c:58:29:7b:58:
2a:de:6b:89:39:07:e7:69:5c:44:18:bc:f7:43:e8:53:58:ae:
a3:9f:6a:a5:88:5e:e7:39:4b:c4:7a:f6:83:47:43:7e:f8:fe:
88:13:ac:63:f1:95:09:94:22:d6:71:96:e1:55:b4:f3:cc:7a:
07:2c:9f:8e:9c:1e:eb:71:00:a1:7a:b0:46:4f:c3:f7:31:42:
85:6c:c8:d7:0a:22:a9:f9:d5:9a:95:06:8a:4c:81:e8:dd:da:
e8:05:c5:9f:93:6d:e6:a4:10:c8:41:99:2a:68:f0:ec:93:6e:
2f:cb:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:48 2025 by rpki-client