Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: kbvMk7JQ64mX/++8ATebHguuBDahs054pFyAiedKkGo=
Subject key identifier: B2:83:1D:A1:04:91:5E:C9:05:B7:10:16:B3:AE:3B:6C:61:F1:81:31
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 0199FB7CFB3CF154EBCD81626A1595BCC4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 033D
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: 5xhv3LgejfueuNW9C5tIj3AmD7IpCQRucw/9WMR8a5Y=)
2: WCgPWBd35wh97MLu1FH7BL7RkHc.roa (hash: 4LSeeV2arU0BH2mW0bKarXB0zBUuhKYPFKDtO5BDvYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fb:3c:f1:54:eb:cd:81:62:6a:15:95:bc:c4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=b2831da104915ec905b71016b3ae3b6c61f18131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:95:be:68:94:2f:ff:4b:07:67:55:02:be:
2a:75:ce:94:d1:32:59:85:ea:51:62:84:1a:fa:4b:
94:33:b5:d8:bb:72:df:bf:8a:22:b3:db:2d:00:d8:
e7:74:5a:40:a8:8e:b7:21:82:90:11:f8:d3:65:1c:
4c:d4:3f:6c:cd:62:69:b6:83:6d:98:9b:09:1c:03:
74:dc:83:71:40:56:43:8b:db:70:ad:e9:b4:2d:70:
82:a6:56:dd:f5:93:3f:d9:e4:33:22:52:96:1f:03:
15:9f:9d:ff:9e:67:73:c2:ec:3d:33:c7:fb:e1:35:
45:ee:6c:16:a0:3b:9a:d0:18:21:1d:ad:cd:0c:bb:
6c:46:a4:e6:65:9b:02:7f:0d:c1:16:c3:18:4b:f0:
2c:62:d4:8f:4c:97:15:20:35:ac:7b:5a:a1:0a:fe:
97:1a:82:ca:fc:ea:84:d7:ab:2a:0e:8a:0a:9c:e7:
e0:d8:44:b1:8f:4e:38:82:4c:c7:3d:ae:63:ff:35:
f5:ff:fa:b9:59:df:c3:b7:6c:0c:d8:63:9a:12:ca:
3e:66:00:27:f1:a0:d1:b6:b2:40:d8:d3:f5:b9:63:
6f:bd:68:07:f3:18:e2:40:6e:69:63:51:e6:79:db:
b7:47:02:07:8d:60:f0:37:45:58:c1:d0:4c:e0:31:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:1D:A1:04:91:5E:C9:05:B7:10:16:B3:AE:3B:6C:61:F1:81:31
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c5:1c:a5:3f:6a:03:cc:e3:83:94:e7:bb:2c:d4:2d:72:e4:
fb:54:0e:c7:d2:90:d8:df:72:91:bc:41:fc:f2:b6:23:12:b2:
84:d5:18:dd:ba:a7:06:0c:00:00:32:a6:1c:bd:23:b8:fa:16:
e9:c3:80:64:10:bc:e9:8a:71:e1:15:3d:6e:6e:5b:4c:44:73:
6e:c4:1d:ea:89:ba:40:2a:55:dc:d4:d1:4e:f1:69:88:6e:5f:
87:03:54:e6:e6:39:43:3f:40:44:f5:35:bb:52:76:c5:f1:90:
20:10:76:4f:89:93:37:01:e8:1c:73:ea:e1:75:da:b0:1e:d2:
1a:44:12:f1:26:e9:fc:ac:00:fb:42:37:c2:59:b6:e8:a1:7d:
05:f2:c5:73:7e:53:8e:4d:f9:53:18:5d:66:b4:c1:8f:e1:bc:
ad:17:5c:fe:b7:81:78:9a:60:37:f5:f0:e4:d8:ad:e9:60:a9:
fd:39:0d:44:27:7c:6b:af:47:c9:2d:b1:6b:20:f8:73:1d:93:
83:8d:02:d3:93:ca:d6:4e:46:67:12:16:ed:31:b8:72:ff:16:
cf:12:80:fa:1b:ec:96:c1:b7:19:3d:55:90:33:17:51:1c:94:
47:89:0a:a2:56:52:62:00:30:4e:38:e8:76:b7:36:94:42:5e:
6b:9c:ee:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:56 2025 by rpki-client