Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: BZrfiLyV1l8sKI+sLbivNlLKaviQceFSEg74aHF/w6g=
Subject key identifier: EE:A0:95:2A:54:A8:A9:D3:25:0F:A0:65:ED:FC:7C:34:67:80:71:D9
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 0199FD345EED5B57992FEDA36500BAD3B544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 1016
Signing time: Sun 19 Oct 2025 16:01:31 +0000
Manifest this update: Sun 19 Oct 2025 16:01:31 +0000
Manifest next update: Mon 20 Oct 2025 16:01:31 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: l71LZVDkdi6oK6PYe3+KFpp86gU7r//+DkAw/Axcyqk=)
2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:5e:ed:5b:57:99:2f:ed:a3:65:00:ba:d3:b5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Oct 19 16:01:31 2025 GMT
Not After : Oct 20 16:01:31 2025 GMT
Subject: CN=eea0952a54a8a9d3250fa065edfc7c34678071d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:87:fa:3e:d1:e6:ac:d9:73:b3:27:d7:4a:
2f:4b:ad:d9:1f:7f:1b:98:b5:ad:5f:c9:48:7c:f8:
76:88:a9:d8:b8:38:b3:4a:24:ce:10:d1:e0:b0:e9:
41:d6:78:7e:76:48:d1:23:14:d8:9a:b1:89:7e:b2:
c5:2c:86:26:a0:32:85:49:24:06:22:27:c2:b9:bb:
fe:fe:ee:37:e9:0d:cd:84:72:6f:2c:89:d1:80:f0:
af:4b:35:bd:89:82:05:50:80:88:6a:e5:13:15:1c:
51:80:c4:13:5a:e7:10:86:9d:cb:de:15:6b:8e:17:
54:a7:39:98:6d:7b:db:9c:41:85:b4:11:80:ae:1a:
12:fe:22:67:b6:77:a4:3f:f6:15:eb:27:66:47:76:
c7:ae:f7:35:c0:dc:37:f0:ef:ab:e4:44:df:a8:c6:
96:6b:e9:70:89:9b:5a:16:80:6a:ff:3a:ee:1d:de:
5c:cb:ec:a8:d2:0f:ad:b0:5a:23:1e:eb:c8:4b:76:
d1:a0:05:fa:92:4e:07:42:26:80:6f:e7:69:fe:ad:
4c:e9:04:19:de:d0:8e:3f:e2:50:f1:db:4f:d2:5e:
d4:4a:af:c4:42:af:98:cd:27:a1:ee:e0:10:53:3c:
3c:14:9b:e9:ef:e7:a6:ee:af:54:46:c1:83:96:ac:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A0:95:2A:54:A8:A9:D3:25:0F:A0:65:ED:FC:7C:34:67:80:71:D9
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:66:39:67:49:e5:9e:52:06:6a:31:e1:7f:75:35:fd:e6:6b:
d1:34:6a:26:4b:66:da:22:84:61:c1:22:0f:9d:50:55:2a:dc:
82:5a:af:f9:00:74:94:7c:9d:44:8a:0e:34:6c:e6:c5:a5:54:
7d:33:28:29:b6:c5:0e:31:2d:0c:ca:4c:d2:ad:38:a2:61:91:
ed:ff:51:37:ca:ce:3b:23:8d:53:38:ce:32:3f:76:03:2d:fd:
a3:c4:ed:49:84:b7:ee:e6:b1:a0:14:1c:bc:e0:ad:0c:74:f1:
a5:04:a9:26:e6:82:c6:b3:0c:39:e2:71:54:19:65:fa:e0:fd:
38:78:56:b2:d6:71:85:e0:c5:df:67:57:61:6a:cf:31:ec:83:
02:d7:48:cb:f1:de:c7:a6:37:b8:65:61:01:bf:6d:e0:36:c7:
c6:b8:80:27:4d:ab:a6:14:ff:0e:38:dc:c7:34:33:69:df:ac:
4a:1d:3b:d7:52:17:05:bd:30:53:ac:9e:93:5b:d4:6f:7b:6a:
d8:b0:3e:41:e8:ec:b5:86:8a:71:f3:50:c5:e7:eb:e0:4c:dc:
d4:65:8c:b9:aa:ec:0f:07:6e:d7:24:0e:bb:91:56:fc:3a:ea:
4d:6d:f4:63:ba:c9:1d:11:87:a9:e7:4f:09:bf:a3:8a:b0:e0:
5a:61:5b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:48 2025 by rpki-client