Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
File: QvZoAOPk7qCxeqfOG-anEIW7C7U.mft (raw, json)
Hash identifier: R0jkA2dXmjmakoMR++tpMfN68zy4SQnfMTQlCReehEY=
Subject key identifier: C0:3F:C4:18:F1:96:E0:F1:23:F3:4F:82:22:3C:03:A0:46:5D:E1:30
Authority key identifier: 42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
Certificate issuer: /CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Certificate serial: 0199FC218FA49E0C2E323F09D80036AD33E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
Manifest number: 2F
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: QvZoAOPk7qCxeqfOG-anEIW7C7U.crl (hash: yqEPGKuMkUUl2Dy57RNt+az1OMWDqFslnCZEJ/vZhPc=)
2: taBuGNscecueOGdxDI5_sp5Q64s.roa (hash: jfs6i9kfrvsOmGXfhBNY9aaIV6kpwF4dvrqA21q44KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8f:a4:9e:0c:2e:32:3f:09:d8:00:36:ad:33:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=c03fc418f196e0f123f34f82223c03a0465de130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:f5:3a:2f:c7:7a:21:cd:97:17:ef:04:d1:
b8:19:a4:d1:66:ea:97:6e:ec:80:e3:78:c7:37:a2:
9a:cd:fb:7f:74:a6:ca:21:f0:79:61:93:45:99:24:
c3:9e:30:c8:2c:9b:b3:b0:6b:54:4e:ff:a0:e2:7e:
6a:82:b6:ca:0a:4c:49:04:19:fe:07:47:bb:35:06:
98:ca:20:f6:f1:c5:27:28:1a:ea:b9:61:d0:6c:2e:
bd:ff:ef:64:d7:cb:56:3a:ca:4f:ed:a4:ff:b6:91:
2f:d5:f2:14:4b:8e:1c:8f:67:07:b7:95:53:8c:5b:
ea:71:e0:77:97:0f:39:3b:9a:a0:36:8e:98:13:88:
53:d1:09:b7:0a:10:d3:f5:48:dc:bc:c8:e0:8f:85:
c1:06:76:9a:29:dd:32:c9:82:65:74:d4:98:8e:55:
1a:ae:05:1e:65:bd:0d:e7:a2:e3:e5:a8:93:87:14:
38:71:d2:ae:a9:49:5a:a7:19:aa:bb:20:f9:da:76:
29:0c:bf:e9:54:0e:fb:62:2f:f2:7c:eb:10:7d:34:
dd:f1:4e:c8:61:fb:0b:b2:ff:23:00:3e:8a:83:34:
87:a1:99:da:0c:2a:bf:6a:d9:1e:01:fe:aa:d0:b6:
5f:bf:0a:cc:22:60:27:3a:25:1c:0c:e0:6c:a9:68:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3F:C4:18:F1:96:E0:F1:23:F3:4F:82:22:3C:03:A0:46:5D:E1:30
X509v3 Authority Key Identifier:
keyid:42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:c2:52:a1:d9:f2:3a:c9:0b:b3:9c:f6:7b:60:11:91:0d:
44:5b:a2:c0:5b:97:79:59:46:af:29:c4:84:86:40:34:e7:89:
6d:2a:2f:fc:8f:02:1d:62:84:13:7e:ef:cf:b4:f5:6b:23:a1:
eb:29:a0:ba:77:0b:4b:f7:75:95:ac:56:73:09:f0:5f:bd:81:
80:78:b6:76:ba:81:e6:9f:cf:db:e4:a1:d4:73:01:dc:2f:2b:
1d:ce:63:43:74:a6:17:e7:52:d1:a3:28:c9:bd:07:28:6d:25:
e3:dc:f1:05:c3:07:73:97:00:d7:39:8e:59:26:ed:58:43:d0:
cd:4c:35:55:6b:8d:a9:87:82:34:7b:b0:5a:3a:49:01:d9:f4:
34:ab:09:81:22:3e:ef:af:f0:02:c0:13:61:72:34:dc:d3:e9:
b4:39:bf:2e:3a:cc:8e:77:dc:4f:be:f7:e4:3e:c3:ba:ea:ca:
60:07:3b:ba:7e:af:cf:1e:b5:c7:fa:82:60:19:0e:46:48:9d:
34:ad:bd:ba:4f:3e:b0:3e:b0:48:02:65:15:5e:c4:6b:67:7d:
e1:42:6c:dd:27:46:09:c0:a7:ef:cc:a2:a5:65:ca:55:c3:ff:
1a:77:20:3a:ec:57:c7:16:11:6b:0f:f3:37:41:64:30:ed:35:
e5:51:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:54 2025 by rpki-client