Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
File: QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft (raw, json)
Hash identifier: 04FR5qKJ3n1OGKTAyhEUu7CKQIXyN1HHa8B1sXo7et8=
Subject key identifier: E9:B6:DE:2C:EE:CC:5D:78:3E:95:36:A7:32:20:08:D6:DE:26:19:FB
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 0199FC8F7C144E96A388A206235A35913856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
Manifest number: 1226
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: C3yypRlZtvO4qRUDoeqrvhpXXFU.roa (hash: U5x8oZ9ETTHkITHFM+Dz7ZwF5Z54RJdp83tFjx6Le08=)
2: QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl (hash: +ItF+XLUAg3VzmRfxy0RibXoG2mfywhKb8PRtKVR0aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7c:14:4e:96:a3:88:a2:06:23:5a:35:91:38:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=e9b6de2ceecc5d783e9536a7322008d6de2619fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:62:0d:69:3a:d0:93:b3:9a:03:71:0e:0e:
93:5e:6f:42:f4:d0:68:06:cb:fb:00:dc:92:fb:40:
5c:91:c5:9b:88:3f:00:19:d2:94:26:77:4f:c4:63:
4c:aa:d2:13:1b:eb:c6:77:ff:7f:1d:f4:2d:b3:0e:
6f:06:99:eb:07:5a:53:09:b8:fa:0c:c8:0f:b2:7b:
74:48:2d:22:48:51:d6:9c:95:b4:b5:2d:7b:f8:b0:
f5:e0:a4:84:db:15:ac:af:c8:67:d6:10:22:ef:2e:
13:ef:a4:a0:5b:1e:65:f7:da:a3:2b:38:08:5b:f5:
95:1f:cd:39:52:13:9b:26:61:c9:59:8b:b6:c4:ed:
91:e9:dc:f8:98:80:c5:25:11:ff:7d:e4:43:2f:e9:
23:a8:12:00:cf:c7:f1:c9:4c:43:21:89:dd:e3:1c:
f2:4d:87:e4:ec:1f:ed:dd:4d:f3:12:dc:f9:e6:49:
76:b8:83:82:ae:eb:51:28:9c:08:11:56:2b:5e:fe:
ec:9f:02:41:80:22:5e:10:c7:a0:af:2d:a6:68:b3:
dd:6a:a7:cb:e1:18:29:bd:87:6b:64:8f:2a:91:40:
65:b7:8c:10:eb:67:38:01:50:83:99:1c:81:c6:ee:
bd:a3:62:4a:f5:ab:26:95:d6:cb:02:72:70:ce:d2:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B6:DE:2C:EE:CC:5D:78:3E:95:36:A7:32:20:08:D6:DE:26:19:FB
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e5:54:39:ee:e1:8c:05:de:d2:6c:13:1c:66:b8:16:0c:22:
3d:ae:f0:33:04:4f:83:ea:a9:f5:73:03:09:a8:f5:c6:a9:bd:
f3:fd:c0:7b:d9:64:f9:84:d2:f4:ea:65:91:a9:41:89:9f:5a:
d2:e5:a6:0e:2e:fb:de:5d:59:34:97:e4:4f:5e:62:66:78:07:
0a:ac:b3:f4:a3:3d:e5:b7:d8:f9:7e:b8:c8:d0:92:21:f4:9c:
81:dd:88:48:75:fe:8d:b2:54:f8:d9:5c:1c:1e:e6:16:00:91:
14:d3:5b:e0:80:c5:84:68:87:5c:f1:28:08:57:c8:c1:bd:7b:
8b:4d:9a:15:74:ab:06:56:3b:5a:f7:27:08:c2:cf:45:01:5b:
8a:e6:e9:09:fc:ae:2d:8c:48:2c:50:1f:ea:56:e0:7e:83:f2:
a7:dc:1c:39:55:ce:d7:4d:eb:5f:a9:2d:86:a4:42:8c:e8:69:
10:80:46:d3:85:80:e1:97:3e:22:e9:d6:84:f2:63:87:ce:68:
e0:0d:bc:ae:63:78:5e:93:f8:5d:d8:58:37:b5:8e:f3:cd:8f:
51:3a:e4:c1:0e:81:18:3b:6e:d1:e9:b0:14:0f:b9:10:16:a8:
ef:0a:c0:bb:ba:97:2e:30:55:4e:5c:1a:0c:3e:3f:2e:ae:5d:
65:82:ce:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:36 2025 by rpki-client