
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: 8ByV/TA6UWhhZvD+SRSUOv75X7iKJdm7bxF9TDIx7m0=
Subject key identifier: AB:63:4A:F2:1F:DC:A3:24:50:D2:99:33:C9:E5:6A:70:9B:E1:A9:D6
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 0199FA6A12DA175B3FBB0F91C03DA86C11F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 06EF
Signing time: Sun 19 Oct 2025 03:01:19 +0000
Manifest this update: Sun 19 Oct 2025 03:01:19 +0000
Manifest next update: Mon 20 Oct 2025 03:01:19 +0000
Files and hashes: 1: 1-XrmEJC-kOLvoeP9rgvbg0A53hs.roa (hash: EiYdih7Qfn/m/+BWxzflbgrLM7vuel5hPMdd9Y8tb4I=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: oSF0iIByq3oklRfshKJV2PhoG0r3ejkfAR6d9rKD9ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:12:da:17:5b:3f:bb:0f:91:c0:3d:a8:6c:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Oct 19 03:01:19 2025 GMT
Not After : Oct 20 03:01:19 2025 GMT
Subject: CN=ab634af21fdca32450d29933c9e56a709be1a9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:a7:93:dd:e5:9c:02:0f:1d:c7:e0:36:20:
9d:7e:c2:aa:72:68:f2:af:f6:93:8a:8e:3a:c3:47:
ec:2c:8a:09:37:cb:38:7a:fc:63:ca:a4:97:cf:ad:
3a:38:8a:81:a7:3c:45:4e:1a:d1:af:f1:2d:fc:e3:
de:7b:a7:21:28:50:75:79:b7:7b:48:b4:dc:60:f1:
f8:43:93:fa:9c:6c:ac:ca:5b:2d:1d:da:1d:a9:01:
3e:2d:f7:5b:6a:68:f0:4b:1c:8f:a0:50:30:cd:a8:
d9:9a:3d:62:82:16:70:0f:bb:39:5e:1f:66:66:20:
cd:1b:b3:c4:76:c4:0b:85:2d:da:6b:75:2e:f8:d4:
55:7f:d7:7b:20:dc:89:0b:9a:61:82:33:a5:55:58:
1b:f6:ba:65:31:a6:81:01:9e:1d:b6:49:bc:04:38:
6e:1d:fc:1d:23:bd:58:6e:fb:3c:4f:f0:af:dd:10:
11:83:6b:a6:08:e2:05:88:0f:2c:42:de:e2:24:05:
54:31:df:64:49:5b:18:2b:8a:72:df:1d:5d:0b:30:
7f:f4:d7:68:c7:ec:89:a9:6e:48:45:d8:b4:e9:b8:
02:3b:4a:85:95:d7:ff:02:fd:02:6f:3f:e4:13:d4:
49:6f:f4:f2:85:b7:1f:cf:00:52:6a:a9:15:bf:0d:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:4A:F2:1F:DC:A3:24:50:D2:99:33:C9:E5:6A:70:9B:E1:A9:D6
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1b:55:30:21:5b:64:64:99:cf:48:fc:91:73:93:33:d9:cc:
3d:ce:fc:fa:69:5c:14:17:6f:bb:02:c2:58:43:3d:6b:86:77:
12:74:bf:1b:7e:1d:e5:a9:d3:ad:e7:c1:2a:9e:c3:a6:3e:45:
e1:3b:17:e4:b0:f6:06:c4:09:45:87:f2:c0:c3:3e:c5:b5:f0:
39:18:67:58:b4:e1:23:b2:11:1a:88:ae:c0:36:97:d5:bc:60:
fc:04:f1:56:0c:26:ee:32:fd:95:8e:d8:38:44:2d:ef:87:76:
22:5d:15:54:82:9e:7d:8d:ad:14:9a:40:73:b3:fb:6a:f4:45:
37:08:3e:1c:b1:b5:3e:e3:53:4a:12:f4:68:9d:44:ff:30:31:
88:85:04:35:06:96:16:68:7f:60:5b:ca:67:23:a0:bc:f1:40:
95:c9:5a:59:11:8e:d8:0f:b7:72:b8:0b:f2:ad:f4:f3:da:c6:
5f:08:82:8e:43:ca:21:af:8c:84:2c:ba:cf:0e:a2:0a:92:55:
9b:9c:a5:1d:9f:91:1e:aa:f5:02:b1:6e:e4:1e:2f:14:d4:c3:
51:e7:8f:55:de:84:71:22:91:23:ab:87:b7:6f:e1:be:f7:6c:
90:2e:a4:54:12:ec:b6:18:f6:01:11:a4:7e:91:63:ad:0b:9e:
1a:d7:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:16 2025 by rpki-client