Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
File: Q30oDLTq6BVqd9_no__F_UtNv6o.mft (raw, json)
Hash identifier: 2lJfm5kesHuHF8rftpw9cCBcqia+EmBLItHg7ZTILa4=
Subject key identifier: 0D:1A:CD:E8:68:ED:3F:54:9B:12:40:85:52:58:75:6E:AD:D2:02:A5
Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Certificate serial: 0199FAD7BC3AB9A9D1F7B50EB723D9BC37F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
Manifest number: 0CD1
Signing time: Sun 19 Oct 2025 05:01:06 +0000
Manifest this update: Sun 19 Oct 2025 05:01:06 +0000
Manifest next update: Mon 20 Oct 2025 05:01:06 +0000
Files and hashes: 1: NUMGApw0ZIudlY6CbxaMIi5m3Sw.roa (hash: sPPFfl9rDy2r8PN0vy1ncdAusR2ktn2BYpHhqH/9HPU=)
2: Q30oDLTq6BVqd9_no__F_UtNv6o.crl (hash: slGnEOJn04a6nCq5WajLGvFtSkS/mNPC5bmUmNlnjhQ=)
3: qmdW7QDQZDPCWqHqKcF3JA5rms0.roa (hash: ctHCP/FM4qoA2M0yYjlwR9ihsYeU5a4WMdFfP2zXVeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:bc:3a:b9:a9:d1:f7:b5:0e:b7:23:d9:bc:37:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa
Validity
Not Before: Oct 19 05:01:06 2025 GMT
Not After : Oct 20 05:01:06 2025 GMT
Subject: CN=0d1acde868ed3f549b1240855258756eadd202a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:07:f8:30:00:35:47:6a:96:8e:47:18:2e:
e7:2a:66:dd:24:2f:b9:68:c9:4f:00:75:7c:3d:fc:
ff:a9:f1:d1:f8:44:70:f6:cf:5e:a0:1b:fd:6e:4f:
ad:e1:b0:10:1d:98:06:80:1b:bb:68:27:3e:de:ec:
69:56:df:43:1d:3f:62:09:60:46:c4:bc:d3:0d:fa:
2e:b4:aa:df:36:9b:e9:f4:3c:ed:91:3d:eb:e7:81:
8a:9b:92:41:e8:90:42:c8:21:49:09:74:0b:ac:41:
a4:5f:1e:2b:97:89:94:c2:cc:17:fe:bb:be:fe:5d:
11:c5:84:21:75:ff:82:0e:29:3b:c6:04:5f:ce:3b:
54:8e:98:05:3a:95:32:98:b8:7b:7b:b3:16:38:bb:
9f:d4:02:e0:60:5d:7b:01:5f:57:cf:5a:21:a5:d8:
34:e6:f2:f1:b0:8d:d3:00:b6:68:34:4b:79:1f:56:
59:23:96:5e:60:9a:dc:91:19:c5:50:30:83:35:8e:
75:33:bb:fd:e1:eb:ac:d5:aa:b4:53:d6:ce:7f:69:
48:63:0c:78:0b:b3:58:e9:85:00:28:63:b3:b2:20:
fa:04:db:2b:bc:0e:e2:96:53:72:4c:87:ce:05:56:
11:24:69:96:6e:64:81:23:53:d1:95:f4:ff:d6:2d:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:CD:E8:68:ED:3F:54:9B:12:40:85:52:58:75:6E:AD:D2:02:A5
X509v3 Authority Key Identifier:
keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cf:7c:54:fe:b5:6f:79:c7:51:48:f7:7f:34:0e:5b:ca:46:
32:ea:fb:9f:06:d3:aa:c8:f7:86:82:a5:9b:73:28:ac:0c:55:
3c:2d:8d:12:c9:40:81:88:6e:c4:2a:4b:bc:20:00:6c:27:3d:
12:ca:94:3c:28:66:11:f7:10:6a:c6:b0:30:4e:26:c9:af:6b:
01:d2:7f:8e:8f:c2:7e:10:db:b7:84:08:3f:83:31:f5:f3:6b:
6f:d1:8e:b8:ba:2b:f3:bf:5e:cf:1e:a2:dd:91:65:36:e9:10:
27:0a:a2:d3:a2:3c:91:99:9c:c9:65:d8:26:36:86:23:2a:81:
36:35:ad:41:59:89:81:c1:6e:ff:f9:79:50:b8:e5:f7:3f:b6:
6f:10:44:91:fe:a0:da:3d:d7:23:6f:a1:cb:d0:f4:b3:14:97:
0e:82:a0:f4:33:31:bd:8c:51:6f:71:7d:ee:42:77:34:69:a6:
d9:2f:8f:09:a7:b1:21:c4:73:9a:e4:77:54:73:20:4f:f4:7a:
04:b4:4a:a4:5c:74:da:10:7a:de:a6:3e:d5:d0:d6:33:38:16:
88:4f:01:cd:ef:89:46:f6:cb:08:b4:ca:61:aa:af:49:de:fe:
4d:f5:74:1a:11:3f:4f:53:0c:d0:d1:07:99:ac:da:32:6a:02:
9e:a7:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:55 2025 by rpki-client