Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
File: QOxdgqjrXZjOduYdr-UXZh_E5nU.mft (raw, json)
Hash identifier: 8S0TB075P1NIu1O+EQtTVx9300xOiaDT9qZjzDMsmLU=
Subject key identifier: 3B:08:69:AC:60:29:EE:C8:90:1D:7F:5D:D3:A9:B8:30:55:BC:C0:26
Authority key identifier: 40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
Certificate issuer: /CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Certificate serial: 0199FCFD9F0B7EEAC5FC0EB50A2E65D0EFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: QOxdgqjrXZjOduYdr-UXZh_E5nU.crl (hash: SPuKHLlnygjWYsT34g+rW091QhLJWxpfKiHQ6vIlwRY=)
2: y8Eeia8hdhX_DpCgeBhu63E2X4A.roa (hash: wzZxfTRF1LtzRT1r6hfEh3O3egTZFWx9R6sOBFN3GRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9f:0b:7e:ea:c5:fc:0e:b5:0a:2e:65:d0:ef:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ec5d82a8eb5d98ce76e61dafe517661fc4e675
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=3b0869ac6029eec8901d7f5dd3a9b83055bcc026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:a5:01:82:85:ec:8a:71:39:c2:6d:a1:32:
26:f2:84:00:d1:b9:32:23:41:d9:10:5f:be:b9:9a:
a0:7f:60:22:2c:02:e8:40:36:b5:10:1d:c4:2c:4e:
03:f2:93:be:31:fc:d3:15:5d:a0:3e:30:88:c9:30:
7f:91:3a:80:c6:5d:6e:6c:d1:8c:58:cd:34:16:a9:
93:39:7b:20:b0:61:ac:e8:34:45:ee:d9:7d:33:44:
86:56:89:88:45:cb:07:c2:94:85:fe:56:63:60:76:
df:68:bb:6a:23:73:77:7c:75:31:eb:41:41:9c:99:
a0:25:a3:7e:3a:c6:9f:da:5e:5a:f5:31:01:67:48:
2a:04:20:ed:81:46:4b:15:af:c3:cc:e5:7e:04:b0:
3e:f8:d0:df:ed:66:c8:5a:6e:13:92:77:43:c6:49:
fe:a1:68:9c:51:83:27:4b:f1:e8:7d:e8:6f:8d:eb:
f4:dc:98:9b:8a:22:2c:9d:cf:86:64:1d:09:4d:6a:
d6:2b:a2:de:c6:c2:52:5f:71:a2:b5:3e:02:c6:dd:
0d:d3:ab:55:fd:e4:81:c0:56:d6:20:ab:52:55:9d:
c7:29:1e:02:23:b9:a1:2e:e9:42:e1:65:83:31:3d:
3a:48:df:3e:05:dd:56:e8:f0:90:d2:82:17:b1:43:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:69:AC:60:29:EE:C8:90:1D:7F:5D:D3:A9:B8:30:55:BC:C0:26
X509v3 Authority Key Identifier:
keyid:40:EC:5D:82:A8:EB:5D:98:CE:76:E6:1D:AF:E5:17:66:1F:C4:E6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOxdgqjrXZjOduYdr-UXZh_E5nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/67e755-3c54-45db-89b5-df31745cc229/1/QOxdgqjrXZjOduYdr-UXZh_E5nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:07:a6:5e:36:43:6f:ec:00:fa:52:13:e6:4c:47:89:b3:5a:
e4:dc:be:46:2e:cd:c2:18:6f:4c:7e:92:fc:d4:b7:3e:23:76:
12:7a:73:d2:38:e5:d5:39:f4:27:88:86:a6:4e:3b:13:e7:6b:
38:45:47:78:eb:76:86:a9:7d:db:70:63:2c:fc:e8:13:e3:2c:
8a:55:83:66:3a:3a:ab:0d:79:30:1f:9b:55:ae:c3:42:5a:ec:
77:7a:4b:1f:d9:7f:1e:64:0f:2c:1f:4d:6a:46:c8:69:31:49:
bd:6a:0c:7c:36:82:f5:43:67:d7:b9:f8:4c:4a:b3:40:7b:42:
c5:37:01:45:aa:10:a1:08:4e:1e:3a:5f:f3:48:be:6d:dd:38:
6e:41:0b:e2:ef:66:ce:31:8d:75:fb:9e:97:15:17:fc:15:e7:
a5:71:1d:3d:7a:59:6d:4b:fa:78:50:04:37:d9:8a:56:db:eb:
44:6b:ba:bb:fc:f1:4c:2c:30:44:41:16:82:49:1f:24:17:ea:
1a:c7:b3:d2:b6:9d:7d:94:4e:56:40:e9:cd:4e:dd:e4:52:f3:
5f:99:48:2e:c3:6d:68:5f:68:92:99:f2:23:03:54:c6:2a:5e:
f7:f2:2e:e0:65:d2:01:fc:d6:79:f4:b4:49:7b:f2:91:69:06:
ef:8e:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:55 2025 by rpki-client