Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json)
Hash identifier: pyUOz84BEcqMMKY+wK2HnhOPo0FUaNxNCIEBFcmZ9CA=
Subject key identifier: D3:0F:E7:CF:98:2F:E6:CD:73:1E:F2:51:6A:72:F9:5F:E9:C3:91:AF
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 0199FC58C8EA1C874E4C6700DC1AE3A1E1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
Manifest number: 15F7
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: neDA6Holpo7Ae8HI7qWr7xD1/UcyfSPOPZRHtHI5GwU=)
2: xqT_w2QIz7QngYO0UjYqCZFOQm8.roa (hash: voqA9hVWd7OTxS2rJiecPACQATaq8yqLIFOOJeCGw4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c8:ea:1c:87:4e:4c:67:00:dc:1a:e3:a1:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=d30fe7cf982fe6cd731ef2516a72f95fe9c391af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:6b:3b:2c:4c:06:02:c1:23:38:37:33:8c:
61:63:f9:2f:ed:70:5a:f2:0c:e4:8c:f6:5e:3a:0d:
99:db:71:d0:aa:71:6c:84:5e:32:93:9a:96:0f:06:
cd:cc:20:c6:75:d7:35:c7:0e:80:9d:98:7a:0b:f2:
59:64:3e:10:cb:04:0e:a2:e6:80:64:19:f4:2e:2c:
46:c2:e4:ec:da:6e:39:b4:92:73:df:03:4c:16:af:
02:9d:70:90:dc:8f:04:c2:78:d1:42:01:b0:87:da:
58:bd:3e:4b:9d:5a:a5:67:5e:78:72:d0:8d:c3:17:
1d:2b:c1:fe:50:2d:52:1a:2b:fa:37:da:3a:96:c8:
34:ec:37:31:13:5b:34:09:62:6f:0f:b5:f8:a3:08:
3c:be:ea:77:ee:77:f8:68:c6:27:cf:49:89:11:1b:
ad:95:e3:55:24:6f:e8:e3:f9:9f:3a:0b:bc:09:e1:
48:aa:30:cd:31:e1:37:74:fc:5d:7c:bb:71:a6:c7:
ea:d5:24:7b:a3:ba:71:97:02:ed:65:e6:35:ea:61:
e2:bc:7c:0e:8e:07:bc:f0:40:bc:13:f3:d4:40:f1:
4f:b5:87:4c:ec:b1:47:9b:d4:75:ac:5f:33:77:0e:
92:87:90:86:86:ad:25:ca:56:40:06:23:60:3e:1d:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:E7:CF:98:2F:E6:CD:73:1E:F2:51:6A:72:F9:5F:E9:C3:91:AF
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:a9:66:14:a1:8b:fe:0f:79:e4:bf:1b:73:af:4e:a5:0c:
b9:46:78:b9:4d:04:5e:42:60:e7:8e:70:77:69:3c:10:fb:2c:
03:81:cf:75:d5:fa:74:7d:b9:f0:0b:e0:83:b7:1f:e0:98:34:
5e:bf:5c:b3:a8:71:0d:6e:f2:38:e1:f5:f5:b5:cd:39:2c:bf:
08:f2:f8:f9:05:b0:89:c0:26:f2:49:0e:81:b0:1c:df:1f:e5:
f2:0f:4d:b1:c2:0a:76:e7:46:40:3e:a8:71:d8:65:aa:80:ea:
ca:bf:48:2b:7e:e4:a9:31:a4:1f:c1:37:91:28:c9:a4:56:a1:
cd:9a:ad:f5:9b:cc:be:3a:d5:d5:31:80:20:55:a3:0a:3e:1a:
47:89:40:4b:4c:c1:82:c8:35:b1:09:52:db:8f:8a:49:82:80:
43:a7:85:f6:dd:18:46:70:f7:9e:57:67:a0:c1:72:ce:08:6b:
55:da:da:35:1e:5a:1b:e6:1a:74:43:9c:27:35:cc:8b:ec:4d:
37:eb:4d:8a:fc:86:c5:d1:ad:17:48:19:c5:14:a2:3b:ff:ae:
b4:44:bf:e0:2b:f4:7f:56:e1:67:91:3d:bf:fa:e8:b6:26:e1:
85:31:aa:15:b6:22:3f:d6:83:44:77:68:06:39:6b:89:25:c3:
2b:72:6c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:43 2025 by rpki-client