Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
File: Q0XQdzx63gjUSBnjthG9KXo5idM.mft (raw, json)
Hash identifier: 2C9HfQqVAkWdTOxw3F54jaXZ0J7hMo6XclLgIffuDFU=
Subject key identifier: 9F:CB:B6:32:27:46:C5:00:D0:5F:86:0C:55:93:0E:AE:C3:1F:15:0F
Authority key identifier: 43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
Certificate issuer: /CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Certificate serial: 0199FC214229FCF809C7B3FE114CD2E27732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
Manifest number: 13FB
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: D7IbZMa3P-hRRIAm78DqK4wNZ34.roa (hash: 3Rvd3MmyWPzVOpIFhMlT5LNPsKGSgahML9FUxKiCMwI=)
2: O7r63uTdFaICg1i90uf5cyEl-h4.roa (hash: Efs34tr8Lub/IHxUGCrqJn6lA9J8HyHyjcZJAIyTZbQ=)
3: Q0XQdzx63gjUSBnjthG9KXo5idM.crl (hash: rpLt6FO004DVE9v9+P+Ox8kWvBpZQjlJMqKNbN3JJMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:42:29:fc:f8:09:c7:b3:fe:11:4c:d2:e2:77:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4345d0773c7ade08d44819e3b611bd297a3989d3
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=9fcbb6322746c500d05f860c55930eaec31f150f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:34:a2:31:d9:15:79:a8:c5:32:f4:71:c8:
d7:5d:3c:99:41:52:91:64:2a:72:ac:53:05:4a:b5:
39:eb:90:19:61:00:75:5f:f8:16:0b:5b:d4:0e:04:
4e:d3:b3:e6:b3:18:3e:b4:b1:03:35:56:28:94:ab:
4b:c5:f4:ad:a5:4a:f7:82:a7:7b:8b:97:8c:3e:5d:
46:d3:ba:ce:63:e6:15:b9:89:9a:30:b7:66:b5:dd:
40:07:b8:e5:7a:93:77:be:b6:d0:2f:42:96:8f:95:
83:a9:47:b9:1a:33:ff:12:e7:5b:1e:fc:4e:64:d4:
d5:c9:a0:8b:5c:a2:7f:e5:fe:b3:44:6c:f2:e3:2d:
8c:97:66:ef:bd:6b:1d:da:1e:97:5e:72:e8:78:07:
21:9e:74:df:c9:5b:cd:d8:7e:f4:9c:62:e0:cf:14:
86:fb:fb:7c:65:ea:ce:85:82:54:dc:73:fd:5c:c9:
4a:83:88:e6:22:d4:0c:7a:65:bf:53:fa:84:87:0d:
f9:1a:fa:da:5c:8e:e8:6e:f5:cc:74:d4:37:96:05:
6f:26:0d:92:83:27:39:a7:31:91:99:86:99:ed:88:
2c:67:ca:71:4e:02:ef:04:c1:84:fd:88:cf:77:e3:
3b:1b:04:66:44:76:98:33:ff:c0:0b:1c:d2:1f:ac:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CB:B6:32:27:46:C5:00:D0:5F:86:0C:55:93:0E:AE:C3:1F:15:0F
X509v3 Authority Key Identifier:
keyid:43:45:D0:77:3C:7A:DE:08:D4:48:19:E3:B6:11:BD:29:7A:39:89:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0XQdzx63gjUSBnjthG9KXo5idM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bb9947-172c-48b1-be8e-4c905adbf076/1/Q0XQdzx63gjUSBnjthG9KXo5idM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6f:ca:3b:42:6d:61:49:74:be:1c:15:f8:33:1a:6f:ed:4e:
c6:b4:dc:b8:64:41:50:de:9a:b3:79:4d:33:98:a4:92:3a:dc:
a4:65:8b:62:f6:16:df:a7:00:20:60:88:f4:f4:d2:f7:aa:92:
0d:9c:76:54:3b:be:dc:98:2b:0f:c8:84:bf:8f:53:98:28:73:
44:1b:97:d4:f3:08:7e:06:39:3a:b3:1f:d4:82:75:d8:56:71:
78:e2:18:f2:ca:09:f1:4a:16:6d:14:ad:37:98:ec:cb:af:a9:
48:bf:9a:2e:c1:bd:8e:e7:68:00:17:fe:61:4d:62:7e:c5:5b:
01:df:08:f8:81:ed:f8:e6:a6:16:9a:8f:29:1f:d2:77:f5:97:
0c:52:c4:6c:3b:7f:6d:bf:ab:81:5f:c2:e7:8e:01:41:2b:6c:
c8:77:65:fb:a3:49:dd:57:f3:56:21:0d:c1:42:2e:58:1d:1c:
20:01:e1:08:2a:bf:a2:1b:4f:44:9e:ec:d7:25:df:c7:3b:b0:
77:9c:3b:4b:34:4c:36:df:f3:15:59:01:46:f1:93:05:b8:95:
ee:6a:96:3b:d1:90:f3:ea:b8:69:ee:ec:35:97:ab:6b:7e:94:
5d:33:18:9b:4f:2c:11:ef:8b:86:ce:aa:f1:d9:70:0e:d4:34:
d6:8e:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:51 2025 by rpki-client