Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: HZf1oSKcZuyw9TaOqnB1gEaXO3D8xgM50lYOs0yuC0s=
Subject key identifier: 0D:D9:E0:32:2B:20:B7:3A:43:F2:95:43:52:43:CE:30:4F:25:4C:62
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 0199FCC68CA11FFB606085D9E013B73AFEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 13B5
Signing time: Sun 19 Oct 2025 14:01:34 +0000
Manifest this update: Sun 19 Oct 2025 14:01:34 +0000
Manifest next update: Mon 20 Oct 2025 14:01:34 +0000
Files and hashes: 1: Jz6Plky4nRwLQTJJcOF7jGNXrSw.roa (hash: /BEPfzyhvzI281lagKYoLrBP/3LTnv9Sk0+qZpDUYPQ=)
2: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: JON0WytabE/e2X1Fufai7OiY4kLx673husXSz9zexWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8c:a1:1f:fb:60:60:85:d9:e0:13:b7:3a:fe:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Oct 19 14:01:34 2025 GMT
Not After : Oct 20 14:01:34 2025 GMT
Subject: CN=0dd9e0322b20b73a43f295435243ce304f254c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:a2:ca:89:e3:98:b5:02:e1:e9:a5:9b:2d:
58:3a:39:37:a7:ef:2b:4f:47:a9:a7:31:7e:2b:66:
12:a3:37:1b:9e:6b:63:0c:d1:0e:82:24:16:e9:23:
10:17:d9:de:03:21:a9:0e:d8:46:91:06:60:f6:27:
4e:5d:54:d7:3c:ea:fd:db:98:de:2b:ad:f4:a3:1e:
27:a4:bb:df:95:b0:75:c1:13:bf:db:16:ec:9e:ff:
f2:ea:ab:7d:4f:9e:b9:72:34:c7:ba:ef:67:93:aa:
c9:bb:7f:4c:fb:4a:f3:4c:d3:d8:aa:30:21:8a:e3:
07:9e:7a:bc:d0:fe:6a:50:13:6b:63:77:bc:32:ec:
ff:0b:6c:91:a1:b2:0b:b8:dd:43:d3:61:b4:d4:cf:
ed:05:59:71:ea:cc:d1:fe:3a:d9:2e:59:94:da:20:
31:a7:0d:06:0b:d2:b1:76:12:d2:30:b7:2a:9a:13:
cb:75:69:fe:e4:90:b2:32:c5:f6:d1:5a:62:e3:6d:
a1:6c:2a:3e:36:df:90:16:dc:f4:25:bb:99:ef:85:
72:81:1d:f0:47:ff:c8:e0:b8:59:56:be:b4:5e:70:
f7:73:35:c1:5d:3d:2a:c5:d0:12:ca:29:6f:b6:cd:
28:4e:c0:82:51:58:52:01:cf:d4:d2:2e:98:53:49:
09:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D9:E0:32:2B:20:B7:3A:43:F2:95:43:52:43:CE:30:4F:25:4C:62
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:43:0d:91:45:0a:4d:a3:30:b8:0e:9c:a8:8e:42:95:7f:85:
70:e5:ac:bb:61:3f:cc:90:c9:25:32:0a:02:93:e2:de:39:81:
11:cf:cb:4c:c2:5f:6c:92:4b:f5:da:34:ba:b3:54:a4:48:d3:
88:74:12:c5:52:48:4c:b8:f4:1e:f4:d8:99:3f:fa:8b:38:04:
d6:5b:84:92:df:36:dd:e5:e8:d1:fd:f3:c5:63:ac:47:3b:a6:
65:1d:62:55:88:48:d4:20:4e:e1:13:97:02:df:33:23:a7:71:
49:0e:2e:5c:29:02:30:01:6e:0c:32:42:1d:a6:48:31:06:f4:
2c:10:2b:8c:36:73:08:23:6f:8e:61:82:82:de:7c:28:58:40:
39:3f:ed:35:e9:d5:81:0c:9e:9d:0f:f8:d7:16:ca:06:f4:00:
a2:d9:db:2d:ba:63:a7:4e:94:b3:e7:79:4b:58:ac:8d:2f:89:
78:ab:23:1c:86:80:25:be:5c:86:47:c6:57:51:39:0f:36:3e:
3f:d0:81:f1:13:da:56:15:42:b6:6c:fd:a6:20:09:81:80:ca:
8a:2e:a0:9f:27:19:40:fc:e3:a2:4b:57:63:3f:bf:75:36:bb:
fd:58:d3:27:c1:84:98:83:40:32:02:bb:c1:d4:82:32:a1:cc:
95:1e:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:01 2025 by rpki-client