Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
File: QWUyQgoh5CuK0w2iTr9DR96V7zU.mft (raw, json)
Hash identifier: qMOuF2hTOmWmVL6aqCdNDEdBvxP2ASe7CgjGQy9chi8=
Subject key identifier: 7E:36:50:9E:B3:E6:D7:5A:FA:3D:F8:34:DC:7C:19:0C:D9:31:38:9F
Authority key identifier: 41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
Certificate issuer: /CN=416532420a21e42b8ad30da24ebf4347de95ef35
Certificate serial: 0199FB7D05BED30213EB67C7154A31FAFC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
Manifest number: 11EA
Signing time: Sun 19 Oct 2025 08:01:38 +0000
Manifest this update: Sun 19 Oct 2025 08:01:38 +0000
Manifest next update: Mon 20 Oct 2025 08:01:38 +0000
Files and hashes: 1: QWUyQgoh5CuK0w2iTr9DR96V7zU.crl (hash: b0rALnb24gO+ErdWLIrZHR+UNMl0iSTxpK1JVal/eWY=)
2: eV_HY0yWE8mOE1MRDnB0YcYTccg.roa (hash: 5xM8UD0IporPo6ojXDnvNcFP3vOdI9fe0xTb6m2cal0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:05:be:d3:02:13:eb:67:c7:15:4a:31:fa:fc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416532420a21e42b8ad30da24ebf4347de95ef35
Validity
Not Before: Oct 19 08:01:38 2025 GMT
Not After : Oct 20 08:01:38 2025 GMT
Subject: CN=7e36509eb3e6d75afa3df834dc7c190cd931389f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2f:6e:42:8a:68:a3:f5:63:0d:d2:8c:f6:17:
2f:78:4a:74:92:7a:dd:25:27:5d:39:51:3a:fa:0e:
b1:3f:25:8f:1d:00:83:9c:5b:7c:06:0c:5e:22:eb:
9c:b2:99:5c:76:6a:08:93:b3:1f:5c:71:04:d6:b0:
33:2e:04:c7:48:10:a1:49:0b:4e:6a:0e:34:a9:b6:
c5:f6:8f:f9:57:99:2c:f3:4e:1a:ea:3b:d4:d7:4e:
6c:f4:1f:ce:25:9b:e2:85:a0:be:e8:02:f0:2e:97:
10:e6:98:34:99:c8:5a:dc:d0:a4:0f:1b:7c:df:fb:
c5:e2:5e:15:88:bd:db:3c:f4:72:25:4a:a1:96:5a:
09:7a:c5:38:85:f8:9e:d0:ea:87:88:a2:a6:96:f7:
d4:fc:ea:ac:cc:1e:f4:21:6d:67:2c:6d:57:43:86:
f6:6b:a4:a3:44:dd:56:84:29:ef:31:84:11:9a:2d:
5d:9c:e7:0f:43:99:b5:6c:a3:11:80:b9:33:a1:c1:
c5:01:70:43:f6:4b:7e:1d:15:de:ae:e5:94:6d:51:
90:7c:9a:73:8a:9d:f7:10:7c:14:14:86:8a:8c:37:
3b:76:64:92:60:b5:ce:17:14:51:53:ae:96:bd:ce:
12:d1:87:f7:8f:4a:e5:5b:90:69:be:18:92:4c:91:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:36:50:9E:B3:E6:D7:5A:FA:3D:F8:34:DC:7C:19:0C:D9:31:38:9F
X509v3 Authority Key Identifier:
keyid:41:65:32:42:0A:21:E4:2B:8A:D3:0D:A2:4E:BF:43:47:DE:95:EF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWUyQgoh5CuK0w2iTr9DR96V7zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/QWUyQgoh5CuK0w2iTr9DR96V7zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:6d:fc:20:4d:97:7a:b9:ef:90:9f:0f:6a:2d:09:ae:5f:a3:
7f:25:11:95:d7:75:64:2a:5e:96:5b:af:ca:a8:8d:c7:a5:20:
8b:b7:49:df:a5:4c:c2:49:ad:f0:fb:99:e4:3e:88:19:d1:dd:
91:ab:d7:fa:9e:73:67:dc:34:f3:49:df:62:ce:00:d3:ac:68:
23:4b:e4:65:19:44:eb:23:f8:67:f1:49:14:77:35:d6:1c:6a:
da:5e:e3:61:37:8f:dc:35:9a:df:34:37:04:7b:70:bb:9c:7c:
f1:9c:d1:21:3b:05:93:e5:c4:b0:8a:89:09:b2:66:3e:5f:36:
7d:05:0e:d0:8f:89:81:65:6a:3f:eb:72:54:25:7a:dd:ae:82:
d2:5f:aa:e6:6a:44:1e:d3:31:57:0a:bb:47:b1:32:b3:6c:f8:
0b:b2:1e:c7:5a:93:49:6d:98:00:f9:f7:f7:00:c7:25:25:55:
6b:0a:0b:28:80:c0:15:f7:3f:de:f3:3b:c7:20:57:05:3c:9a:
ba:93:6e:c1:ca:a6:de:e7:8e:ad:24:be:dd:cb:68:d7:41:e1:
b0:8e:15:39:7b:85:df:c3:ed:17:e6:a7:0e:67:97:32:1a:4e:
cb:74:03:88:1d:ed:a0:0c:94:67:c1:fb:9b:61:de:45:d8:d7:
0a:55:bb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:56 2025 by rpki-client