Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier: 29PDL/UUoGEf0q5vcgGjETDswMHPXi6ruqUtWt7xRE4=
Subject key identifier: E0:E6:09:64:F6:06:37:D4:F1:F2:D5:33:0E:C3:64:F0:DA:D5:BD:C1
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 0199FC589EDD91F78108EDBC60F36FBA8872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:30 +0000
Manifest this update: Sun 19 Oct 2025 12:01:30 +0000
Manifest next update: Mon 20 Oct 2025 12:01:30 +0000
Files and hashes: 1: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: 1bI+kfxo1zbBuES8i1KOt2FcCwsNf0t4QJ/FpIhr9HI=)
2: Y6QTaw-FjofB_OhkxIXlcm9P4-I.roa (hash: 4Yb+dRFpkkMPfeWzASwoM5NrRtcERhjg7Yl8jCZxXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9e:dd:91:f7:81:08:ed:bc:60:f3:6f:ba:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Oct 19 12:01:30 2025 GMT
Not After : Oct 20 12:01:30 2025 GMT
Subject: CN=e0e60964f60637d4f1f2d5330ec364f0dad5bdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:e0:f9:09:a7:52:4a:22:53:32:25:b1:43:
75:75:a3:a1:bf:0c:e2:12:23:c2:92:41:64:1f:c7:
9b:d2:62:c1:6d:fa:36:45:78:a8:13:cc:e3:87:bb:
c6:e0:00:7f:f7:3d:95:96:61:9d:ba:60:7c:2d:d1:
09:84:d7:09:98:99:13:fe:d8:92:50:d1:52:65:90:
dd:88:dd:62:10:89:f2:0e:02:25:a4:df:c3:66:37:
9c:49:4e:42:a2:53:91:17:82:e2:fa:5e:45:bf:c0:
19:35:4b:5c:79:43:83:0f:94:3e:c6:49:5a:e3:7c:
ef:4e:eb:1d:dd:5c:f0:45:1f:7a:53:16:66:01:7a:
c6:13:99:fd:2a:a0:4e:ea:fa:78:f3:2e:37:64:85:
15:5d:a2:60:60:84:11:08:ef:fc:df:78:08:70:68:
08:cd:45:4b:30:4b:82:e4:94:d4:f8:28:07:3b:53:
2c:70:65:e9:c2:a0:6b:6c:72:78:93:38:85:b4:35:
e2:87:64:fa:63:62:f1:fa:65:3d:c1:da:44:80:a1:
ed:e8:1d:f2:24:b7:5e:e4:4d:34:f6:48:00:25:99:
0e:9f:54:7b:9f:c8:45:67:eb:72:26:98:4b:37:4b:
d2:b2:35:90:c5:f7:53:9e:9b:31:04:b7:cb:be:8d:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:09:64:F6:06:37:D4:F1:F2:D5:33:0E:C3:64:F0:DA:D5:BD:C1
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d1:67:24:8f:c8:8d:79:e1:d5:55:3b:e8:7d:d1:5e:fe:43:
f4:10:38:99:67:bc:f3:1f:a9:2b:5e:1e:f4:4d:9b:17:06:c0:
77:e1:65:8d:c5:f7:fd:b8:18:8e:58:eb:d3:7b:d2:d0:35:ab:
64:c6:07:4b:c0:6c:27:8c:ac:35:2a:e9:82:d0:28:f4:66:dd:
c2:3a:b8:ad:3f:2a:70:07:a0:a0:c9:a1:44:44:93:b5:b9:47:
bb:fa:31:de:57:09:c3:90:79:f2:13:e7:b3:58:97:f3:98:84:
f1:d5:c3:dc:3f:aa:c2:07:d9:98:22:5c:3e:63:ee:90:70:03:
1f:77:25:5d:13:07:0f:af:53:e6:08:7a:6c:2e:68:6b:e7:6b:
3f:50:c7:48:9f:fe:fb:df:85:f5:d6:1f:10:16:86:47:07:81:
a6:b2:da:c3:9a:3f:5c:10:54:3d:2d:f1:7b:ba:32:22:91:18:
3a:1e:41:6f:0d:4a:ee:dd:53:6e:74:5f:99:42:1a:8d:31:38:
f3:77:f6:82:5a:71:d4:db:c7:c9:e7:c8:9c:fe:a7:47:41:7b:
8a:a5:7a:2a:52:69:98:e9:a8:95:72:81:b0:60:94:dd:9e:96:
b7:dc:7a:1d:02:7a:d2:16:fa:30:a1:34:62:c5:15:24:e9:15:
36:70:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:19 2025 by rpki-client