Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: bxWA8hiH8LkSAtDx0si4Fl0IIgZVmwrxy7TImuNQlvU=
Subject key identifier: 00:9C:4F:A2:E0:D1:46:10:96:52:EC:17:7F:7C:13:FF:47:FC:A5:76
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 0199FCC64DFE4C0A3080C818C15D149E5607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 1679
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: 9uoxrAWbo4TIB+WPeYoxAmcrkWxdaZU4Z8+b6qS5woQ=)
2: RhrEJBm06vcPBY7X0Je_fY5rgcI.roa (hash: 4yKx6aLoX0+QkHu1SlH9OK51/kRC6FYJDLkFroupLIw=)
3: mSlCJZv4uLXPX9TG5FqcmvMai0Y.roa (hash: Iq0hlW5EajbykdfiIDL0asLPrwjWnTj7+DtJoBY9nFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4d:fe:4c:0a:30:80:c8:18:c1:5d:14:9e:56:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=009c4fa2e0d146109652ec177f7c13ff47fca576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:75:19:c2:3a:a9:26:4c:5f:73:77:f7:88:
6e:3c:d4:99:40:a3:8d:1a:63:ac:f4:be:66:01:27:
14:79:4e:a5:fb:bd:6e:aa:20:20:87:be:f4:17:7e:
d9:38:e6:6e:83:5c:f7:9a:9b:25:4f:ef:3b:c1:5c:
89:85:20:c5:06:2a:7f:46:bf:71:e9:af:f6:3f:8c:
a9:0b:5c:ba:52:7f:6f:90:83:b7:ac:3c:92:83:79:
7f:66:8c:58:ae:51:f9:f0:ea:46:60:b2:33:e1:9b:
bc:f7:5a:0f:78:3f:2e:66:8c:b2:fd:54:d8:11:d4:
8b:09:cc:53:1c:ba:94:39:31:72:a0:ae:3e:d3:17:
7c:e9:ee:f4:89:cb:f1:62:76:30:c8:90:ce:ec:75:
9c:b1:1d:fc:31:0d:be:bd:26:07:ec:d6:5c:1f:3a:
f1:63:2d:3c:cb:a1:32:ae:d9:b2:69:d5:63:66:ee:
48:5a:0e:b1:2c:f1:68:3f:90:7b:ee:74:45:a0:81:
e5:c8:9f:db:40:44:23:9f:8c:b0:e6:8f:b0:2b:84:
50:71:5f:89:ea:b2:5e:7e:90:86:57:17:43:9a:de:
38:23:2f:a9:d6:a5:1c:f7:2e:03:ab:36:7a:d4:23:
04:0b:71:5e:13:f4:b2:71:02:3f:a3:60:ed:a7:78:
9d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9C:4F:A2:E0:D1:46:10:96:52:EC:17:7F:7C:13:FF:47:FC:A5:76
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f4:40:09:b5:18:d2:0a:b7:d9:c8:17:e5:a9:73:c3:2f:2f:
a1:b8:4c:29:90:60:eb:bb:f1:34:40:96:df:03:c3:92:7c:1c:
ef:f9:2a:78:a8:ec:ac:d3:87:f5:35:14:ae:31:4e:a0:41:c8:
97:6c:f0:d8:12:4a:9a:a4:55:0a:e4:d5:bf:41:f9:8a:db:ee:
51:69:7d:95:81:39:77:4b:c5:ec:55:fc:af:73:34:e0:d9:17:
96:8e:c6:cd:b7:81:9e:79:64:cb:31:e3:eb:7a:3c:e2:dc:87:
2e:bc:a6:b6:f7:c9:9b:f1:8a:13:cb:6a:2f:07:e5:48:7f:15:
8f:67:a7:e4:37:5c:b2:e0:62:e0:2c:99:67:7d:7a:d7:97:92:
49:d3:33:f4:5f:21:86:0b:33:59:df:f9:9c:04:64:00:e4:d8:
99:b4:a6:25:7d:72:f0:cc:1d:3a:b3:52:b6:25:c0:21:c7:af:
9d:92:9f:bd:4f:b1:e0:22:5d:73:1d:b1:94:9c:8e:d6:a4:7c:
eb:4a:2d:a7:2f:01:42:a2:6a:39:2e:ff:df:43:6d:ec:ba:cc:
ee:1a:51:4a:d9:53:3e:c8:af:80:8c:94:16:73:df:c5:98:1d:
f6:de:22:00:4e:e2:70:1f:06:ea:41:03:17:a8:13:88:f3:90:
b5:25:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:07:20 2025 by rpki-client