Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
File: Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft (raw, json)
Hash identifier: luO9wHDQrgLbkHk7GHg2pLm6h2P9sMP7l/cKl+ZfcUs=
Subject key identifier: 0E:20:6D:C2:F4:6A:75:17:4F:E0:A4:9D:3F:2F:B2:57:EC:15:42:12
Authority key identifier: 41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
Certificate issuer: /CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Certificate serial: 0199FC21638FB329EDA7FAE49356FA45AB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
Manifest number: 0CB6
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: 9DaFft1ZRBebRPooZGGkOPjqAbQ.roa (hash: lYC82jjgh3RxcDkcuO3IXX6eKV+DE4TIh12Xui9zOW4=)
2: Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl (hash: cY9S0x8xkRutxTWepXCtXe5aIavNr7s7pfbWn4TV4ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:63:8f:b3:29:ed:a7:fa:e4:93:56:fa:45:ab:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fe6d0102998c386f8d856fa5f91d7ad3ab4d77
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=0e206dc2f46a75174fe0a49d3f2fb257ec154212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:ea:c5:12:e5:63:cd:84:75:e7:1e:b6:a7:
2b:b4:d7:29:e7:23:5e:5c:a8:90:f5:74:4a:59:92:
ab:00:22:16:76:4c:0a:f1:ed:9c:2d:aa:22:dd:fb:
12:f4:83:d8:24:71:dc:46:ae:4d:5c:65:22:7f:b9:
c7:f7:21:39:7e:e8:72:18:6f:42:cb:97:84:4f:4a:
6a:b2:f0:24:93:3e:a0:d9:ac:78:ae:b9:c6:95:c9:
2c:44:db:ae:ae:7a:4b:ad:45:3b:66:23:f9:5f:9d:
15:49:e4:7d:97:07:a0:18:59:61:e1:fc:1c:17:3f:
e9:43:6f:83:5f:fa:af:5f:21:d1:10:e2:cb:b2:94:
52:1f:d3:7f:2b:cf:ff:2e:21:86:28:fa:29:78:de:
a1:18:49:a4:7c:09:8e:6f:f6:bb:c0:c4:2a:12:ae:
1f:8f:a5:a9:8b:c7:6c:28:60:06:c3:ea:c3:a9:c4:
f8:76:bb:d2:ea:94:5f:0d:0f:24:94:eb:51:ac:28:
e5:a5:58:98:43:02:d2:71:3d:89:5e:5c:74:09:26:
dc:95:f4:e2:67:3b:84:ac:64:69:3c:de:77:88:c7:
39:61:22:52:0b:ca:d1:85:bc:0b:4b:2e:e5:13:2e:
92:01:3f:c6:a7:bd:0f:c1:e0:7c:33:62:92:06:17:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:20:6D:C2:F4:6A:75:17:4F:E0:A4:9D:3F:2F:B2:57:EC:15:42:12
X509v3 Authority Key Identifier:
keyid:41:FE:6D:01:02:99:8C:38:6F:8D:85:6F:A5:F9:1D:7A:D3:AB:4D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qf5tAQKZjDhvjYVvpfkdetOrTXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/12fe03-a2d4-4ab4-94ba-8cb6d0e5cce2/1/Qf5tAQKZjDhvjYVvpfkdetOrTXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9b:bd:9f:5c:67:f2:dd:ab:91:90:a6:61:3c:78:62:b0:ff:
dd:55:5a:89:ba:a5:02:f8:2a:82:31:43:06:aa:4a:03:f0:57:
f1:d7:26:a8:06:57:cb:80:50:32:1e:69:b6:21:47:17:69:a3:
66:02:62:9e:d9:bb:ce:18:81:11:0e:c3:7e:20:d7:fc:64:9c:
9e:27:66:21:83:5e:58:32:62:0b:41:8d:a6:25:ce:4a:92:e4:
3f:ce:ed:1f:a7:a7:c2:70:2a:fd:9f:3c:8c:21:23:b6:57:d1:
11:7c:c5:2c:65:3e:2e:c8:0b:9b:e8:3a:13:b0:93:03:5c:87:
de:71:7d:48:75:8d:a3:6d:f2:df:00:47:18:95:44:84:d8:f6:
e0:4e:27:49:fe:5a:96:6f:48:27:10:a5:fb:be:0e:55:ba:07:
8f:a8:15:f1:c7:39:e5:cf:35:4f:82:f5:88:71:84:23:5c:93:
4b:87:93:f8:d8:54:31:5e:27:20:df:15:6c:e6:9c:1b:50:51:
c8:1e:08:dc:d1:72:53:6e:fe:bf:70:a7:b5:f1:85:25:49:71:
7f:a4:ea:56:cb:48:97:14:05:1e:91:3a:a4:69:01:e1:db:13:
38:cc:17:f9:c9:71:8f:e9:d4:0d:f5:78:c5:45:d7:48:0e:3b:
e3:f1:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:02 2025 by rpki-client