Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
File: 8QEB-_qGP-Reriv2uX4O_n7IMSU.mft (raw, json)
Hash identifier: F8KuQzT1JyO8TOqOhNT+8gJYK9ZM83VIVkVGt+8xpMg=
Subject key identifier: 6A:6E:40:1D:B5:09:B1:90:34:A5:36:61:5A:3E:C8:4D:41:6B:91:88
Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
Certificate issuer: /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Certificate serial: 0199FC215130FCABB89E46862A43CDBA5E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
Manifest number: 068D
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: 1-_UwL6gJgWy3pN6NrkEbXBFBiRw.roa (hash: g97v9R+PoC4iu0w5rkLd1FzagNbwQyMIzICsh2OGkRc=)
2: 8QEB-_qGP-Reriv2uX4O_n7IMSU.crl (hash: zptZ87NRn3v9wUyXKzJldkH6uMDdf9O5y9PhQHnbPQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:51:30:fc:ab:b8:9e:46:86:2a:43:cd:ba:5e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=6a6e401db509b19034a536615a3ec84d416b9188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:57:84:07:6a:6f:6c:c9:7c:19:3f:88:7a:6b:
86:be:f9:6c:fe:5b:19:92:c7:12:9b:5a:53:b2:3f:
bc:02:81:bb:53:5a:4c:da:c8:1f:11:54:94:ca:58:
55:5d:c3:ab:7e:73:17:bd:da:f9:e3:11:84:26:14:
8a:4a:c8:1a:a0:0b:84:28:73:99:a0:42:6e:7c:df:
66:01:ce:69:e6:43:6e:97:33:29:51:fd:11:01:27:
7c:64:6a:a3:99:d8:77:92:08:f0:79:6e:2c:76:c0:
76:af:dc:ff:28:54:3d:b9:db:1a:ca:42:37:28:58:
af:29:8d:82:9c:6b:d7:e4:38:f4:95:48:26:a5:65:
a3:96:aa:71:fb:11:fc:7e:c1:db:cd:00:73:d8:9c:
a9:86:de:2e:25:09:98:0f:05:61:2f:4f:f7:b6:c2:
19:89:02:49:68:8f:8c:51:af:7d:97:ba:47:a1:8b:
8d:36:31:39:ae:c4:6c:15:22:c4:0e:e4:4c:38:a8:
59:e9:65:61:38:a1:0e:7a:7c:5b:08:f7:43:09:2a:
3c:42:50:22:8a:cd:51:df:e9:87:b7:3d:d0:a5:a0:
59:27:10:d0:f2:a2:b1:20:fb:56:9d:9d:19:c3:7e:
26:0a:36:6b:1b:20:bd:38:bf:fb:ba:45:95:8b:50:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6E:40:1D:B5:09:B1:90:34:A5:36:61:5A:3E:C8:4D:41:6B:91:88
X509v3 Authority Key Identifier:
keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4a:44:45:c0:63:31:bb:a5:8f:80:20:39:c3:f6:43:52:a8:
f5:72:be:bc:9f:f7:85:a3:12:93:b5:40:ff:db:49:96:aa:52:
c4:b1:ad:bb:b0:f4:ca:81:af:b7:61:62:0b:17:40:35:a0:1c:
a7:4f:8d:e5:28:b9:aa:47:1d:76:d8:d7:eb:f2:4a:7a:86:e7:
ca:43:e6:a7:25:81:29:c9:44:64:59:a0:e9:8c:f8:65:13:9c:
17:03:e7:0b:ad:34:e9:5e:03:6b:9a:2d:3b:c6:69:64:82:7a:
0a:67:b7:81:f1:0a:c3:33:e5:7b:f8:5e:80:bd:29:c1:21:cb:
e3:33:34:3f:25:70:f3:17:c1:23:53:43:b7:47:c5:cd:4b:5c:
77:61:b8:03:d0:b8:ac:fa:cf:f6:c7:d5:61:59:97:bd:5e:21:
0f:3e:1d:90:c1:a1:61:54:2c:18:b8:5e:cc:9c:5a:1b:10:dc:
3f:2b:c9:f5:3c:48:be:c4:6e:bb:da:4e:fb:80:6b:cc:89:43:
f8:79:7e:e0:f3:4e:e4:85:48:ae:1a:97:b1:ed:ae:ac:08:64:
41:78:eb:18:66:1b:79:64:22:2b:86:16:f2:e6:61:56:f9:63:
1c:7a:ac:82:53:9b:a3:26:2b:08:d6:38:81:87:ce:ac:ef:86:
86:de:bf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:52 2025 by rpki-client