Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: YBdqVhnGRWxk3PE8FbKhkvt6pQG/pZQa7jPgsUlET0o=
Subject key identifier: 72:29:1D:87:E1:42:96:BA:0D:B5:5F:C4:70:7B:11:1C:5D:F2:5B:C6
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 0199FDD943A3213D8E97D1B1AA45D89AC455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 03FB
Signing time: Sun 19 Oct 2025 19:01:38 +0000
Manifest this update: Sun 19 Oct 2025 19:01:38 +0000
Manifest next update: Mon 20 Oct 2025 19:01:38 +0000
Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: rCROoHI1TR92oqlgUr9Xh0OARX65ea8qp89lohbr8WY=)
2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:43:a3:21:3d:8e:97:d1:b1:aa:45:d8:9a:c4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Oct 19 19:01:38 2025 GMT
Not After : Oct 20 19:01:38 2025 GMT
Subject: CN=72291d87e14296ba0db55fc4707b111c5df25bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:41:37:30:cf:60:49:05:1d:2b:f2:fb:5e:
ec:7b:23:98:4a:d2:31:c0:23:9f:aa:06:2d:7d:76:
f9:2c:65:8a:25:39:12:29:61:f7:4c:a2:7c:82:24:
b5:05:df:9d:a6:ac:c6:fe:e5:ff:ad:bc:be:c6:01:
15:72:65:06:65:53:f6:38:29:e8:d3:9e:f9:a1:44:
80:3a:8c:00:99:e8:0e:fd:3a:d9:02:25:e7:25:e9:
ea:7b:53:b6:5a:b7:73:ac:e3:9c:40:87:f2:d2:e1:
e2:1c:15:b5:49:f6:98:68:26:93:15:ae:23:68:51:
da:e8:19:22:77:54:f4:fd:c0:fb:83:e6:15:03:07:
72:7e:6e:83:c7:9a:6a:ed:da:92:16:32:9b:9d:49:
cc:2d:f0:82:54:40:0a:c4:82:e0:2c:0a:2b:02:3c:
b0:9f:b5:ee:71:49:f3:05:74:6f:f4:b7:b6:30:ca:
69:1b:77:55:39:25:dd:c0:d2:a0:f8:41:48:f5:68:
f9:09:79:92:c6:20:d3:74:27:b4:c0:97:91:ae:92:
20:f7:74:2d:d3:49:7d:5b:d5:91:27:b8:eb:b5:cd:
fb:7b:3f:ad:5b:24:bd:d8:b7:f9:05:da:8e:89:81:
00:9d:19:a5:38:b7:ff:c5:54:c6:d7:9a:59:6d:71:
5b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:29:1D:87:E1:42:96:BA:0D:B5:5F:C4:70:7B:11:1C:5D:F2:5B:C6
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c6:14:bc:3e:3f:82:2b:4d:34:1f:8d:e2:e7:73:c5:56:36:
18:c7:2f:9b:c5:ad:0c:21:1d:09:e3:46:4a:60:56:ec:82:cc:
34:ad:4d:b9:2e:67:4a:85:30:87:2a:b4:97:a5:66:6a:e2:1e:
f6:25:89:6c:a7:8d:23:e5:43:1f:2f:43:18:15:b2:10:fd:c7:
95:dc:21:ce:31:60:d9:86:0e:88:15:52:88:ee:46:4b:11:a0:
6a:08:a0:c6:15:f6:8d:60:0c:97:db:1e:b6:9f:d1:bd:b7:6e:
a6:56:0f:94:b1:60:7c:9d:5e:d0:97:95:83:3a:e7:ce:74:65:
4f:e4:79:07:7c:74:1e:6d:81:05:07:b9:28:01:09:17:4e:2d:
6b:0e:db:3e:9b:05:16:14:77:16:1b:d3:3f:e8:df:25:23:22:
c9:b3:22:b9:8a:92:23:11:46:40:8a:56:fe:f6:3c:82:5f:45:
8c:a1:ad:7a:7e:0e:9d:e3:1a:d2:93:04:58:c7:b9:ec:ac:66:
28:c9:bd:20:65:c6:58:59:31:7a:5c:12:6d:2b:a4:2b:a9:e0:
ca:24:06:01:e5:24:39:7a:ea:c5:84:09:64:7d:5f:bb:de:39:
df:a7:3d:2a:10:76:e6:0e:ca:77:9e:12:7d:29:d3:df:4e:84:
3e:34:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:20 2025 by rpki-client