Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier: LrqfT/DAHd59n+tv/YtYWR/05clN+kUx3IlCGwEpIIU=
Subject key identifier: A6:10:11:4F:71:F3:2F:43:77:38:3F:E8:F4:27:FC:2F:48:56:90:91
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial: 0199FCFD93E56C5B566E029F75E2D3C66D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number: 0FB7
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: Fy-RDVpoQYqhk9YIhC0_OXJ7Ngw.roa (hash: MSpbkpTae0BKWb0wW1Z5MLxX2eex/b1uULBuB1GrJoU=)
2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: 2iIuHumdpJkMJ1mJG8sZ9dFl1ud5hjd6qabKAH8X3i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:93:e5:6c:5b:56:6e:02:9f:75:e2:d3:c6:6d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=a610114f71f32f4377383fe8f427fc2f48569091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:5f:56:49:8c:ce:4a:a1:0d:ea:3e:f1:75:
b6:66:db:19:50:02:72:e1:87:9e:d0:ec:3a:45:c6:
cf:0b:78:64:e9:70:f8:3b:94:31:89:c2:b9:45:84:
3f:e4:13:66:60:a6:e2:c8:7f:e8:ba:26:b1:95:9d:
43:17:26:66:bd:12:7b:d8:33:25:28:a5:28:8e:be:
48:b8:44:af:3c:9e:a1:cf:62:7c:7d:b1:89:94:bf:
71:8f:cc:73:ea:51:88:c1:b1:10:d0:7d:a4:3b:a9:
e4:6d:e8:1e:db:dc:e0:b3:dd:c5:05:03:f1:65:64:
ec:22:8c:9e:70:6d:d5:5e:52:34:c6:95:1d:e7:1a:
03:66:f3:99:61:4b:bf:d7:6f:06:5d:43:b4:f0:48:
de:6d:25:68:c2:f6:3e:48:0d:ef:8b:67:f9:95:9d:
6f:e5:94:5b:69:9f:48:10:a7:af:3b:84:28:7f:d0:
8a:b5:d9:83:c9:87:ed:e9:02:62:91:e2:b3:e9:17:
4b:c7:20:e3:09:13:2b:87:29:f8:f2:a6:5f:22:70:
f5:6d:c5:f5:d0:1a:de:c4:1f:92:06:06:37:d3:af:
d4:97:6f:0e:76:93:4c:39:e1:23:fe:be:32:0c:58:
c0:29:46:5c:53:b8:43:76:fd:02:7e:2f:4f:33:6b:
7c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:10:11:4F:71:F3:2F:43:77:38:3F:E8:F4:27:FC:2F:48:56:90:91
X509v3 Authority Key Identifier:
keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:93:d2:9b:09:13:17:8e:0c:7f:ec:41:8e:e3:00:91:20:8f:
bd:66:d8:b8:4d:79:2c:7c:5d:d7:17:4b:d3:1e:06:ce:28:b7:
c5:c8:fe:40:3d:bf:38:fc:0b:cd:c0:15:1b:6e:e7:4e:3d:ca:
02:e6:46:98:44:da:86:74:26:e2:81:80:20:6f:cd:f9:d9:c7:
c4:de:17:7d:d2:d3:a7:ea:bf:75:db:92:6c:d4:28:99:99:d1:
8a:4d:32:6b:ee:1d:55:1b:7c:0b:a1:9e:56:ad:b1:8b:19:70:
56:ec:11:01:ea:2f:89:8e:a1:91:8c:f5:08:83:5b:3c:91:5d:
99:15:2f:19:c5:52:6a:1f:85:04:da:53:9c:3d:3b:2d:b4:58:
d9:67:dc:9a:bf:cd:3e:3c:25:e0:51:8d:48:3d:0c:5b:42:6c:
d3:63:ad:88:62:cd:80:4c:2c:6f:64:80:ac:6d:ce:4f:4f:23:
d6:f8:e4:60:a1:d8:d4:c3:04:cf:ad:00:60:d6:1d:58:fb:e5:
11:fe:59:91:ae:a8:07:3a:cc:07:e1:40:44:24:9d:94:54:e7:
bb:2e:44:24:5f:ba:77:37:ba:28:3e:1f:bd:e8:0a:b5:e9:8a:
fb:7b:d3:2a:89:7a:b0:c6:77:85:2b:42:b2:23:97:7f:74:cf:
22:26:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:31 2025 by rpki-client