Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: 6ZW4wY8A9nE2X8EX+Js6T1vh+kIfwgODciFFjZrJtmw=
Subject key identifier: 52:7C:D7:EC:FC:A1:57:C1:4D:E7:AE:BF:93:1B:1B:2E:7E:32:A8:2B
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 0199FC58298DC80679FCE25B88D4C552AFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 0347
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: E1dNTyUuba9XgALPcYg7jiQGUhvQV1JWyJxyehNJL28=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:29:8d:c8:06:79:fc:e2:5b:88:d4:c5:52:af:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=527cd7ecfca157c14de7aebf931b1b2e7e32a82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:6a:fc:5d:a3:42:0a:29:07:7b:89:ff:de:
5b:e9:f9:00:0b:76:e6:ee:57:2f:8e:c8:74:a9:c4:
00:0e:65:af:b1:6b:05:6a:1c:f6:ae:4c:b8:02:44:
81:8f:d4:e6:e2:c4:b9:32:64:e0:7a:9a:4e:43:49:
c5:f3:7c:e4:62:a7:2c:d4:02:6a:24:7c:06:93:00:
95:ed:05:9b:4b:06:02:c8:aa:5f:be:36:4d:e1:42:
06:44:2f:d3:f3:c3:4c:a3:a5:9d:8e:1d:02:94:0d:
00:a1:67:9e:41:e5:56:d7:82:d3:72:6b:b9:b6:f5:
10:8e:c5:98:ae:18:52:dd:5f:a9:a1:66:ad:4c:0a:
9c:49:e2:cb:fe:7b:5c:c5:7b:84:13:9e:aa:91:08:
85:be:2d:8b:5e:e2:5b:ce:8b:ab:e0:87:c3:19:d8:
a5:ca:82:dd:a5:84:1b:78:54:44:43:58:d0:30:b2:
98:ab:69:f1:0a:f0:94:59:6c:d9:94:1b:d2:27:d1:
7d:ab:24:b0:1f:ea:f5:ca:df:18:ae:78:97:01:9a:
77:05:24:f8:84:2c:c5:c0:e9:ee:74:78:3e:2b:ad:
e9:9f:5d:07:ac:ce:6c:6f:09:f7:9c:67:c8:5a:7d:
32:0b:0b:cf:ae:16:69:11:8e:68:6a:31:b7:67:e8:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7C:D7:EC:FC:A1:57:C1:4D:E7:AE:BF:93:1B:1B:2E:7E:32:A8:2B
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6f:c2:b5:b4:d1:f5:e2:b1:87:d8:b0:3e:21:1d:e5:cb:53:
9f:9b:9b:60:ce:12:31:4e:3f:60:3a:3b:56:62:c3:75:9b:50:
55:ea:0b:61:ee:f3:2e:e6:1d:a6:7e:a1:3a:a8:48:c3:d7:1f:
b5:3d:a6:ba:af:cf:33:6d:09:9f:70:5c:33:ca:e4:e7:35:4a:
44:24:26:48:5f:65:7c:00:2f:0e:72:b6:ff:74:29:8e:f8:12:
c8:11:fa:90:46:21:9b:96:e3:2d:e3:0b:dd:44:7c:59:c9:7b:
33:9f:f9:c6:16:2d:a7:cc:96:5b:42:97:0d:11:f5:fc:96:5f:
87:2f:cd:a3:fe:6a:fe:82:8a:5a:e6:6f:3b:40:b0:e0:eb:43:
9b:49:b1:47:86:8b:20:30:f6:1c:4d:bb:17:37:ea:44:be:34:
10:d0:13:35:2a:dc:12:d3:76:6c:86:9f:2a:5c:e6:83:a8:90:
2a:ef:a0:55:c4:82:fc:0a:3b:81:56:70:e7:08:88:d0:ae:ae:
c5:d6:da:32:03:9f:8f:65:2d:b5:c6:e2:1b:68:2c:e7:59:44:
a4:f6:45:f7:e0:11:56:4a:76:3a:b5:80:09:3a:85:70:a9:65:
da:68:b0:f2:2c:76:ae:56:e3:06:5d:07:6c:64:b4:99:9b:87:
9b:e4:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:06 2025 by rpki-client