Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: OJUnDlhzKWgXwwQlASfGjYvPhGsvY4huUffFIzTqC5k=
Subject key identifier: F1:67:15:9B:8B:58:FA:B0:83:94:5C:CB:2E:C1:44:48:47:5A:1E:9D
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 0199FCFD7ABDC78F4F17AC16189D79207007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: IEgYKG7Z6QdmhTg8jbadzlqUL0A.roa (hash: czHiBi7aC7gYGx6TuroDY+vPvsviuucmLi9+d2nYML8=)
3: N7dkJGPV_ClH0zdsWhUXQhLf-fI.roa (hash: 61rIBj7suoaRe9FEYDOMgKbW4Bfv19fnscul85uRvy8=)
4: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: RjV/lrlNTW4ah0A6DO0zzu3yDmYNzBQp8WXHUoVb7Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7a:bd:c7:8f:4f:17:ac:16:18:9d:79:20:70:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=f167159b8b58fab083945ccb2ec14448475a1e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f8:34:a6:14:d7:6d:a4:d4:c3:54:bc:7e:ea:
3a:6f:e2:02:be:70:9c:ea:84:b8:28:10:9e:df:9f:
f0:a2:47:cc:35:79:4a:6d:2e:47:70:6e:e3:74:d7:
90:30:08:49:97:d1:69:c3:e1:af:f1:e3:dc:be:6f:
e8:48:1c:a7:6a:2e:37:e6:bb:0d:71:ac:c1:6c:b1:
2f:41:5a:c4:74:46:cd:70:82:55:13:8a:e5:99:75:
e6:07:b0:83:fe:d5:12:2f:8c:5c:dd:e9:ac:3a:c5:
33:81:13:63:b5:ad:ca:35:c5:05:6c:92:45:c2:4c:
e6:03:ad:a9:8b:a5:81:9f:63:a1:1f:09:fe:f2:d7:
16:b4:5c:db:8c:1d:77:77:cd:60:28:8d:f6:ee:d8:
ce:d2:6e:35:fd:48:82:8c:21:c9:85:3b:6a:f5:16:
16:e1:e0:25:a4:a7:be:3a:cd:9e:3c:ce:49:01:ab:
3b:60:a4:01:f6:0c:36:23:dd:1b:f9:3f:c6:66:51:
74:32:c3:35:c1:9b:b6:be:fa:a0:1f:72:b3:e1:65:
e4:4f:4b:05:51:81:4a:3e:f1:c7:6d:dc:22:56:fc:
14:63:8d:01:b3:e1:f4:5a:e4:52:9e:ac:28:e1:d9:
06:33:3a:05:09:5e:08:57:fe:b3:22:19:a7:83:a9:
5c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:67:15:9B:8B:58:FA:B0:83:94:5C:CB:2E:C1:44:48:47:5A:1E:9D
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:94:6f:da:3e:65:d0:56:26:34:57:56:64:66:12:48:ae:e8:
c6:59:1e:77:b8:ce:0d:cc:fb:dd:a1:cb:19:c5:22:4a:c3:1d:
79:56:64:0c:71:0b:c2:c3:24:7d:54:5c:11:c4:21:f5:df:c2:
1e:c5:59:f4:91:b8:d4:9c:31:68:97:8f:38:91:5e:69:47:e1:
3f:a4:31:61:f7:e7:c7:e1:3e:9b:58:44:35:35:7a:7b:4e:5f:
4f:dc:ec:69:2b:92:77:87:1b:ab:3f:b9:3e:19:ec:68:0b:ef:
f9:23:c6:89:3e:e4:05:17:25:9b:0b:63:f6:f8:72:96:4b:84:
39:fb:3e:e7:51:b1:18:25:55:f4:10:f1:35:28:69:6c:0c:0e:
4d:4b:33:d6:54:cc:9c:fa:ac:0f:23:70:9f:a8:83:f6:62:30:
c8:60:93:72:29:0c:de:91:8e:17:8e:45:1b:ad:eb:51:69:16:
77:05:15:1c:86:a1:6c:49:82:75:fc:88:f0:47:98:26:6f:5d:
1b:b6:70:4a:78:3f:3e:cc:84:17:31:2c:71:1b:79:43:1f:a8:
c8:d4:4f:b9:c6:aa:43:96:07:46:56:8c:d2:73:a5:f0:ea:a7:
d2:59:d8:d8:d0:02:52:2e:5b:cf:48:9b:48:f4:27:56:f8:8e:
da:5e:bf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:36 2025 by rpki-client