Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: yb1p3wY5VZLJTTl8Z7tlKzDrPOxx3R1p1KyqmmGVqgo=
Subject key identifier: 23:0C:EE:C0:33:C3:B0:8C:BD:10:EC:41:6D:28:C6:75:41:A2:E6:C8
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 0199FE1047CA5727D21B26CB04B7641DD92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0CD1
Signing time: Sun 19 Oct 2025 20:01:43 +0000
Manifest this update: Sun 19 Oct 2025 20:01:43 +0000
Manifest next update: Mon 20 Oct 2025 20:01:43 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: 8qKsfipxgkD93dCK7nbz31Gl+kbwui06vyYy2i/WzXk=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:47:ca:57:27:d2:1b:26:cb:04:b7:64:1d:d9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Oct 19 20:01:43 2025 GMT
Not After : Oct 20 20:01:43 2025 GMT
Subject: CN=230ceec033c3b08cbd10ec416d28c67541a2e6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:3e:e4:51:53:92:65:b4:40:ce:91:13:4a:
83:08:8c:54:c6:a3:26:7b:c0:24:11:e1:ec:3f:5d:
59:2c:2e:6d:5f:2a:f3:14:24:e1:dd:81:53:18:3f:
55:d5:89:f2:fc:60:c9:50:c5:1c:78:c9:09:f3:a0:
4a:66:e9:c4:da:76:e5:4a:b4:75:6b:54:ba:ad:e7:
2d:b1:f5:cd:61:ef:73:94:24:a2:2c:ed:c0:f1:f1:
88:ec:b2:27:58:a4:9c:68:a7:82:69:9e:c7:86:c5:
b9:76:64:96:18:4a:1b:5a:62:90:4f:14:ca:25:d3:
ad:99:78:4f:c7:07:fd:4e:3d:4c:f1:93:cc:5a:0c:
19:31:75:29:0b:3e:3f:a6:33:7f:d6:73:6d:2a:40:
0f:f7:1f:6c:36:af:c1:df:8c:1f:bc:8e:f3:76:30:
7f:49:34:d6:7b:6d:d7:ea:a2:20:51:e4:da:95:72:
57:b4:8a:27:3f:ca:77:32:53:a2:d7:1b:b7:11:d6:
a7:32:18:6f:e6:cc:51:fd:17:1a:25:6c:47:49:d2:
81:35:c9:5c:00:74:8a:38:ac:f0:42:4e:20:74:ba:
53:5b:9e:f5:b5:35:0c:83:8f:e9:04:ed:43:8d:68:
99:07:f8:de:f0:d3:c1:7c:00:ec:63:66:5c:62:d1:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:EE:C0:33:C3:B0:8C:BD:10:EC:41:6D:28:C6:75:41:A2:E6:C8
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:4a:2b:d0:85:54:63:be:16:f8:6d:3e:51:53:80:e3:0e:2b:
32:b8:f2:60:de:a6:ab:2d:c6:4a:37:33:dd:35:b3:a6:28:63:
81:cc:85:d6:c2:30:a1:61:6f:3d:aa:f1:15:af:ab:dd:5c:21:
96:09:8f:2e:80:57:ff:30:b6:b8:c6:1f:fa:d2:50:02:b6:99:
82:9e:4f:5a:f8:56:7a:20:4e:6a:0b:67:bd:a6:8c:ef:d6:b2:
0d:b9:32:1a:a1:0f:1d:de:aa:82:b8:39:a0:62:d4:3b:d3:0f:
8f:0b:ba:71:2b:a7:62:d4:a1:6a:56:7f:37:ee:16:4f:aa:44:
f0:45:0c:80:16:0b:53:45:6d:e0:84:5a:d0:b8:2d:d7:7b:fd:
50:92:ba:af:f4:8c:c6:b0:9a:e8:98:72:a8:f9:6f:de:33:c2:
63:df:7d:e3:f0:b8:c9:93:26:4f:79:34:ee:0c:b4:b2:0d:21:
3f:86:55:2b:06:12:97:9d:f4:89:47:f2:be:55:5e:16:d0:5c:
8c:f3:35:b3:4e:48:ab:8c:ae:bc:29:4f:23:71:c3:20:39:92:
42:f2:32:4b:95:61:c6:ce:cb:86:0d:a1:d2:9c:45:31:6e:ea:
c9:83:7a:5b:3d:8b:41:cf:ce:af:8b:58:7e:05:a8:28:35:4b:
83:43:08:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:41:14 2025 by rpki-client