Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: Q6fOqFpdDJmXt/xZrmyA6TAEmUG7swNVzPPpmeio9v8=
Subject key identifier: 6B:92:C4:5C:F6:29:FB:A6:EC:8C:E9:C1:78:AE:7E:09:E2:EA:CB:26
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019A01B4F53DF3BEBBA2CD6F992823B787A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 0115
Signing time: Mon 20 Oct 2025 13:00:27 +0000
Manifest this update: Mon 20 Oct 2025 13:00:27 +0000
Manifest next update: Tue 21 Oct 2025 13:00:27 +0000
Files and hashes: 1: FxDzr4dkx7gP7-0QN9qS1QSuAFE.roa (hash: 2+R/DqRWvZVRETti21Zc43TNJBFDVQNiLw4+AXiQO7g=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: e31hvkW1emzQ76puXrBawNntoUYhpnC7BzFRIsMRJS4=)
3: aSbzflu2ueBH4HFc6DoptPDX5Rc.roa (hash: Ps8MiI9EyDzRjGBlJSLfyNG1HvPUvesSrz/Go0N5kKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:f5:3d:f3:be:bb:a2:cd:6f:99:28:23:b7:87:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Oct 20 13:00:27 2025 GMT
Not After : Oct 21 13:00:27 2025 GMT
Subject: CN=6b92c45cf629fba6ec8ce9c178ae7e09e2eacb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:b5:e0:68:a2:4b:9e:a3:0f:8c:fd:af:9e:
94:51:25:1c:7d:c5:c0:9c:d7:bf:1d:30:7c:bd:3e:
e9:a8:22:9d:1f:f4:62:12:48:45:5c:f6:40:b2:5c:
f2:48:84:96:ad:4c:f4:21:60:4b:85:29:85:36:29:
e1:a6:91:70:60:d0:42:2c:f1:d3:f8:5f:9d:91:89:
df:97:e8:b7:23:0f:1a:a3:b2:1d:41:ce:97:66:7c:
36:ad:02:f7:49:cf:e5:2b:7c:90:32:93:ad:32:11:
36:c3:17:09:dc:99:01:cb:9f:43:12:4a:93:10:3e:
be:8a:0d:f8:02:77:e0:89:85:75:c3:33:23:bb:9f:
e3:04:79:bb:c8:39:b4:b7:2a:5d:95:64:d2:6f:b8:
b7:e3:1b:71:e7:65:f2:0e:97:9e:21:e0:71:5d:5a:
05:79:a9:ec:0e:ab:86:5b:d5:4e:ae:81:70:95:a1:
f5:25:91:56:90:38:44:d6:f9:f3:4c:03:7b:15:b8:
b0:fa:26:d9:18:eb:5c:40:8a:20:92:66:38:c0:d8:
f0:7b:75:9a:ed:18:e2:d9:a7:f9:5b:b0:b6:e3:0a:
07:8c:6c:18:09:35:95:f9:93:af:5f:14:37:c5:77:
02:1b:58:e4:4d:ec:8a:7e:5b:aa:39:7d:07:2d:9b:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:C4:5C:F6:29:FB:A6:EC:8C:E9:C1:78:AE:7E:09:E2:EA:CB:26
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:09:38:c7:1c:3d:83:d9:03:f1:7e:23:1b:07:c2:5c:f9:13:
66:c5:1d:76:8b:26:13:37:c8:70:af:81:e9:37:f9:77:e4:98:
65:a6:49:c3:62:89:6a:5a:82:79:32:a7:12:81:ae:51:45:ca:
0f:4d:dd:66:8f:7c:08:3e:0e:a4:26:41:37:39:2f:b4:31:d8:
b9:fa:88:a6:92:1c:94:0c:8d:54:9a:6f:c5:8f:47:45:9a:9e:
80:b7:96:c6:71:85:bd:46:b1:c9:dc:33:be:82:57:3d:cc:a2:
65:09:c8:d5:27:0a:08:c7:70:50:3d:95:66:0e:36:8c:4d:b0:
ab:5e:6a:a3:e2:a4:e3:e4:7d:a3:9f:fe:b3:25:e1:59:4b:8f:
2e:b4:56:82:c8:b3:99:ea:6e:79:68:17:2f:71:44:b6:59:06:
ff:82:1e:c7:fe:d9:26:fd:e2:bc:cd:36:2a:56:74:3b:fb:bf:
16:ec:d9:cc:eb:c0:64:18:87:f4:53:6a:3c:26:55:fe:4c:2f:
31:bf:a8:30:87:ba:0d:b6:35:f2:70:63:ec:13:3e:59:26:cb:
c1:39:12:4a:23:12:3b:ee:59:19:2d:16:3b:64:41:38:bf:72:
41:6f:aa:f2:9c:3f:10:df:78:35:8e:39:0e:7d:64:2e:66:49:
89:da:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:53:31 2025 by rpki-client