Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: dRtGpk001FxxNUVZABzHA8wGQf5jbAKeMfzIBdfGfAQ=
Subject key identifier: 5D:A9:6A:85:09:0A:E2:9A:22:8E:B2:EA:4D:02:03:38:F8:26:85:B8
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 0199FC58B109C33BD3BEADE1DE75596130FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 09C3
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: NvlGxf9f30R8vsuZDgOx0D3H49eq7oppepgM6IWrsZw=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b1:09:c3:3b:d3:be:ad:e1:de:75:59:61:30:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=5da96a85090ae29a228eb2ea4d020338f82685b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:ba:90:31:4a:2c:17:61:94:ac:3a:c7:0d:
0a:7f:52:e8:cf:93:52:f0:79:a6:51:93:cf:76:7a:
e0:ea:bf:8a:3c:8a:62:ee:bf:20:5d:54:7c:78:12:
d1:72:37:73:02:f0:43:41:fa:4b:d8:be:67:54:ae:
37:e6:8d:84:22:e4:e5:20:93:11:22:7b:9f:6f:54:
fe:a7:82:cc:78:a4:83:1e:45:58:96:d3:73:61:d9:
a6:c8:e9:62:7f:14:b9:d6:86:2f:37:70:e9:04:02:
8f:30:4c:17:49:1c:49:a9:10:1f:06:91:68:50:8f:
3d:9c:8e:cd:40:3f:90:62:74:a0:fb:49:e7:f6:a5:
c5:5f:1e:cc:75:3c:e3:95:97:47:7f:3c:c3:bb:3e:
e8:53:13:81:9b:91:cc:ed:bd:22:b9:1b:93:ef:00:
71:52:15:28:dc:82:60:f2:e2:e1:ad:13:b1:6b:c6:
a7:89:4d:13:93:42:c4:7e:b7:56:53:92:d8:90:ad:
ae:d5:2f:0d:71:68:fe:a7:f3:9e:1d:32:b9:d7:5c:
e5:a5:b2:9d:6f:16:73:9a:3b:17:99:09:af:26:0d:
a0:d1:55:9b:fa:e1:74:7c:15:96:0c:a3:6e:71:72:
b5:0c:21:2c:7d:33:fb:55:54:e0:0f:ed:66:9e:fb:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:6A:85:09:0A:E2:9A:22:8E:B2:EA:4D:02:03:38:F8:26:85:B8
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d3:a2:1d:45:3a:54:06:d3:97:04:c0:74:b1:20:75:f8:69:
06:82:4e:7c:bf:00:43:bb:0e:dc:06:1a:56:bf:7e:86:a0:f6:
36:8d:1e:24:2a:44:b2:dc:fb:b0:76:78:37:76:e4:c8:ec:9f:
72:f9:2f:2d:e9:f2:8e:93:2e:b7:27:3a:e7:e4:e6:48:9f:ac:
ad:2f:1c:6f:cf:2e:25:77:6d:5f:22:6a:13:46:0c:2f:40:89:
2b:d6:12:f3:c3:b7:18:94:34:f8:ba:8e:f9:04:17:86:4f:99:
5a:96:54:e0:53:f7:a6:9e:ec:e4:2e:67:98:f4:5f:7e:33:07:
cb:92:92:f6:3d:9e:0e:54:80:31:83:87:b5:a4:b9:4b:23:f7:
8b:14:18:c1:27:8e:4f:3e:8b:0a:ee:03:43:7a:46:bd:d1:c1:
aa:93:e4:a8:df:f1:30:9e:bf:cb:21:86:95:9a:d4:e7:fb:f2:
1a:3f:37:21:f0:69:51:99:ce:b5:73:d8:fb:27:bc:eb:de:45:
cd:1c:04:61:aa:43:7a:4e:5a:e7:a0:7b:08:ca:69:fe:fd:27:
73:ed:c0:09:49:4d:a0:a4:27:eb:a3:f9:1a:d6:d9:f3:b7:14:
b1:11:b8:2d:c9:d9:06:aa:c5:02:0b:4c:5b:c2:fe:f5:e2:23:
8c:b6:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:58 2025 by rpki-client