Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
File: QO5hC9zSO60rEZK9RcqKl204Vdo.mft (raw, json)
Hash identifier: tgggC0nKTpuxNMA3lZN8BAX8eDSV6cDBqnTZrm1mDMU=
Subject key identifier: 7F:9C:10:26:77:83:60:B7:70:A3:22:FA:1D:B9:A1:5C:8D:6D:97:9A
Authority key identifier: 40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
Certificate issuer: /CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Certificate serial: 0199FDD972AEBFABD3F23A1BED0F0FAE968B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
Manifest number: 157D
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: QO5hC9zSO60rEZK9RcqKl204Vdo.crl (hash: cJrd6S4x3PBGlzRukb/1JRPN+An1CHVEXMbVH7kgOVk=)
2: WXzwl6dDgLLRTGjEWsJa-Mt4DFY.roa (hash: AsvwbpP9IRPmxXb+scTtlP8HJBrFwXPs3woICGrCIxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:72:ae:bf:ab:d3:f2:3a:1b:ed:0f:0f:ae:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee610bdcd23bad2b1192bd45ca8a976d3855da
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=7f9c1026778360b770a322fa1db9a15c8d6d979a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:3d:3c:6c:cc:76:9a:ff:05:2f:62:1c:4c:
bb:f4:5b:31:7a:f3:a4:98:3e:ec:99:92:8c:5a:1a:
5e:dc:4a:8d:01:9c:6c:1e:b4:c4:24:6c:94:23:9c:
00:b6:6a:62:71:36:eb:d8:c3:a5:d3:fe:67:36:ff:
09:a0:84:c4:f8:c0:1d:54:0b:5d:ca:02:3c:79:d0:
cc:cc:9c:7f:66:53:eb:a3:8e:a5:b8:89:8d:d8:71:
1b:cd:c6:f5:ca:a0:0d:e3:dc:03:a5:fb:0b:60:b1:
42:5a:29:4e:1b:88:8d:30:9b:34:b6:6b:71:50:bd:
e1:13:e1:4c:84:b4:77:67:e7:f0:ab:67:c2:cd:ac:
c0:4b:df:93:fd:6a:fd:32:9e:fb:d6:5e:da:5d:85:
f8:35:ab:d5:4e:86:e0:b9:54:e8:6b:b7:37:11:23:
3e:0e:b3:98:bb:ff:eb:3e:f0:41:55:01:1c:20:17:
33:b3:ee:0a:7c:f0:9c:68:b0:74:fa:ff:a6:05:a1:
d8:8b:ad:3e:d9:1c:e9:4b:f8:20:a2:09:b4:45:b7:
32:df:cf:e5:a1:6a:e0:fa:54:aa:8c:d6:37:5c:ce:
a8:f7:5e:5f:57:b1:5f:99:6e:bf:0a:ed:f9:88:ae:
f8:24:eb:ff:0c:c7:8a:c0:30:47:62:0c:bb:6f:f8:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9C:10:26:77:83:60:B7:70:A3:22:FA:1D:B9:A1:5C:8D:6D:97:9A
X509v3 Authority Key Identifier:
keyid:40:EE:61:0B:DC:D2:3B:AD:2B:11:92:BD:45:CA:8A:97:6D:38:55:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO5hC9zSO60rEZK9RcqKl204Vdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5efae5-2c92-40d0-a3b6-a6c17ce82d77/1/QO5hC9zSO60rEZK9RcqKl204Vdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4a:42:5a:f6:83:5e:3b:4d:c7:d3:08:96:b9:2f:33:a5:dc:
6f:da:50:ff:5d:54:27:88:28:5a:7a:13:9c:89:51:c3:05:f8:
6a:45:23:8c:82:d1:ee:e7:26:ae:54:56:68:fa:2a:d8:4d:69:
5f:9d:77:f7:19:ce:e2:8d:31:a3:75:52:92:48:8c:6a:bf:87:
c1:a8:99:fb:fb:8a:cd:40:82:4a:d7:87:f6:e6:fa:04:ed:98:
c2:d5:da:d7:c2:7e:3b:11:cf:34:5d:51:83:dc:c5:e4:de:6c:
bc:3f:e6:6b:3a:c4:74:18:6b:f1:a7:8d:d4:e4:dc:7a:c5:d8:
26:9e:55:04:18:ba:82:65:82:e5:c0:1b:a0:33:69:54:df:c5:
f5:24:f2:db:f1:85:c9:a6:b8:b1:f2:06:9e:fb:4a:96:bc:1c:
20:a8:aa:c4:5e:c0:5e:59:eb:e4:d2:65:24:d8:13:3b:5b:ae:
8e:0e:57:3d:c5:11:d8:c5:bf:0e:69:b0:7e:53:61:08:a6:11:
85:31:b8:21:df:02:10:5c:dc:65:05:e0:9b:1b:1b:13:61:21:
42:29:a3:bd:86:0f:d8:b1:a8:1e:50:4d:39:61:4b:09:bd:b5:
2c:34:31:43:08:57:5a:fa:b8:1a:ca:a6:36:24:84:f0:f5:39:
56:8f:99:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:57 2025 by rpki-client