Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: 8U2i8Nv1Ij3Cpp0HxamUv3fFl/N5aKdv6awAuBXwtWc=
Subject key identifier: F8:FB:61:4D:68:0D:B8:E3:1A:F6:FF:A8:10:34:DE:DA:59:EC:86:5F
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 0199FC8F8A09ED2ADE84ADBE969F61E0237C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 08A7
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: Kx65MkHT3zDqnerfuPFMRL417kPhslSEbM5BDpEwM5o=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8a:09:ed:2a:de:84:ad:be:96:9f:61:e0:23:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=f8fb614d680db8e31af6ffa81034deda59ec865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:41:c4:27:9a:9d:ea:a8:54:f1:a9:ff:dc:
45:14:24:c1:60:fb:0c:b9:ba:a8:4f:df:8f:95:44:
ed:65:85:10:5e:84:09:e4:27:88:cd:6e:96:32:f3:
64:4c:e4:db:b2:8b:75:f1:c5:a3:5e:6f:9d:1b:dc:
4f:66:34:a2:22:c1:99:e5:ba:ef:43:e4:48:ac:fa:
18:6c:66:ac:0e:0e:7e:db:9d:9b:a5:bc:b5:8e:1c:
18:fc:8e:de:6b:ec:1e:ac:74:c2:ff:38:fc:1e:8f:
c0:6e:1e:88:fb:fc:56:72:45:e3:a7:92:c8:17:d8:
24:62:ad:b0:fc:eb:03:55:d0:eb:8a:1e:83:f7:17:
a3:1c:2e:9c:03:29:cc:38:88:e0:bc:01:9e:89:1b:
f6:ab:51:61:55:e7:4b:4a:b7:84:cd:a7:41:43:22:
ca:ae:16:26:f7:28:14:c3:15:53:29:d4:23:71:e5:
95:1a:f4:84:08:39:e1:d4:89:2b:7b:e4:a4:e0:ba:
78:db:20:db:21:bf:07:fc:a3:2d:73:e6:69:fb:62:
23:62:4c:8b:eb:8f:77:95:ab:6e:ea:17:a0:a8:04:
86:08:2d:7a:1b:7e:67:25:ce:dc:6e:bc:e5:89:7a:
0f:bc:10:b7:cd:76:30:b8:8d:be:6d:d3:1b:c3:4c:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:61:4D:68:0D:B8:E3:1A:F6:FF:A8:10:34:DE:DA:59:EC:86:5F
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1c:29:2e:6c:70:b1:41:39:b6:4a:7e:be:93:c9:57:33:fc:
73:02:e4:f6:5b:43:3b:de:e3:58:06:2e:9d:9e:11:61:99:52:
2c:2d:91:bc:b2:64:03:d9:fc:a2:be:b1:f0:0e:23:94:d5:71:
af:88:aa:57:05:a9:3f:d4:17:b8:10:f4:2c:06:72:9c:e2:e7:
84:46:34:f0:f9:cc:21:ea:ef:e4:a6:94:13:6a:6f:bd:fd:aa:
59:09:42:3e:30:6b:7f:83:e8:10:e0:45:e7:c5:f2:3a:96:86:
f5:e3:68:3f:33:b8:34:da:38:dc:7c:f0:03:b6:6a:55:9e:18:
c7:8e:2a:ed:23:78:c2:00:46:7a:71:ae:9f:f8:12:02:d4:98:
61:20:94:c8:ba:95:e6:8c:76:02:fe:97:07:96:d6:ea:8d:79:
37:9d:0d:2d:be:94:be:63:99:1f:5c:0f:85:f2:93:28:3d:04:
7f:cb:87:cc:b4:19:16:31:3a:0e:d4:2f:a6:55:98:d3:be:c4:
b3:53:db:ea:f9:7d:fe:66:02:09:db:1f:56:ce:15:cc:e3:c2:
84:3e:1a:dd:1c:06:fe:93:f5:c5:33:b4:a0:46:99:df:5a:d6:
73:9b:d8:19:cb:ef:06:96:55:83:f9:96:ca:a2:69:b7:4c:88:
bb:1b:ce:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:28 2025 by rpki-client