Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
File: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft (raw, json)
Hash identifier: hc5LNoqkvXF8grvyur8HaOKcfd6IoIhd/R6inWbHrzI=
Subject key identifier: FB:AA:B3:A4:AF:22:0E:F1:48:9F:8D:BF:AE:51:26:10:B2:E2:BF:D2
Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Certificate serial: 0199FB7CA9CC61E161DA71355D5640DF6B1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
Manifest number: 0F3E
Signing time: Sun 19 Oct 2025 08:01:15 +0000
Manifest this update: Sun 19 Oct 2025 08:01:15 +0000
Manifest next update: Mon 20 Oct 2025 08:01:15 +0000
Files and hashes: 1: QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl (hash: slFtykq+2ypMwBNeHYwtEUL5Lj1oqzUdMfm+ZuKgzRI=)
2: epxu4ldel37euJv5iKK-6i05AIc.roa (hash: 8++9DWFJDI5Z8sw+rLXkJDDM4NKVAVZxp3Q8VNvU1K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a9:cc:61:e1:61:da:71:35:5d:56:40:df:6b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b
Validity
Not Before: Oct 19 08:01:15 2025 GMT
Not After : Oct 20 08:01:15 2025 GMT
Subject: CN=fbaab3a4af220ef1489f8dbfae512610b2e2bfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:b9:5d:02:06:0f:89:1d:de:62:35:5f:76:
d7:fa:c6:72:92:3b:40:2d:81:19:ec:44:e9:e6:7d:
28:70:1e:0f:fe:45:f0:f6:72:ef:df:2b:c3:f8:63:
cd:c2:ff:19:46:45:b2:1a:a3:7b:0d:6d:1e:8c:1e:
6b:6a:61:c4:1e:1e:3c:c1:2c:18:52:d5:27:0e:b4:
a4:43:79:30:ba:e9:2f:99:79:20:60:60:40:9c:e8:
65:11:12:9a:17:ce:4a:21:25:34:3f:da:04:af:28:
12:1c:ae:14:0a:ac:7e:7e:be:c0:ee:70:f7:d1:73:
7e:81:7f:c2:36:9a:d4:93:e7:c3:c5:5f:e9:81:46:
3a:55:74:fd:28:1d:ae:76:73:69:1c:ae:77:30:98:
b9:9d:a3:34:21:71:3a:c0:cf:94:f8:ff:e4:44:11:
24:c2:1c:36:9b:dc:a9:4f:62:be:44:3a:61:d3:11:
e1:8e:f3:7c:6b:6f:48:d9:a2:af:a2:fd:35:ce:b7:
b1:21:16:65:38:2e:49:b8:3d:4e:63:c2:4a:95:10:
a7:95:68:cd:0f:f1:38:d6:2f:8f:05:aa:96:58:7a:
3c:84:8c:40:cc:a6:05:3f:90:b2:0d:1d:1d:3c:31:
f1:78:c5:44:5f:94:13:5c:76:54:f6:f7:8b:32:5d:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AA:B3:A4:AF:22:0E:F1:48:9F:8D:BF:AE:51:26:10:B2:E2:BF:D2
X509v3 Authority Key Identifier:
keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a3:76:c3:ba:ef:17:b9:d3:61:6b:75:c3:d3:65:43:12:45:
c9:85:d3:95:95:cc:1b:bf:3b:36:ce:46:f1:66:df:c8:0c:c0:
1b:9d:ad:98:31:93:a0:cd:3c:8e:29:81:ad:86:dd:ba:d3:d8:
a7:44:a1:49:eb:47:8c:97:63:df:4a:31:b2:27:b9:0f:6a:44:
7c:aa:a7:26:27:0f:7a:ac:b2:d8:7d:e8:57:9b:ea:13:3b:b2:
3e:44:41:7a:2d:9f:cb:c6:1f:94:0b:ea:62:2b:75:46:dc:b9:
d2:3b:28:0c:bc:e8:88:5c:e5:84:1f:e6:d2:27:0f:26:dc:11:
8d:4c:eb:7d:b4:b3:c7:fb:22:fd:ca:a9:04:d0:66:86:c8:c7:
51:fb:78:8a:9e:d6:0d:f8:0d:b6:c1:eb:4c:b8:36:e8:0f:91:
d2:de:44:b6:38:93:4a:34:56:7a:17:22:e6:38:66:88:35:4c:
a4:3b:41:cd:5e:9c:61:6e:99:f0:69:bf:44:f1:01:79:ad:d9:
db:ae:f3:09:16:61:15:a5:42:d6:09:47:26:24:f2:a1:ea:d4:
6d:3b:e1:30:67:ec:3d:a5:3b:6f:68:8a:78:45:b2:09:46:db:
4c:2d:ea:3b:99:7f:ca:a8:92:0f:e2:99:6c:2b:9a:0f:31:e4:
09:a2:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:30 2025 by rpki-client