Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: h2wQkVP36tqPfxY0TFNgg/dtO2n/+VP/8Sqf5ptr180=
Subject key identifier: 3E:6F:5C:9C:43:5C:5E:41:AF:5E:6E:D7:95:D9:3D:B9:39:CF:0D:B3
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 0199FEB49BFC7DD53688A47E73DE699344F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0A57
Signing time: Sun 19 Oct 2025 23:01:13 +0000
Manifest this update: Sun 19 Oct 2025 23:01:13 +0000
Manifest next update: Mon 20 Oct 2025 23:01:13 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: w47rlgRXJYQomJyE8SOiuvnBoge9KLoWdV1nOcVixAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:9b:fc:7d:d5:36:88:a4:7e:73:de:69:93:44:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Oct 19 23:01:13 2025 GMT
Not After : Oct 20 23:01:13 2025 GMT
Subject: CN=3e6f5c9c435c5e41af5e6ed795d93db939cf0db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:5d:4d:b5:a7:91:1a:13:0c:54:73:42:c2:
7a:8f:58:dd:59:5c:7d:6d:a9:1e:b6:93:0d:2a:f5:
9a:fa:8f:fa:8e:09:98:83:88:aa:26:39:bf:12:f6:
10:4a:65:6f:9d:fd:46:86:2f:80:d1:5a:75:25:85:
ab:50:6e:74:24:87:e5:d6:25:ba:e0:37:c5:e6:78:
a7:73:7a:0d:b7:5f:52:1b:2d:2a:8b:0a:ba:73:d4:
e9:a9:56:37:3d:ba:34:e4:5b:94:93:60:d1:d9:b6:
76:9a:67:9d:d0:61:9f:eb:38:4c:38:7f:ce:50:a6:
44:ab:82:22:18:35:bb:8f:07:8c:5a:d8:d3:ee:54:
27:8a:c0:5b:34:68:70:1c:de:5a:6c:18:c4:82:71:
1e:47:80:dc:b9:e5:03:b8:a0:50:f4:14:ad:9e:27:
0b:0e:c8:b7:e9:4c:3d:29:6b:d5:e4:f6:6a:f4:3e:
99:e1:f0:b0:54:52:65:81:cc:30:71:86:96:17:18:
a0:eb:5f:03:4d:50:08:d1:56:28:f2:9b:b6:d9:8d:
ff:98:3b:cb:6f:78:7e:4c:39:cc:35:8f:50:31:f1:
f8:5f:9a:72:08:60:8d:e2:dc:83:b6:ae:a5:9a:1d:
e9:fc:e7:12:e5:26:09:5c:25:c5:55:0f:cb:23:b3:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6F:5C:9C:43:5C:5E:41:AF:5E:6E:D7:95:D9:3D:B9:39:CF:0D:B3
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7d:af:e3:bd:38:af:a2:f9:82:23:81:7f:b2:42:d8:d6:b9:
73:71:d5:84:47:db:da:c6:86:a1:56:2e:12:4b:79:6a:68:29:
d8:80:67:b9:ee:4d:ae:e9:7d:e4:d9:c2:68:15:42:ec:ad:d1:
74:bd:9e:55:b0:4f:0a:55:ed:a6:a1:f8:ae:16:bc:a3:a9:98:
2f:53:6b:9f:f1:8c:fc:d7:08:69:6b:f7:89:3c:ff:02:ed:ce:
85:78:6f:51:50:0f:a5:0d:fa:be:01:7d:6b:3d:b1:c0:44:57:
51:17:a3:8c:89:89:e8:ce:2a:e4:8c:df:a6:c2:3b:94:dd:82:
ac:15:77:3e:5a:76:4f:7a:d7:72:33:24:b5:5f:a3:28:70:ae:
5c:c7:8d:ae:0c:a4:cc:eb:f2:6d:ff:b9:19:be:b4:60:7f:91:
70:d5:63:13:f8:23:7b:5c:d7:ee:c8:6d:9d:22:81:f0:f6:ef:
be:99:89:75:73:7b:64:46:db:28:c7:2b:49:ae:d2:39:d3:2d:
77:93:e6:62:9b:06:b1:5c:d4:98:27:32:4b:cb:aa:5e:f2:09:
5c:7d:d0:41:e0:e4:0e:3c:73:f0:1a:cb:a5:3b:31:69:5d:6f:
35:d5:2e:71:6a:4e:57:01:b7:a8:62:2d:44:ec:61:0f:d5:5a:
3c:16:ee:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:44 2025 by rpki-client