Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier: 3CXp2J+DFOBvlo37oVqXZJyvVk5qflRTORakgn74v/k=
Subject key identifier: A2:60:04:CB:2E:5F:E3:52:80:E7:78:1E:E0:E2:10:4F:21:14:20:1D
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 0199FBEB0A853656562DF45419CE9F067A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number: 0A36
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=)
2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: KsgmxaIBpRiL70UYNVcB+cdgJN0x+r08rsxTjHsHkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0a:85:36:56:56:2d:f4:54:19:ce:9f:06:7a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=a26004cb2e5fe35280e7781ee0e2104f2114201d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:5a:e6:4d:76:d7:3b:81:c9:6f:df:93:33:
76:58:7b:5c:67:5b:25:98:21:08:97:7c:e4:0b:ef:
31:67:7c:c4:1b:7b:7f:cd:70:b4:26:f8:5a:58:ea:
b8:9c:1b:ba:d8:24:23:f1:94:6f:bf:e8:16:b9:fe:
d7:4f:35:6e:0d:19:bf:d1:79:3f:57:b9:1c:3e:f7:
bf:7e:26:7d:fd:90:be:19:8a:38:a4:f8:25:02:0f:
37:81:0c:01:2d:29:69:d6:09:b3:62:0e:42:94:ae:
0f:17:2e:a1:74:d4:66:66:fb:a5:d9:fa:13:95:8e:
cc:c3:89:86:5f:37:dd:52:67:14:da:d2:64:8b:21:
bf:a8:11:ba:5b:02:d8:67:be:53:fb:91:39:fa:ea:
1e:a6:e6:2e:d2:8f:2b:85:c7:9d:5d:a8:fd:b3:68:
20:0d:ac:96:74:d0:14:ae:a7:90:6c:3a:26:d0:a1:
72:72:a3:b8:f0:2b:36:48:e4:a9:f0:be:d4:3f:d9:
e2:87:ef:e9:c5:c0:8f:87:80:cc:02:1d:7f:5f:78:
b0:80:bb:fb:44:0c:e9:d0:06:21:e6:f2:30:b7:11:
03:e0:88:b2:f6:1c:e4:27:e1:36:b2:b0:fc:65:ed:
a4:7d:e6:e4:a5:4a:cc:7a:cc:b1:56:bc:4d:6d:5c:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:60:04:CB:2E:5F:E3:52:80:E7:78:1E:E0:E2:10:4F:21:14:20:1D
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fd:56:ae:3d:d8:63:f0:f5:1d:d9:5a:bc:8d:85:4f:ce:92:
e5:6b:6b:41:12:3f:03:1f:1e:d9:41:c8:0b:ff:0f:1e:98:c0:
19:f3:e6:c5:75:3e:7d:de:29:8a:22:3a:4b:3c:a5:af:26:42:
fd:43:d6:cc:c5:5b:aa:e2:08:8a:07:89:7f:ba:15:78:ad:24:
fd:b0:d4:76:8a:6c:b3:5c:8e:33:b5:a9:7c:8d:49:69:af:c2:
e1:4a:f5:37:9f:f7:d0:df:d1:d1:fc:19:19:6e:f6:36:a1:c3:
fc:38:e2:44:88:53:eb:73:67:07:2c:dc:f9:11:0d:eb:08:bf:
c0:8a:7b:dc:97:6b:c8:a4:4e:22:f4:e3:98:18:1f:9b:da:40:
12:99:e9:85:aa:4d:3e:fd:14:e2:23:8c:ca:c7:d3:e2:b1:97:
37:c1:f3:1b:9f:7c:f9:c2:77:ae:b6:6b:e6:76:66:72:80:4b:
a2:c7:b5:f6:5f:f4:31:e2:37:13:92:36:a6:a1:14:42:95:52:
02:7c:28:46:76:95:20:ab:e5:0f:88:0d:6d:24:70:a2:ed:7b:
05:f5:4b:79:19:15:02:79:aa:03:24:a9:d0:82:f5:4e:f7:69:
6a:40:f0:43:a2:d6:63:2a:f4:54:d4:e0:49:32:f3:38:65:15:
5e:10:c6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:12 2025 by rpki-client