Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: 4r1V/L34aF8BiIpAnphXgDGVbY8uJfIMVYlSgiBOULM=
Subject key identifier: 2F:1A:9E:62:CC:BD:17:A9:05:9D:6A:49:40:2B:4B:64:1F:40:42:C1
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 0199FC5855C2D4741338F1DC7B8148FD23C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: 1-tobmuArgsO1CcS37ElbRPB4oI0.roa (hash: eoz/B2g3BVZDkFcVrm+jT5e/XqpAm/AHcMzK9BR9JlQ=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: rcmxXgWVoS0BpAlaJgBp8o/coqIJZcUuTK/aFL8BADE=)
3: dysGc3dUC19B4xYH14h547-J3bU.roa (hash: xZJSB931nK/0DYsJmXQtw/2T7yJN+gcQPJ/Rr8Mu1dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:55:c2:d4:74:13:38:f1:dc:7b:81:48:fd:23:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=2f1a9e62ccbd17a9059d6a49402b4b641f4042c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:85:b3:50:f4:d7:b8:67:5f:ef:23:39:4c:
a9:ea:5b:97:a4:f9:3e:22:86:b5:6d:8e:db:30:b1:
bc:f9:50:1a:2c:6c:40:36:bc:09:08:1c:65:23:d7:
d3:53:95:67:8f:33:62:9b:43:76:2a:01:f6:4a:d8:
09:7f:ca:05:f3:c7:9e:22:3e:5c:cf:84:8b:ed:20:
9f:28:d2:1d:8f:ad:80:90:94:ae:9e:8c:d1:fb:40:
74:4e:49:21:1d:06:cf:4e:45:7e:d1:60:e4:44:12:
de:0e:a5:7b:f9:4a:36:f1:90:67:cb:91:ed:07:e4:
fd:c5:a3:84:2d:37:ef:bc:ce:e0:45:16:ca:a4:cc:
05:18:66:02:ef:4f:26:a0:5a:55:2e:ff:9e:aa:4c:
66:e1:52:19:e6:30:d7:9d:aa:48:39:10:ec:b2:f7:
4d:c1:cb:98:9a:c2:5d:4b:6b:68:eb:14:90:59:c6:
29:22:b4:07:b9:6e:7b:9b:d9:0a:2b:eb:e1:a1:4e:
08:0d:a0:e0:3f:7e:53:61:53:db:fc:6e:4f:5b:2b:
20:ef:a4:2f:3e:11:c8:69:0f:a8:9f:84:05:a5:22:
47:fd:df:ee:40:71:68:20:2e:96:40:ac:bd:72:3f:
a8:12:a0:8d:48:97:65:15:3f:c3:00:08:c9:c9:47:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:9E:62:CC:BD:17:A9:05:9D:6A:49:40:2B:4B:64:1F:40:42:C1
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:32:40:13:54:99:e7:50:ca:94:1d:d9:9b:51:8e:0b:29:2d:
07:85:e1:b5:e7:cd:32:83:31:06:bb:97:ea:cc:56:c0:2c:ca:
ce:87:c2:98:26:39:d4:a8:42:87:bb:9c:ce:25:5a:cd:2b:31:
d0:c4:f6:d2:88:98:a7:b1:b4:ca:31:e8:42:62:9e:ba:7b:8d:
aa:12:c1:09:29:6a:dd:09:35:62:ba:78:ed:f6:4f:4d:ef:c9:
32:89:dc:8d:c2:7c:b7:65:db:1b:5b:c7:09:cc:34:55:54:79:
ad:90:f1:f4:f2:2d:e7:d3:99:83:a0:af:80:ee:e3:d6:6d:50:
ce:39:43:cc:0d:a6:19:42:dd:70:8f:b0:30:ca:ae:e6:e6:12:
e2:f0:56:05:6c:f9:d2:51:c2:e4:5c:68:be:bf:49:af:7a:f3:
63:43:d7:53:ca:a0:ec:29:48:f3:7a:28:dd:8a:6b:0d:d4:e1:
00:66:d5:6a:0b:c7:78:a5:ed:63:09:9d:c9:15:3c:81:28:5d:
f0:78:ee:d9:96:73:fd:2b:e5:22:ad:31:bc:b5:1d:b0:06:95:
de:5b:70:d8:15:5c:cc:20:c6:df:e7:e7:63:a0:10:f7:7d:1f:
7e:67:53:09:02:71:94:70:38:0a:cb:45:2d:86:9f:4f:27:2f:
34:47:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:34 2025 by rpki-client