
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: A9sMltovSvCJ+0px8r/vF9vRcNGnpXWvVjV3EU99Ypo=
Subject key identifier: 88:11:D1:30:4C:34:72:56:BE:DA:AA:40:DF:3E:EF:F7:D9:4D:F3:0C
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 0199FAD7A4F23423D3854AC99FB9171C3F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 1380
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: e+zXHoxyfhwe07WHrUdYe2AqhJFeGe3vx8ZQl/YNyGs=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a4:f2:34:23:d3:85:4a:c9:9f:b9:17:1c:3f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=8811d1304c347256bedaaa40df3eeff7d94df30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ee:79:4a:98:e5:b8:73:42:2f:6f:0b:b8:14:
86:6b:1c:12:5d:81:dd:e5:5f:08:a1:88:61:9e:13:
e4:17:5e:66:3a:c1:ff:a2:47:f3:eb:81:ad:95:26:
29:86:a1:5d:e7:ee:83:93:cd:67:ae:f6:ef:f9:09:
5e:a7:0f:e1:a3:ca:02:26:07:e5:90:ff:b4:89:ad:
67:f5:8c:a4:97:5f:07:71:de:6b:04:f6:23:4e:a7:
2f:0b:31:9a:53:b8:f3:ef:43:a8:1c:d3:53:23:7b:
99:ab:c5:b3:ba:d3:63:38:99:62:e6:37:be:40:00:
ae:33:ee:ba:b0:b6:76:4a:bc:4c:44:da:9e:12:51:
11:3b:d9:95:1f:0c:15:c9:63:40:d6:b2:33:b3:61:
75:c9:a5:b5:d0:82:1c:ed:ac:e9:65:08:d9:09:9b:
bb:ef:25:e9:06:ef:03:fd:45:fb:43:85:04:69:52:
10:d6:df:90:bd:eb:fe:cf:2c:c1:97:a3:f9:66:b6:
55:95:bd:b2:cb:3c:34:7b:57:84:b3:18:84:4b:ba:
cd:df:7b:96:5c:97:e7:23:cf:61:d8:33:73:20:07:
df:14:c7:d2:75:d2:6b:32:26:28:c2:a0:67:79:d3:
b1:8d:59:fa:a6:68:2c:bf:21:f3:bb:9b:27:9c:bd:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:D1:30:4C:34:72:56:BE:DA:AA:40:DF:3E:EF:F7:D9:4D:F3:0C
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:3c:ab:7c:3d:85:79:c6:48:4f:35:40:f4:35:77:b0:e4:8b:
f8:b8:ff:40:6c:14:6e:9a:3f:49:2d:b5:89:2b:dc:13:a1:c4:
49:43:92:16:f1:6d:de:58:fd:89:82:ea:a7:71:c8:f5:a4:23:
6d:b8:7a:a7:4e:77:ab:04:01:76:35:b7:ee:3f:ca:3e:b8:35:
3c:14:6e:46:60:3d:73:08:5b:7b:61:f4:9e:df:a4:58:0e:bf:
a4:2a:e5:48:3b:28:f1:f3:76:b3:15:38:c8:d9:7b:bb:47:89:
8b:5d:9a:dd:2e:00:9c:4f:ed:55:d0:36:2c:d7:c3:45:38:64:
4c:09:57:97:1f:9d:13:c4:a7:6b:e2:c4:35:c4:f1:7c:1b:b3:
dc:ab:92:28:c6:b7:bb:ae:bb:3b:74:4a:b5:75:b7:ef:51:b4:
ab:ee:c2:bb:0b:47:79:94:98:8d:3b:ea:27:f7:73:a5:da:a5:
d3:65:40:b1:43:4f:cc:f9:f0:25:0b:f4:f0:ee:66:9d:b7:4b:
77:f1:97:43:92:28:65:84:4d:c0:65:1f:ea:d7:d4:25:d4:b5:
aa:4f:34:3d:e7:33:53:c0:c7:34:cd:b1:45:32:ee:35:81:e8:
c9:65:f1:ee:a7:42:33:d9:96:0c:2d:eb:a8:51:21:27:4d:37:
7d:1a:45:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:10 2025 by rpki-client