Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: SXoM40tb5bETrnMGIs3N7YHS/X+I2++LTCzLWp3JF84=
Subject key identifier: 7E:88:3A:84:50:6D:52:C4:33:B6:38:A7:A7:CD:D5:08:DC:2D:EE:EC
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 0199FBEA986E69B4393899C0659423441012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 10:01:19 +0000
Manifest this update: Sun 19 Oct 2025 10:01:19 +0000
Manifest next update: Mon 20 Oct 2025 10:01:19 +0000
Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: +hwST9rVioBimwZbt40OZMNSlOlSkBTxdBU5i0+pWBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:98:6e:69:b4:39:38:99:c0:65:94:23:44:10:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Oct 19 10:01:19 2025 GMT
Not After : Oct 20 10:01:19 2025 GMT
Subject: CN=7e883a84506d52c433b638a7a7cdd508dc2deeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:86:d3:b6:f7:3c:e7:ac:e5:ed:31:26:2c:
bb:0c:12:89:ca:71:3f:04:06:8a:e3:ef:88:ab:ae:
d7:1a:6f:d0:c4:4b:f5:c5:3d:93:2e:cf:b6:69:eb:
1c:35:ea:b7:a9:88:a1:73:16:1e:37:94:e7:ba:f2:
0d:bf:7b:ba:f1:dc:55:0d:65:c8:3a:b7:97:68:55:
de:d4:a4:7a:13:45:c1:01:82:af:e7:4f:2d:00:70:
8e:06:eb:64:dd:66:08:05:63:92:c5:9d:f1:1b:41:
cf:d6:06:83:67:fd:42:eb:4e:e5:1f:12:37:ba:2f:
75:cb:47:fd:84:74:90:62:66:11:b8:40:cd:08:4d:
2a:ce:0f:58:62:f2:50:96:c6:b9:5a:d6:84:19:7d:
45:32:19:ff:71:b0:fe:8f:b4:94:fd:43:5c:76:d8:
83:8e:35:2e:18:7e:ae:7f:70:53:e3:e4:a9:4a:d4:
bb:99:c5:5c:80:56:a7:6b:72:a1:c2:22:5a:bc:b4:
a9:c3:f9:87:b4:ef:ed:5d:4e:27:f0:68:ed:45:a1:
84:11:50:93:4f:3b:bf:69:18:6f:bc:47:f0:3c:a5:
22:67:4f:6b:12:3c:3c:87:a0:c8:a0:f0:63:e6:60:
dd:18:65:62:7b:f0:82:bf:d5:37:07:32:26:fb:78:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:3A:84:50:6D:52:C4:33:B6:38:A7:A7:CD:D5:08:DC:2D:EE:EC
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f7:30:1f:d2:a0:8e:75:e3:3d:84:93:31:6a:0f:ba:7b:e8:
2f:db:65:f6:42:b5:25:36:c6:d6:9a:3e:1f:c4:8b:14:ef:e4:
db:f1:34:47:e5:53:37:1f:f7:39:73:05:b0:7c:e7:ce:4b:6c:
4e:a5:c8:9b:c1:ce:ba:9f:d4:e6:e7:be:1b:f4:7c:f8:7f:7f:
11:2b:1d:09:d5:f2:16:8d:7a:c6:44:3d:c5:f6:55:60:5b:b7:
af:6e:c6:f3:99:f6:df:e4:79:67:5a:37:54:be:2a:9c:71:c4:
f5:8a:48:17:7a:70:e3:e2:cf:e1:7d:1f:4f:82:2d:fc:85:85:
cb:d2:d5:27:3c:ec:e6:4d:cd:20:b9:61:60:6b:91:7e:5a:16:
2a:2e:d2:b6:6c:b4:3f:2f:ee:28:7f:8f:24:a7:48:c8:a3:80:
0f:b0:11:1b:83:96:4a:ce:26:16:3a:f2:1d:b0:f2:2b:0c:79:
02:2f:49:f7:62:d4:58:eb:5e:af:96:61:f8:04:06:a8:0a:2d:
63:20:e8:47:51:53:16:b3:5d:9c:91:3a:0b:03:bb:68:96:bd:
5b:44:42:2c:f8:c9:ff:45:28:c8:41:93:da:b0:49:e4:32:9b:
ae:f1:38:7e:fb:91:6d:05:dc:5b:ba:79:90:d6:22:4b:ec:dc:
f6:5e:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:47 2025 by rpki-client