Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: zdt2sMz0wdaXAHOm9fjRuDIw6JMpGLYKSrAvk05PExU=
Subject key identifier: 38:FF:28:41:36:EC:B1:A8:E4:30:3B:B9:15:08:D4:26:56:CC:5C:6E
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 0199FB46349AED4D5ACB34897C392EEE049D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 56
Signing time: Sun 19 Oct 2025 07:01:46 +0000
Manifest this update: Sun 19 Oct 2025 07:01:46 +0000
Manifest next update: Mon 20 Oct 2025 07:01:46 +0000
Files and hashes: 1: 3d70znP7o5cQ_Sr6eRmA6Vl0IBU.roa (hash: j+rZf2bmlj9QYrtrhsiFdNMWtcMmhTeJyg7GtA/z7dg=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: ugMmjJA3cOnjLzqCxWDUJGCpBcyhjESzN+4uSGPiLLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:34:9a:ed:4d:5a:cb:34:89:7c:39:2e:ee:04:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Oct 19 07:01:46 2025 GMT
Not After : Oct 20 07:01:46 2025 GMT
Subject: CN=38ff284136ecb1a8e4303bb91508d42656cc5c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:36:3b:e4:c9:78:bd:a3:f9:f4:d1:8a:ae:25:
f4:c1:c5:15:7f:16:0f:59:ea:03:b1:3b:d0:1a:02:
de:9e:3e:bf:71:5e:83:45:35:19:3f:75:9b:da:92:
25:64:ad:a3:57:37:03:99:b7:5f:f2:a0:a3:d8:8b:
bd:d7:7a:f1:05:fa:15:a3:8b:4b:f3:29:62:38:ce:
a9:78:78:91:be:99:6c:7e:2c:b8:5f:e7:ca:21:01:
83:ce:68:5f:57:0a:4e:4d:18:4c:16:49:75:39:8c:
6d:f8:05:4d:9d:ff:0a:77:a9:65:36:43:10:df:be:
f5:5c:21:4f:98:36:98:5b:a0:10:5d:24:d3:5c:62:
02:ab:66:b0:a6:b2:f3:af:d5:2a:4e:68:d0:05:ef:
a2:89:f3:b1:d5:7b:f0:5c:3e:34:9c:9d:0f:fa:07:
3c:20:06:db:10:75:a6:ae:64:bb:ba:0d:98:81:1f:
91:a1:d3:5a:d9:79:fc:51:98:57:2a:27:dd:7a:52:
b8:1f:5e:e7:ac:88:59:77:2b:01:33:2d:00:ab:f1:
d7:84:62:cc:9e:fa:07:2c:ac:33:72:b2:42:78:ce:
4e:22:35:79:16:c3:5d:9f:a1:a2:85:45:cc:77:32:
46:29:85:a0:eb:57:58:89:7a:87:a0:5b:69:a2:d1:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FF:28:41:36:EC:B1:A8:E4:30:3B:B9:15:08:D4:26:56:CC:5C:6E
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:e0:ce:d7:aa:a7:8a:cb:8d:52:74:06:15:50:1c:71:18:e1:
90:20:cc:8d:77:a1:c2:ff:6e:bf:00:00:7d:e0:c6:a0:c8:83:
a4:77:3f:fc:bb:8a:90:12:b1:43:6b:e1:d1:a3:2d:ce:ca:1c:
a9:14:5f:4f:66:d6:fa:db:90:31:92:61:6a:c9:22:51:47:6d:
bf:a5:1b:2c:eb:a0:4e:23:c3:9e:6d:62:a7:d1:b6:c8:98:a4:
ba:8a:92:00:a8:a5:17:5b:a1:6e:cd:1b:04:5b:94:d1:04:b0:
c1:fe:ea:db:75:65:d2:98:a9:f7:01:8b:21:6d:19:d1:e6:9a:
f0:7e:92:c8:e4:c8:e8:7e:c5:b5:c1:04:0d:74:cf:f8:ff:1e:
5d:10:58:6d:bd:bb:21:6c:4c:11:24:88:dc:14:26:7a:1b:1e:
e8:d1:92:20:6b:f8:4f:e9:c4:e2:88:6b:0b:a2:4a:54:c0:45:
f5:08:ca:b6:ca:95:6d:ac:b7:01:ed:b2:8a:ec:40:f7:86:4e:
bf:cf:61:5a:99:47:1b:d9:e9:be:a1:46:8a:db:bb:ce:cf:bf:
ee:f8:55:a2:de:45:bb:8f:04:f8:02:0f:d5:b3:b3:3b:37:97:
f1:40:f9:ef:36:83:0a:d7:3b:c6:8a:73:c2:f3:b0:d1:c7:8f:
9f:51:e8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:17 2025 by rpki-client