Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: PFnyjLhqcdk5sUBAbvWnWxfOZPzHewsgZN/HJjUvJ4o=
Subject key identifier: 5B:50:20:40:9D:3F:D1:8D:B7:34:A9:F3:96:D5:AD:7E:DC:F9:C5:7F
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019A24E5D26F950D7CC27BAA28B0454866CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 16FF
Signing time: Mon 27 Oct 2025 09:00:32 +0000
Manifest this update: Mon 27 Oct 2025 09:00:32 +0000
Manifest next update: Tue 28 Oct 2025 09:00:32 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: MLzwa/A8/66zW3sFPwW5HBE7R4GS6SFHq21YWWIFu9Y=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:d2:6f:95:0d:7c:c2:7b:aa:28:b0:45:48:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Oct 27 09:00:32 2025 GMT
Not After : Oct 28 09:00:32 2025 GMT
Subject: CN=5b5020409d3fd18db734a9f396d5ad7edcf9c57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:e0:af:15:ee:7a:ba:d0:68:6e:f0:59:84:
54:9e:a8:2d:34:f0:f7:0c:47:9e:72:18:0a:b0:ea:
a8:cf:ec:b7:ce:59:3e:93:ab:3a:54:b8:94:77:4b:
2b:aa:dd:b8:10:03:77:1d:7b:d9:11:83:b6:29:ed:
de:f1:d1:b2:92:84:ce:e5:42:69:9a:34:83:8d:b0:
de:57:64:fc:ad:9b:6e:cc:d8:ee:02:f3:7a:0b:da:
f1:b3:e7:08:30:06:9f:2d:2c:a0:96:3c:67:8b:eb:
d7:c2:54:08:2b:58:05:d8:3d:2f:a4:af:82:cf:c2:
1f:11:84:17:f0:11:eb:56:99:e4:98:a3:26:b2:93:
0a:5f:43:45:ed:ff:80:b1:c9:3a:1f:27:24:3e:2e:
51:fb:df:6b:2f:a3:e5:c4:8d:07:29:a2:c1:da:8e:
bd:63:b4:b7:33:40:bf:57:c3:53:26:22:d8:d0:dd:
e2:56:ac:03:35:bc:be:76:49:58:98:07:f7:14:19:
48:73:7f:fa:46:34:23:e0:c6:71:78:31:fd:8e:f8:
26:2c:bf:5d:d4:0b:0d:ee:70:a5:6d:3f:71:28:ff:
ea:42:ff:95:8f:77:e4:34:3e:42:59:60:c1:84:1c:
9f:21:37:2f:10:99:95:ea:37:b7:52:60:42:23:e7:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:20:40:9D:3F:D1:8D:B7:34:A9:F3:96:D5:AD:7E:DC:F9:C5:7F
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:15:24:28:17:51:e8:0b:f1:fa:c4:eb:14:d9:65:33:05:a5:
cb:5f:82:0d:ec:b5:90:04:4a:6f:1b:ce:b4:24:ad:3b:5c:7b:
d4:f5:3f:8e:53:21:ba:e7:b6:dd:e1:01:7c:b3:94:a2:13:18:
4c:23:03:26:01:7e:f0:e5:32:b4:93:53:f9:ee:a6:00:06:35:
ba:29:e8:bd:b9:fe:ca:9d:15:a9:7b:57:d8:0b:93:65:f7:d6:
93:23:56:e8:0d:e1:6f:cf:38:63:21:9f:a4:58:3e:17:f0:95:
a9:2d:4c:4b:c9:15:15:86:91:94:31:70:59:b2:52:24:41:6d:
ae:14:cb:a1:9f:ca:c3:bf:bd:9e:c3:b9:ba:4a:f7:e6:0d:12:
84:3b:67:a9:54:57:30:29:17:74:e0:2b:41:ed:fa:e0:89:92:
3d:b2:1b:07:8d:18:57:d3:8f:07:b0:73:25:13:17:ba:10:cd:
8a:e8:be:96:ff:1b:ff:34:35:2a:d8:a6:38:a1:97:f4:85:68:
a2:46:c6:a3:77:33:7b:9a:a9:0e:2f:8b:18:58:f3:63:4c:ab:
fb:d0:a3:1a:95:eb:f1:9d:e2:4c:8e:58:2f:7b:95:7b:a6:03:
9e:19:06:9f:43:66:86:bb:ba:69:0d:21:b9:0f:90:c6:93:4a:
e4:c3:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:05:33 2025 by rpki-client