Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: xcJY5NexoaR88tlzUNu+3YBkp7yUKSKCrmMUiIyQ9fc=
Subject key identifier: 0E:79:BC:A5:05:97:ED:0A:A8:C5:42:2B:F0:79:96:D0:DA:4A:CD:5E
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019A22C0BE4D8327CC7730F5A1D9DB8C8936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0579
Signing time: Sun 26 Oct 2025 23:00:48 +0000
Manifest this update: Sun 26 Oct 2025 23:00:48 +0000
Manifest next update: Mon 27 Oct 2025 23:00:48 +0000
Files and hashes: 1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
2: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: TgVOIX3HClSvsgoK9EVNdedPqNMThfwQ04o/+Xl9tmI=)
3: lyYoYFNGC2A9WNKCueXrm4mkRZo.roa (hash: IZrpJH4Ut/OiG1jPgHzsJ5IYnAXiTXDkQvi3YTSJS9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:be:4d:83:27:cc:77:30:f5:a1:d9:db:8c:89:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Oct 26 23:00:48 2025 GMT
Not After : Oct 27 23:00:48 2025 GMT
Subject: CN=0e79bca50597ed0aa8c5422bf07996d0da4acd5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:09:7f:1a:10:4e:11:b4:77:33:54:f2:2c:
bd:79:78:21:cb:06:92:84:2c:5e:55:22:b8:e3:dd:
81:09:27:10:67:b2:5b:ac:52:d1:fa:24:03:b5:35:
23:07:71:0a:b6:e2:cd:0a:6e:38:53:3a:08:e0:01:
5c:b3:4c:3b:b0:1a:35:b8:3b:b0:07:3e:72:2b:55:
f9:c3:89:0e:b8:4f:77:96:72:53:40:ea:fb:a9:7a:
67:d2:87:ac:1b:4c:6e:86:6e:75:b5:16:54:84:bf:
6a:e1:a4:eb:22:f0:5b:f8:31:30:98:ad:c9:ed:4d:
04:99:30:ee:5e:23:7a:a0:b4:db:c9:00:aa:77:08:
b1:ca:4c:d7:e6:70:72:e4:fc:e5:40:2b:e3:9e:db:
c5:b7:79:a1:2d:a2:cd:2b:22:53:73:14:e2:69:60:
cd:dd:d8:fd:15:0d:e4:9e:d9:c1:0c:f0:bd:86:ad:
0c:c8:d6:5b:d4:d5:81:7a:b5:23:29:4e:6d:56:ca:
44:56:1d:83:b8:89:03:ef:1c:3b:0b:ff:06:5f:51:
f8:47:e6:a2:b6:b5:1c:dd:35:c8:d1:48:5b:b6:a6:
48:d1:5d:fd:08:ad:6c:88:80:3b:16:cc:b6:25:9d:
4a:4e:cd:1c:c7:2e:7c:7a:47:5c:09:0a:0f:0f:36:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:79:BC:A5:05:97:ED:0A:A8:C5:42:2B:F0:79:96:D0:DA:4A:CD:5E
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8d:5f:d8:13:ed:c8:36:5e:03:90:b1:5f:0c:84:c7:fa:8f:
b3:6a:01:01:30:fe:98:fd:07:6e:e3:e0:a0:97:84:0b:97:92:
b1:d2:23:31:23:c4:d2:d0:dc:e5:22:8d:ec:16:a8:92:b0:2e:
91:94:a0:e0:ef:2d:1e:a0:9d:ee:56:ed:76:ba:21:a9:10:1c:
28:64:ea:2b:93:db:2f:bd:00:db:11:97:0b:34:e1:34:2c:3f:
36:88:d3:bc:37:14:2e:28:e9:56:29:c7:ee:dd:78:d3:0b:65:
89:18:e0:aa:43:1c:83:87:87:89:2f:26:4d:8a:c3:ce:3c:65:
f6:3b:64:72:98:f1:8d:3d:c0:ee:b3:86:58:05:e9:ba:10:b1:
ab:3f:a3:04:40:87:09:a8:a1:47:b5:f5:37:22:2e:ef:a0:b1:
01:4c:07:f3:06:4c:5c:d4:cb:46:66:02:a4:10:1f:35:aa:8d:
29:32:64:f9:bd:59:d8:c5:09:79:65:0e:61:be:6e:dc:be:6e:
ca:1a:7a:ac:fb:4a:02:2e:ec:03:48:65:b8:a5:ee:f5:d4:7c:
c7:c9:7e:8e:97:ad:0f:cc:bd:43:e1:4d:81:eb:11:b8:21:e3:
1c:43:23:7f:30:6f:1c:83:58:df:70:68:ca:86:72:2a:ea:dc:
65:14:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:27:58 2025 by rpki-client