Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: xbN2GmLLSCJwCS854Un4gp1EyzzEXEuVxFfG4Abn4yk=
Subject key identifier: FF:72:67:36:C2:D5:03:0C:3D:3B:60:2C:24:EB:F4:64:C4:D8:58:9C
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 019A0D4BF4E6BCA6CB3F27CCD9E9CF744933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0594
Signing time: Wed 22 Oct 2025 19:01:12 +0000
Manifest this update: Wed 22 Oct 2025 19:01:12 +0000
Manifest next update: Thu 23 Oct 2025 19:01:12 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: Le8YEwN6lxTDO7eN25qGJo0SP5+R+cmhcXvYf3/6hC4=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:f4:e6:bc:a6:cb:3f:27:cc:d9:e9:cf:74:49:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Oct 22 19:01:12 2025 GMT
Not After : Oct 23 19:01:12 2025 GMT
Subject: CN=ff726736c2d5030c3d3b602c24ebf464c4d8589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:1e:13:f6:44:a5:4d:88:03:8e:87:93:27:
11:9b:dd:20:1c:ed:7b:a3:b7:0f:ce:53:44:9b:6c:
cc:db:c4:88:1c:45:97:ac:cd:5d:78:d3:cb:3c:4e:
62:9c:c8:c4:19:36:95:d3:8a:d0:a6:77:56:a8:77:
b5:bc:7b:66:66:25:38:7e:0d:40:8a:45:3a:e2:07:
ac:48:c6:b5:61:29:aa:3b:22:37:1f:77:19:69:34:
57:b4:c8:bf:6e:f0:0f:99:96:29:10:51:df:1a:2b:
e0:98:3a:00:2a:a6:80:22:26:46:9c:e9:fb:7a:c6:
fb:b2:09:0d:e2:bf:cc:53:dd:90:ca:61:57:41:a8:
9a:b3:b1:c1:f6:1b:5d:72:7f:f1:fc:f8:0b:de:76:
9a:9d:5d:02:2e:23:3f:62:68:24:1c:7b:93:ce:3a:
01:f8:86:cf:57:ed:e9:3f:d3:79:c5:bb:86:92:67:
a8:be:42:bb:2b:02:2c:57:cc:35:a5:c9:39:a7:70:
98:2f:cd:46:94:ce:ef:4d:cf:0b:fd:02:67:a7:dc:
e7:1f:0f:37:af:6b:98:4e:38:8b:c0:78:87:29:b8:
71:3c:75:1f:e0:a6:83:d1:e5:60:30:b5:a2:9e:19:
9d:e2:c3:9c:a8:e6:f1:10:82:46:c3:10:73:a5:84:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:72:67:36:C2:D5:03:0C:3D:3B:60:2C:24:EB:F4:64:C4:D8:58:9C
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:60:8c:d0:66:05:e2:64:33:94:18:b6:f0:9e:76:f4:d1:77:
35:46:d4:37:2f:7b:c8:3f:5a:87:9d:6d:0d:a2:79:15:b0:ae:
00:4a:af:47:2f:a7:39:29:38:ea:0f:4f:a5:d5:60:3f:27:a8:
68:30:81:ec:58:c9:74:e4:f1:e2:b7:d6:c1:05:c4:66:c0:b0:
42:9f:ad:0f:1d:9b:9b:6f:d3:41:f2:1c:98:1b:49:07:18:b8:
f8:ee:38:9a:62:31:9f:81:0e:01:79:61:c9:85:6a:52:b5:93:
5c:99:0a:7f:1f:39:4b:12:10:72:48:46:dd:9c:ec:e6:52:f6:
99:cf:81:9d:ab:4c:10:b5:76:a5:0c:9a:84:00:01:96:e4:33:
2f:f1:22:8d:6f:b5:0e:4a:41:80:73:19:c1:ba:79:28:d5:28:
35:ff:dd:dc:7c:7f:27:d9:1f:fc:2a:62:1b:98:aa:5a:99:a9:
5a:e6:b4:fe:09:4f:ae:f2:ea:d5:3b:77:a5:a2:ce:c9:7d:cb:
3c:bc:48:db:4a:83:3b:54:be:d7:e1:5b:1f:01:07:aa:3e:e3:
e9:7b:63:73:af:d6:4c:fa:e1:27:f2:74:65:51:a5:81:b7:e0:
c3:30:74:cb:0a:71:28:d4:24:ba:aa:8d:36:19:54:d8:70:ff:
3b:1b:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:07:37 2025 by rpki-client