Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: xIDC+BIpxNtIMzU7+w4NCkP6ae3Yjt69P6+ITNt+yYE=
Subject key identifier: 0D:A2:92:BB:A1:83:CA:CA:0C:5A:1B:0C:49:8E:F7:FA:83:37:1C:B9
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 019A269D515223C5E2789B805C2A445E3913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 16FA
Signing time: Mon 27 Oct 2025 17:00:35 +0000
Manifest this update: Mon 27 Oct 2025 17:00:35 +0000
Manifest next update: Tue 28 Oct 2025 17:00:35 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: KXgrg3+j649MCToZQ0epOhdkQzIAbxTDpJ1iLyf09jQ=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:51:52:23:c5:e2:78:9b:80:5c:2a:44:5e:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Oct 27 17:00:35 2025 GMT
Not After : Oct 28 17:00:35 2025 GMT
Subject: CN=0da292bba183caca0c5a1b0c498ef7fa83371cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:7a:bc:10:41:79:5f:94:79:5c:04:34:64:
3f:73:41:94:e9:16:20:f0:47:b0:60:b1:71:4f:29:
ca:65:ef:34:68:16:51:51:c1:18:4b:1c:6b:45:67:
f1:ee:a8:77:4e:47:12:85:18:ac:7a:a0:8b:e8:1b:
ee:2a:59:8c:f0:b1:ab:b0:26:88:2d:c3:30:d2:0f:
98:1e:36:1d:a1:2d:85:29:8f:f2:7f:fe:d6:1a:d2:
28:eb:9a:b2:89:5d:4b:c0:03:8f:a7:31:3f:5a:52:
4e:68:4c:2f:5e:a9:e1:30:4f:7b:e1:dc:9f:9e:68:
73:5f:85:b5:8f:ba:c9:d6:21:74:e5:21:2b:22:73:
43:38:da:d8:ef:94:a9:33:05:6f:aa:86:90:f2:12:
8e:d4:46:df:70:fd:52:e0:04:00:ac:3d:43:5a:81:
8b:50:d1:4e:9e:13:d1:cc:b0:28:37:a9:81:de:d4:
b1:71:87:57:02:46:93:dc:6b:b5:43:cd:b2:ce:de:
28:2a:88:46:7a:52:a5:8d:3e:df:e8:e3:90:3b:f9:
81:77:68:38:36:ec:ef:24:84:5b:ac:72:a0:97:ea:
5c:db:ca:28:d6:1a:7a:18:e4:83:dc:d5:78:51:52:
d9:b9:08:b3:89:01:79:b6:7b:73:fb:f0:8b:1f:71:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A2:92:BB:A1:83:CA:CA:0C:5A:1B:0C:49:8E:F7:FA:83:37:1C:B9
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:27:2c:ea:26:ef:84:6f:55:e6:47:55:15:26:3c:3f:6b:4a:
46:02:34:a3:a1:20:4f:e2:46:2b:27:82:bc:3a:05:b9:ec:6f:
78:27:70:65:b6:5d:b6:7d:14:91:ab:66:2b:de:18:35:d0:e2:
d5:5f:b3:24:79:b3:f4:b5:48:50:bd:f0:cf:48:6c:8f:2f:c1:
e2:3c:88:90:58:d4:c9:21:9a:85:2a:87:e6:14:ed:fa:71:81:
83:5a:9f:3a:32:48:8f:53:7f:45:90:5b:b6:a5:dc:21:9d:23:
11:0d:b8:a4:fa:06:47:64:9c:0d:1e:f2:c8:78:d0:36:5e:f9:
2e:3d:85:61:99:79:02:e9:09:8a:9b:ef:bd:56:fb:04:b9:6b:
dc:0b:ef:3f:98:0a:57:b5:02:b1:2b:04:e6:dd:71:c0:d2:e0:
26:4a:12:fd:61:29:2b:34:15:48:07:1f:7b:f7:eb:69:76:c7:
e5:1c:b1:66:23:3a:a8:38:75:15:7c:63:91:e4:55:27:8a:22:
d0:fe:64:b7:69:77:71:20:49:8e:74:e8:0a:fd:17:77:fa:cb:
02:9c:80:f0:8a:4b:fe:a5:ea:14:b3:8a:c1:6f:de:ec:37:3b:
33:5e:0c:ba:ea:a0:be:6a:02:dd:5c:78:a6:77:f6:c3:18:81:
6a:50:0b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:38:40 2025 by rpki-client