Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier: /UZeCcm6FfR1s4rNgDldt0V2YiWzRYJRj5q62bXzvdA=
Subject key identifier: 28:F4:CF:77:4F:9B:51:6E:13:D5:CE:60:F9:51:D3:E0:AF:E4:45:AB
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial: 019A706E931C0257EA9F6B1E581389146AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number: 042F
Signing time: Tue 11 Nov 2025 01:01:26 +0000
Manifest this update: Tue 11 Nov 2025 01:01:26 +0000
Manifest next update: Wed 12 Nov 2025 01:01:26 +0000
Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: P3E/+g1eyt3aVTX2G3oVbhDfgPrtZ3fJ/i6CGoBJmSc=)
2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:93:1c:02:57:ea:9f:6b:1e:58:13:89:14:6a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Validity
Not Before: Nov 11 01:01:26 2025 GMT
Not After : Nov 12 01:01:26 2025 GMT
Subject: CN=28f4cf774f9b516e13d5ce60f951d3e0afe445ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:9b:91:0d:69:95:e0:68:02:d9:c4:39:00:
45:da:cd:d5:8b:f8:92:a6:a7:a3:12:13:8d:56:88:
6e:75:d8:8a:ab:2b:32:05:f3:21:92:8c:51:50:d1:
06:d1:5c:62:42:d8:c7:d6:8e:99:3e:ea:c5:4c:3a:
12:56:21:39:47:ee:49:bf:e2:27:dc:0d:46:43:f6:
cf:9f:25:27:17:ff:b7:1d:60:e2:8f:87:59:75:60:
ca:f1:c5:8c:de:b4:df:4f:98:ba:28:f0:ef:23:00:
14:59:58:34:a9:6d:a5:a5:c9:d2:8f:61:2d:74:d2:
1e:27:df:c3:6d:bd:12:f5:97:46:e8:bc:a1:7f:9c:
6c:78:27:5c:db:01:05:3b:a0:ba:21:e7:a6:8d:b5:
37:f3:b0:0e:70:83:c3:4e:3f:03:bd:4b:c3:ba:f7:
fb:0a:53:14:60:05:8a:3c:fa:64:63:a3:03:7e:69:
4b:b1:92:58:37:c2:b2:bf:a1:0d:d9:30:06:84:54:
0b:b1:f7:fb:52:03:a0:4f:01:b1:a1:ad:e8:03:22:
da:16:9e:55:db:bd:ed:f7:f5:52:1f:ae:74:33:c0:
a9:92:31:0f:82:bb:35:d2:99:db:62:af:c5:0c:e3:
85:65:e6:b3:35:74:e3:52:6b:ab:08:50:db:1d:ef:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:CF:77:4F:9B:51:6E:13:D5:CE:60:F9:51:D3:E0:AF:E4:45:AB
X509v3 Authority Key Identifier:
keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:61:1e:bb:69:c3:a4:af:64:a4:06:12:71:19:36:aa:b2:73:
fa:54:c6:33:59:79:59:b2:7a:96:cb:ce:27:76:15:ff:42:c9:
22:52:ee:e9:35:41:57:24:e8:2b:0b:a9:d7:e4:fd:bd:1f:98:
7d:a0:dc:83:f4:98:3d:f0:03:21:76:67:9a:ac:b3:9f:eb:87:
a3:a2:6c:f9:dc:0a:00:17:20:dd:bb:3d:51:51:f6:03:21:49:
b7:f1:9c:3b:a7:e3:d9:f3:1f:b2:70:22:de:8a:a9:e6:43:35:
91:e9:b8:3e:5f:73:d6:51:00:31:af:46:54:26:6f:f4:1c:5e:
cf:64:96:51:2c:d2:7b:9a:d0:85:d9:25:18:fc:20:13:c0:25:
77:3c:1d:80:ee:55:0c:18:24:a6:12:2a:86:f2:96:ee:b0:80:
fe:e3:7d:96:f2:15:29:53:5e:44:5e:76:c0:7d:f7:03:ac:fa:
87:a1:51:3d:8e:89:dc:6d:dc:a1:4d:50:d7:e4:b5:fe:5d:c3:
b0:8e:ca:9c:15:d5:a9:0a:8a:18:87:a0:7f:d9:25:6b:e5:cf:
3d:31:ac:3a:29:54:73:4c:95:8d:13:4c:14:9a:bf:52:be:21:
e9:4f:19:e7:22:55:7f:55:fd:cb:00:3a:95:7f:f1:c1:c1:1e:
9e:de:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:10 2025 by rpki-client