Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
File: QukMnRAJsywZRbb45liUg8XqR0M.mft (raw, json)
Hash identifier: UNZY5MgeGjlKvNH/gWMWKI2QjT1qjlRQWQL06t8zPYc=
Subject key identifier: B8:4F:C7:17:CB:5B:4C:63:41:01:03:70:41:70:AE:8A:9C:9A:06:99
Authority key identifier: 42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
Certificate issuer: /CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Certificate serial: 019A22F7ED4D83B4317D962FBF3847B1C228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
Manifest number: 0ADE
Signing time: Mon 27 Oct 2025 00:01:04 +0000
Manifest this update: Mon 27 Oct 2025 00:01:04 +0000
Manifest next update: Tue 28 Oct 2025 00:01:04 +0000
Files and hashes: 1: QukMnRAJsywZRbb45liUg8XqR0M.crl (hash: Sh5uDXgqGa2Ff7WTcVPbCtEBELgOc4dN08P8A89nIpo=)
2: vdgwFbYVt8R1VSJ8o61nh0Nw_GA.roa (hash: 76jfpsJ1QF75Cjby0A7bmnFhoDcXagSAAfe9ZF5jiZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:ed:4d:83:b4:31:7d:96:2f:bf:38:47:b1:c2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e90c9d1009b32c1945b6f8e6589483c5ea4743
Validity
Not Before: Oct 27 00:01:04 2025 GMT
Not After : Oct 28 00:01:04 2025 GMT
Subject: CN=b84fc717cb5b4c63410103704170ae8a9c9a0699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:d4:9f:7f:9f:31:84:af:0b:37:a5:c9:97:
f7:de:34:09:f3:0c:56:5b:96:ec:c1:45:be:0f:6b:
72:34:6b:cc:23:e4:57:f5:32:74:5c:a9:15:ca:c4:
f8:49:68:ac:58:f0:5d:f4:fe:3f:04:ba:1e:d0:b4:
e1:8e:41:4e:bb:72:1d:f7:49:67:84:e3:e2:96:a5:
b7:24:75:bf:0f:b2:5a:4b:d1:0a:81:ef:a5:1c:c7:
af:e3:6d:3f:91:96:19:9f:0a:ff:67:85:6c:fc:f1:
11:1d:ec:e1:cb:98:99:b0:ea:66:ba:f6:96:fa:d5:
ec:7d:b7:f0:63:b4:83:98:6f:c7:28:e0:cf:64:e6:
0a:ff:74:94:af:69:8b:16:b6:04:28:90:39:67:8d:
b8:fe:b3:88:9b:3b:45:81:36:d7:ac:95:88:0a:ec:
d3:00:68:0e:6a:1c:8a:e7:92:17:86:d0:6b:31:0d:
b5:78:c8:fb:d8:9e:5b:ed:6d:dd:26:7f:e9:1a:dc:
56:e2:27:c2:70:33:9e:51:87:d0:09:b8:5d:eb:6d:
94:16:8b:f6:44:5b:f4:05:b2:49:9a:d6:e2:2a:4a:
ca:7b:7e:a9:fe:c9:87:b2:b6:90:3b:04:63:08:c4:
f5:8c:18:c0:cf:1b:df:fd:43:ec:df:59:b1:e7:08:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:C7:17:CB:5B:4C:63:41:01:03:70:41:70:AE:8A:9C:9A:06:99
X509v3 Authority Key Identifier:
keyid:42:E9:0C:9D:10:09:B3:2C:19:45:B6:F8:E6:58:94:83:C5:EA:47:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QukMnRAJsywZRbb45liUg8XqR0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/955a40-9d94-4f82-88e5-69c6298415f8/1/QukMnRAJsywZRbb45liUg8XqR0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f0:c4:62:40:0c:1c:a6:01:72:99:cd:1e:24:50:35:9d:4b:
e5:40:5d:6b:26:da:cc:88:45:05:8f:f8:30:35:49:7d:7e:c0:
d7:02:c2:9d:40:ef:48:4d:72:0c:82:12:c7:78:bb:c8:86:5b:
4f:d0:81:b3:ba:db:b1:dd:33:d9:e0:36:53:66:60:0f:b5:d1:
1b:9b:58:fd:c2:71:04:42:f2:cf:76:1e:2e:71:12:a2:1e:43:
38:d7:df:b8:11:8d:9b:d1:16:85:f1:43:eb:0a:27:24:a9:1c:
47:8d:d6:db:c5:9c:7c:30:46:62:c0:19:1e:ef:79:ee:f8:cb:
5b:fe:fb:83:67:6c:76:d6:02:b0:c0:aa:d4:72:f8:ab:f6:41:
e7:73:d2:85:fb:1e:23:e6:6b:05:1a:c0:6a:fc:77:a4:3f:5d:
b5:b8:37:67:bb:e8:4e:90:f4:d9:2e:b0:70:3d:47:84:08:7e:
ec:33:4a:09:6f:df:00:8f:12:14:a4:35:7e:db:08:af:0f:88:
73:1e:88:f7:1a:a7:b5:fb:35:5a:9a:af:c8:fc:e7:69:0c:35:
f8:b8:df:64:62:07:86:d2:25:fb:08:f3:0a:bd:2e:50:25:a1:
41:ee:5a:28:f9:56:d8:46:50:a8:b3:f5:e5:76:7d:0b:1b:fc:
21:a9:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:04:57 2025 by rpki-client