Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: l2T89wGTgm+2MnHQeArHEnHTr69Ve+QSDtFYfcfaC0Q=
Subject key identifier: 28:69:53:D3:44:A6:28:6A:2E:CF:90:C9:CD:C1:26:29:6A:EA:5E:AE
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 0199616B8F2EEE822A607ADA69113656CF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 1693
Signing time: Fri 19 Sep 2025 10:01:02 +0000
Manifest this update: Fri 19 Sep 2025 10:01:02 +0000
Manifest next update: Sat 20 Sep 2025 10:01:02 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: PMgs+dytyON7FiZvOKUX9yseDbC0XHalDhXYWx3AAUw=)
2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6b:8f:2e:ee:82:2a:60:7a:da:69:11:36:56:cf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Sep 19 10:01:02 2025 GMT
Not After : Sep 20 10:01:02 2025 GMT
Subject: CN=286953d344a6286a2ecf90c9cdc126296aea5eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:23:89:77:d5:58:24:17:c7:40:44:a7:52:1a:
1c:26:3e:f6:8e:37:13:42:63:4e:7a:66:dc:2c:df:
94:26:bd:0f:95:36:a0:69:dc:e7:ec:96:cb:da:63:
76:0b:29:08:e0:6e:99:14:85:b1:b1:2d:ce:f7:62:
f8:ef:02:8d:3d:cd:fa:52:29:11:99:b0:06:10:f1:
fc:af:f7:2e:68:6d:12:da:45:62:89:e3:4b:ea:04:
e3:2c:7c:96:46:a6:a3:f8:97:7f:9c:d8:f5:f0:86:
17:34:5c:48:e4:39:56:5d:24:93:e7:f5:cf:75:f2:
8a:bc:bb:98:a7:d1:43:1c:c5:69:45:c9:8c:10:42:
04:13:bd:3a:0f:a3:bc:24:cb:78:12:87:c9:a1:92:
ad:62:da:b8:31:0d:df:1a:87:38:0b:8e:96:c9:52:
f2:ed:fa:6a:3a:40:70:01:37:a9:d7:93:75:c0:94:
f7:ee:8d:3b:8b:c6:e9:3a:8a:09:aa:4f:b6:ae:03:
15:1b:ca:e7:be:65:6f:1e:b1:5e:d8:e6:fd:5e:39:
e4:ce:59:16:1d:b3:ce:33:15:f6:2f:d3:6c:66:60:
8e:1a:fd:c0:3e:97:1a:fe:f1:66:70:52:2d:16:75:
52:ac:62:95:de:0d:e5:41:5e:8f:19:cf:99:33:e6:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:69:53:D3:44:A6:28:6A:2E:CF:90:C9:CD:C1:26:29:6A:EA:5E:AE
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:02:fd:a1:73:a7:b2:0d:f7:0c:20:f0:91:b1:3f:85:96:
e4:af:76:30:17:9d:fe:da:80:e9:52:0c:8e:03:91:3a:4c:64:
67:9c:37:a1:dd:4b:3c:d4:31:2a:f3:83:36:01:ca:30:ba:81:
bc:3d:6c:d0:a4:07:b4:53:10:86:f6:0f:13:14:b8:0e:e3:d5:
22:91:05:41:b1:73:cf:67:e1:c6:44:8b:36:0c:f6:82:e1:3c:
c3:3e:ed:48:c6:ef:de:ef:61:b1:58:b5:50:69:fb:e0:00:91:
ec:bb:8d:7d:e8:02:4d:0e:26:ce:ad:80:24:73:7b:fc:b3:c7:
c0:c1:16:f6:f2:48:1b:f4:d8:c5:3a:ff:30:93:b5:cb:b8:f0:
7f:ff:bc:d3:a6:81:45:8f:46:8f:27:16:1e:51:7a:5b:cd:25:
3d:7f:3c:0d:d0:1c:26:ab:f7:48:50:b7:15:10:ee:9f:23:cb:
74:86:55:fd:ee:56:5e:60:01:dc:bd:3c:99:e2:8b:7f:ad:58:
21:45:5b:12:47:89:cf:e6:2b:38:18:cd:cd:83:7e:21:44:e3:
a4:66:db:c8:74:70:37:f3:9d:5b:3e:23:16:a8:60:74:47:bb:
81:b4:0f:cf:b3:95:db:5c:d6:64:cf:48:95:f0:4c:05:6f:e0:
67:98:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:41:50 2025 by rpki-client