Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: y6NAfYuxLOIKqyyzj1ca7t/OjfDOWUFWyB5k/pVTCqg=
Subject key identifier: B6:A8:DD:62:78:F9:C3:41:9C:3B:47:3A:25:A2:3F:07:71:6F:C3:85
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019A258A7EC78A2B09F04F250A31584A18D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1628
Signing time: Mon 27 Oct 2025 12:00:24 +0000
Manifest this update: Mon 27 Oct 2025 12:00:24 +0000
Manifest next update: Tue 28 Oct 2025 12:00:24 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: zdZU2jGjkL9ur0PQeSMLn6SlEkWp7/oAolqtxEvoCAE=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:7e:c7:8a:2b:09:f0:4f:25:0a:31:58:4a:18:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Oct 27 12:00:24 2025 GMT
Not After : Oct 28 12:00:24 2025 GMT
Subject: CN=b6a8dd6278f9c3419c3b473a25a23f07716fc385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:6b:8e:4b:4e:4a:27:8e:01:2e:fc:68:7a:
e9:a9:1c:41:44:72:5c:9d:21:7f:8d:d0:f2:5e:20:
99:d1:d4:2b:21:ca:2b:21:97:4d:c8:c9:74:4a:9d:
6d:ef:75:fd:e3:2f:14:b4:dc:5a:0d:93:46:d3:23:
f6:ae:68:e3:ee:22:97:ea:5c:90:78:56:3a:ed:1e:
aa:ec:86:63:76:66:af:d8:6f:2b:94:d5:e0:8d:f9:
08:71:b9:c7:63:13:5e:49:b5:2b:4e:ac:7a:47:2f:
d4:45:1f:d6:6c:06:01:84:ed:1f:15:94:5f:f2:8b:
a5:56:ca:ff:0f:48:3a:64:41:b6:47:53:6b:3e:4a:
94:c2:69:ab:94:a1:32:50:3a:6d:ef:f2:bd:af:bd:
9d:34:12:db:3f:57:e2:23:31:30:a9:b0:e0:bb:69:
16:55:c8:66:ac:53:69:3b:54:79:16:29:35:00:a2:
7f:a2:c6:10:f3:e7:70:5b:30:3f:07:bf:34:f6:f5:
0f:9b:4d:30:72:f6:ad:b7:00:2d:39:fd:95:bf:23:
5a:13:3c:49:4d:3f:92:8d:d6:ab:11:72:f0:ae:5f:
fd:f8:4b:af:52:d9:a7:e9:b5:7e:1b:e7:e7:39:84:
95:ec:9d:48:54:84:2e:c5:d3:8d:bd:35:b6:65:06:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:DD:62:78:F9:C3:41:9C:3B:47:3A:25:A2:3F:07:71:6F:C3:85
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:13:d7:45:7b:ac:bb:88:6a:81:db:48:36:81:b8:38:96:51:
16:ae:80:56:fd:ed:57:73:f5:48:d0:ea:52:09:75:3d:8b:28:
6a:07:c9:8f:be:1c:2d:97:64:04:43:3d:01:4e:5b:1c:32:69:
ba:ee:4c:63:9a:96:7c:62:99:7d:9f:f1:d7:aa:64:08:41:cd:
dd:19:ef:a1:3e:59:4a:0f:15:43:24:5f:28:12:3f:29:61:ef:
d5:21:80:e3:66:b9:1a:f9:a6:1f:85:0a:99:a3:e8:ab:8f:b2:
74:da:f3:93:ef:08:68:76:3e:59:97:5e:f5:60:b0:32:00:74:
1b:01:51:46:2b:a4:38:63:ad:9f:2a:dd:5d:ed:76:c9:c5:f8:
6a:c4:66:2e:18:9e:18:1d:f5:4c:1e:ed:7d:bd:88:aa:70:17:
0b:a6:ab:1a:ca:b6:7c:61:58:23:35:9d:9a:7d:bf:f8:95:f9:
0e:e2:1c:5f:cc:37:9d:1d:2a:ad:31:2f:05:61:d5:fe:ee:76:
83:c6:93:26:76:a9:dc:c8:d6:00:93:35:83:aa:75:2f:4a:60:
ff:84:9a:16:b8:34:66:98:14:5e:06:bc:51:17:21:b6:8b:8c:
a7:9b:0f:6b:05:bf:0b:bf:62:b9:ce:f8:26:a3:c5:99:d9:7c:
22:8e:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:01 2025 by rpki-client