Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: 1k99GX3arEvlh4sFaX460bKWZwCMe5hkJcnx1FslHko=
Subject key identifier: 4D:42:73:4D:F9:EC:BB:87:53:85:B9:E4:B0:C7:A9:47:34:C5:F7:E1
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019A22F7BAB2FE788A62E3EA15A88D3AC7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0BDA
Signing time: Mon 27 Oct 2025 00:00:51 +0000
Manifest this update: Mon 27 Oct 2025 00:00:51 +0000
Manifest next update: Tue 28 Oct 2025 00:00:51 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: GwdUJOYKdtRhrvR1gIKJF34fX9w+4ILLMZt5/7H8OFM=)
2: n71Z9zO5i6A3MnYNwx7Uxb_OUGA.roa (hash: CVGNrsSAJVnXCFxttiW1g0o49r+f3Le2U2M52m4z4p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:ba:b2:fe:78:8a:62:e3:ea:15:a8:8d:3a:c7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Oct 27 00:00:51 2025 GMT
Not After : Oct 28 00:00:51 2025 GMT
Subject: CN=4d42734df9ecbb875385b9e4b0c7a94734c5f7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:db:fc:26:8b:06:8d:ca:22:9e:5d:67:6c:
41:f3:17:64:ed:64:33:11:a3:77:28:af:b5:95:d2:
49:45:31:ef:0c:c8:1a:eb:8f:e2:d7:bb:5d:65:de:
30:3e:ae:21:f7:8a:b3:97:ff:83:24:3b:89:72:3a:
fc:cd:fc:8b:b9:a7:35:94:8e:f2:c2:13:59:64:48:
9c:69:cd:4a:17:51:76:71:0c:0c:2b:59:ab:3e:0b:
e3:e2:93:74:6d:a5:88:ee:a6:25:74:39:2b:44:0b:
2f:1b:80:80:7a:0a:da:53:ca:51:7c:54:df:d1:91:
d5:f5:cb:48:7b:39:5f:9a:62:12:39:30:11:56:1f:
f8:c5:59:02:50:dc:43:61:cf:ea:0b:ec:cc:7c:1b:
0e:70:8b:8b:e0:a8:3f:7c:9f:0f:75:c7:54:0c:69:
ca:40:58:62:ce:c7:2d:45:b5:52:ed:2b:1d:2a:3f:
d3:4b:58:01:83:c8:eb:e4:fd:03:22:8f:c6:6f:69:
60:11:13:bc:28:63:f2:d5:2e:43:2a:92:45:01:b3:
91:52:b0:b8:85:34:e4:1c:f9:9a:5e:46:8f:4e:14:
e2:3c:25:79:b4:bc:20:1e:a3:46:17:c2:b1:fb:89:
7f:4f:45:a0:a8:2c:18:67:13:ad:d0:04:d9:d1:3f:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:73:4D:F9:EC:BB:87:53:85:B9:E4:B0:C7:A9:47:34:C5:F7:E1
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:64:72:9b:f8:1f:94:56:ed:c8:bb:a5:7a:d9:b4:50:eb:56:
18:46:c9:2d:7b:f2:a4:24:92:6d:94:6b:67:de:a5:db:0a:c5:
f7:ae:c4:3e:9c:5a:0b:a8:b9:24:a0:5f:55:a6:6c:00:ff:ad:
95:52:b1:fd:8a:e7:0b:ab:3a:02:37:be:ed:ec:d7:27:d9:fa:
f9:dd:8f:65:f0:2e:09:6c:2c:f5:21:a5:be:5d:ef:9a:9c:43:
89:20:fb:b2:8b:4f:ee:32:1a:cb:35:7c:88:09:48:da:fd:37:
cf:47:4a:91:0b:ed:b2:fb:39:a0:d7:a1:a9:9a:5e:22:68:1c:
0e:17:2a:54:58:f8:8f:38:bc:9b:36:2c:70:35:c9:39:5c:18:
52:63:4f:9c:6e:7c:e7:d2:38:ee:3d:07:77:09:54:b9:10:f4:
eb:22:08:69:60:fd:59:21:21:ed:cf:c7:d5:e3:9f:12:25:66:
d8:36:50:bd:0b:cf:9f:1e:80:0f:bf:76:10:6d:22:0e:59:f4:
02:70:c0:f2:75:5f:ed:00:35:61:4e:37:02:ba:b0:0e:c6:84:
b2:30:02:b5:db:18:3c:5f:ba:6a:d8:e0:55:17:8f:6e:74:25:
c4:a5:71:60:ad:d7:4b:ec:c0:53:87:65:38:2c:6a:8c:76:c5:
98:38:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:47:14 2025 by rpki-client