Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
File: QvZoAOPk7qCxeqfOG-anEIW7C7U.mft (raw, json)
Hash identifier: ovzBM+fnPlZjR29/FyIs3rA7zB4UQlGmLLz01R0zUM4=
Subject key identifier: 28:FB:30:1C:B1:30:E9:20:F8:48:36:1F:7A:BC:09:0C:DF:23:C7:91
Authority key identifier: 42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
Certificate issuer: /CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Certificate serial: 019A71EEB1375537AC88ED4D00E21CD562C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
Manifest number: 6C
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: QvZoAOPk7qCxeqfOG-anEIW7C7U.crl (hash: MVV/ht8LarTSve4VJLB28NaZl62J1mQ2gtnVHn/+oY0=)
2: taBuGNscecueOGdxDI5_sp5Q64s.roa (hash: jfs6i9kfrvsOmGXfhBNY9aaIV6kpwF4dvrqA21q44KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b1:37:55:37:ac:88:ed:4d:00:e2:1c:d5:62:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f66800e3e4eea0b17aa7ce1be6a71085bb0bb5
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=28fb301cb130e920f848361f7abc090cdf23c791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:ba:ec:9d:ad:d9:c4:14:cd:62:91:ba:a2:
48:1e:19:3f:e6:dd:de:32:b0:4f:6d:17:9f:e2:31:
9c:e9:2d:f1:ee:41:bd:43:69:f4:10:68:16:f3:33:
f3:d6:07:d0:d1:cc:5c:3c:02:a8:86:2b:a6:1f:a6:
a9:68:76:4c:26:4e:27:d8:67:1a:f8:4b:08:34:17:
09:b6:f6:88:9a:be:c9:4f:5a:06:03:bd:13:3f:b5:
90:8b:98:b1:47:08:a8:7b:70:38:61:2a:55:6b:9b:
0f:75:e3:96:75:44:17:06:5b:26:c0:07:e5:a6:ef:
cf:e1:0f:b2:19:f6:61:76:bf:17:06:99:e6:41:33:
3a:a1:a0:54:90:ee:35:f0:41:23:45:57:05:5c:1b:
93:2f:c1:71:68:6f:91:8a:35:92:a6:c6:69:e7:67:
ce:be:37:10:03:c6:b9:33:16:fa:89:6f:32:91:f5:
b8:19:fe:d6:6f:48:28:e1:29:a3:41:76:c2:c3:6b:
e6:a3:19:99:44:ed:35:71:71:b7:7f:f5:0b:bc:08:
79:83:23:e6:bb:13:9d:fa:0e:7d:5d:2d:61:4a:81:
79:28:e9:fc:7b:9c:17:85:6d:c0:87:b3:a2:61:71:
7b:28:3e:4d:87:19:f8:3a:44:92:77:26:3d:ce:e0:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:30:1C:B1:30:E9:20:F8:48:36:1F:7A:BC:09:0C:DF:23:C7:91
X509v3 Authority Key Identifier:
keyid:42:F6:68:00:E3:E4:EE:A0:B1:7A:A7:CE:1B:E6:A7:10:85:BB:0B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvZoAOPk7qCxeqfOG-anEIW7C7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59d5e8-5c4d-4f67-af7f-ab29242ab933/1/QvZoAOPk7qCxeqfOG-anEIW7C7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:72:39:3d:4e:f7:42:0e:2f:e1:96:34:02:bd:50:2c:1f:84:
fb:3b:58:df:8f:55:e2:89:78:f3:f3:cf:64:90:d8:04:68:e8:
3e:b2:06:0c:a7:0a:dd:dc:de:1b:64:81:54:33:2f:77:38:60:
47:f3:20:e4:3d:66:83:3b:2f:20:88:da:99:45:9e:4d:a2:19:
2c:96:9e:fc:0b:b1:90:c5:0f:cc:3e:c9:74:21:ab:a7:b3:01:
ec:f8:d2:c9:82:06:ed:29:ed:54:dc:cd:ae:3d:f6:01:db:ad:
fe:44:52:1f:e6:24:b9:66:f6:22:ab:da:7e:ee:38:b2:6d:53:
cf:9c:b4:f7:fc:20:4e:f7:74:7d:e7:1f:f3:b8:bd:b4:11:2f:
31:57:67:87:e1:9b:8d:81:a8:aa:17:55:8d:e2:2a:d2:14:fd:
a0:33:9e:d3:fe:05:d7:d6:89:fc:44:b4:21:e9:b5:1e:37:6c:
a4:9e:b7:0e:fd:76:e7:df:0f:e2:00:4d:dc:4c:b2:96:ec:44:
10:e1:2c:b9:ea:f4:04:17:3a:b4:fd:1a:a5:6f:24:9f:5a:1a:
bc:22:ee:10:6a:73:f6:09:83:e2:e6:36:c5:60:04:3f:58:36:
d8:29:9d:57:d1:16:64:19:44:f3:96:f1:1d:72:18:ad:91:69:
9a:bd:d3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:25 2025 by rpki-client