Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: +Vs2ePv1mdPCGmg11U+IgHoUG8A1jMHCsrjTlkUIrR0=
Subject key identifier: 64:6C:45:CF:D6:B9:3A:49:13:6C:6E:AF:60:C3:84:06:DD:7C:9B:25
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 019A2778DE231BB595533FF15E8EEE0EF274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 21:00:23 +0000
Manifest this update: Mon 27 Oct 2025 21:00:23 +0000
Manifest next update: Tue 28 Oct 2025 21:00:23 +0000
Files and hashes: 1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: PEynB17lo/ePHcPrHmqUsrgr/BP6hVqkVTiKV0B25Ts=)
2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:de:23:1b:b5:95:53:3f:f1:5e:8e:ee:0e:f2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Oct 27 21:00:23 2025 GMT
Not After : Oct 28 21:00:23 2025 GMT
Subject: CN=646c45cfd6b93a49136c6eaf60c38406dd7c9b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:1d:40:c7:72:ab:34:c8:5b:a1:73:f0:90:
2c:45:b1:bf:28:d2:c1:80:af:43:42:9f:84:48:dc:
5d:4a:c4:30:3f:39:b5:ae:df:22:15:c0:1f:0e:8f:
96:94:50:b1:d3:e7:8d:90:51:6c:3f:60:e2:14:43:
f5:0b:56:d3:0c:91:74:12:80:e1:d1:6e:89:e1:1d:
81:57:22:50:a7:84:7f:c4:cb:3c:f5:7b:18:7e:ba:
f8:83:eb:18:d3:40:51:a7:b2:11:63:59:68:80:9d:
c0:b8:ea:50:12:3d:56:34:90:d1:17:e8:98:af:50:
ec:00:ad:f8:fa:96:0f:f8:50:5d:5c:09:9d:d4:8a:
42:4b:af:c9:81:83:34:9e:b4:70:d7:31:b5:74:db:
9b:f1:0e:ab:66:32:11:0e:4a:1e:38:2f:03:ae:dc:
76:d9:b3:8b:a7:58:61:da:93:72:ea:06:cc:e2:76:
f9:a6:c3:89:98:74:82:55:07:45:8d:63:c8:87:87:
06:38:5f:c2:1b:ed:c1:7d:98:33:ea:d9:94:56:91:
3b:3d:32:48:2a:c4:3c:f6:c0:c7:ab:25:0c:04:2f:
be:e5:48:63:65:7e:c2:92:6d:8c:ac:b1:fc:f3:cb:
02:5b:5b:34:40:86:dd:cf:36:c4:6e:94:84:a0:1b:
2c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:45:CF:D6:B9:3A:49:13:6C:6E:AF:60:C3:84:06:DD:7C:9B:25
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2f:11:a6:84:69:d4:cc:f7:35:2c:e6:3d:53:db:ff:95:93:
f2:ba:84:7d:f4:47:a1:ca:eb:ad:16:d3:aa:f7:5d:b4:f1:aa:
a9:16:c2:61:ce:9e:19:6f:d4:40:fd:25:fb:08:b1:d2:99:8d:
66:79:82:1f:08:a2:f3:a8:9d:b4:d1:e7:c2:d6:19:0d:68:8d:
e9:08:6a:e4:e5:d8:3b:89:f7:58:5a:d9:f4:9b:02:c4:43:86:
58:7d:ad:21:9f:0e:30:30:e5:7a:27:18:38:81:ee:70:15:94:
09:4f:40:21:1c:17:75:94:e0:e5:c8:68:ee:ff:ba:9c:56:c3:
c4:1e:79:26:cb:86:6a:c7:47:1f:b5:46:c2:b6:e2:9d:bf:cc:
c0:4b:48:11:41:25:76:24:13:65:7d:d3:c1:b2:f5:cc:e4:20:
98:fb:2e:4b:1d:99:8e:4a:15:73:52:15:68:d1:02:19:59:0c:
6b:b0:2f:65:b1:f8:06:58:f4:61:6a:4f:e2:67:83:5a:ae:58:
33:3d:47:38:f7:8f:9d:a1:5e:e0:a7:19:3f:27:a1:ea:3b:ab:
6e:9f:c7:e3:54:60:87:d1:2b:cf:db:5a:de:39:66:bb:86:49:
c6:17:ce:82:14:65:2a:c2:94:64:76:8d:44:80:c2:6e:9a:87:
a3:b8:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:32:05 2025 by rpki-client