Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: jE35VRNQbGQxfLaAhvt0v9YSLFeOXInS0xBjaQ6oBdY=
Subject key identifier: FB:AD:94:2B:6B:6F:A1:D0:1C:93:10:4A:76:8B:A0:33:09:58:C5:5E
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 019A194F76E02463E74DB60BE688F0B1E349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 13D8
Signing time: Sat 25 Oct 2025 03:00:29 +0000
Manifest this update: Sat 25 Oct 2025 03:00:29 +0000
Manifest next update: Sun 26 Oct 2025 03:00:29 +0000
Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: mQ4ahhuMYwH9BP/4VzBAVMk8Kp5+LtPuMwcbrTOAGvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:76:e0:24:63:e7:4d:b6:0b:e6:88:f0:b1:e3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Oct 25 03:00:29 2025 GMT
Not After : Oct 26 03:00:29 2025 GMT
Subject: CN=fbad942b6b6fa1d01c93104a768ba0330958c55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:df:8e:02:5b:de:19:10:b8:7e:ec:49:d2:
a6:d6:4b:44:d0:b1:9c:3c:8d:3f:ac:ca:1b:14:89:
5d:ef:37:08:34:88:d0:70:45:ec:2b:0b:df:1e:2e:
4e:e5:e8:90:51:e3:44:be:ac:12:27:3b:f7:29:60:
78:e5:d2:61:21:3b:7b:15:cd:f6:2a:bb:32:47:38:
f8:49:ff:3f:00:9b:7e:a8:57:f6:09:73:06:97:8f:
37:60:de:06:fe:07:9d:4a:c7:02:6f:6c:08:75:02:
d9:aa:4d:b1:40:3c:89:be:4b:e9:4e:cf:35:42:4c:
3b:68:e9:0d:f4:bb:74:94:14:95:aa:46:d6:1d:d5:
95:37:fc:8a:1c:42:d5:16:8b:6c:28:2d:c9:cc:1b:
a0:d6:ba:72:a9:e5:e2:2d:f1:f8:d6:4a:23:aa:97:
f8:e3:e6:2a:15:f7:b3:b3:bc:d1:6e:4f:73:c2:a0:
f7:a2:af:e7:9f:70:02:04:31:81:cc:2d:ce:9f:ba:
8d:6e:6d:9c:a0:18:27:71:b0:06:ba:7e:47:9e:28:
d5:d9:3a:ef:f4:3e:30:e7:76:d5:e7:ea:2b:30:c8:
08:ed:28:a6:e9:67:66:69:8e:ed:8c:b5:c1:e3:c8:
9e:20:57:51:76:87:a2:f9:4d:7f:9c:6c:c5:ed:6b:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AD:94:2B:6B:6F:A1:D0:1C:93:10:4A:76:8B:A0:33:09:58:C5:5E
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a1:04:0a:28:8e:db:5a:97:09:f9:89:73:6e:79:77:b3:d3:
7f:7c:a8:74:53:df:33:17:8a:49:01:f0:6a:cc:5d:31:dc:b8:
43:16:eb:fd:2c:0e:35:f5:b0:22:8e:ff:30:0b:3c:41:ee:5a:
52:49:a2:7a:d2:15:67:6a:65:4b:73:f6:d5:36:1c:f0:fa:2f:
64:85:8e:1b:1e:a3:fa:c9:06:88:3a:9c:57:32:87:82:a3:72:
60:44:67:2e:fe:ed:ea:f0:7f:2c:ec:36:d8:72:0b:3f:33:19:
04:32:da:56:5b:fe:7e:ff:df:85:1a:ad:51:d3:bd:cc:af:21:
3a:8e:20:d8:78:b4:41:2a:b8:7f:1a:48:bf:1a:33:a3:85:0f:
b9:c8:7c:ef:74:ee:47:e6:98:bb:bc:b0:fc:81:95:d4:ff:d4:
44:a4:5f:85:92:b1:b4:56:73:18:2e:73:0b:72:7c:c8:92:b8:
8a:a2:bd:13:55:a5:05:d2:71:a7:47:b0:0e:a6:00:55:8e:e2:
88:58:d9:ed:7a:59:46:8e:36:70:10:2e:ca:6c:32:f9:3e:fa:
04:8f:62:33:23:9c:df:ff:d0:77:f2:ac:00:f1:82:33:70:83:
f4:27:c9:8b:0e:d6:5b:e4:7f:74:c0:e1:02:a7:a3:4e:2a:f9:
b4:62:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:06:06 2025 by rpki-client