Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: VEU/mm7grTZeZtOwdxwYaNJdRfz2u8Abz2hvsZY/vA0=
Subject key identifier: A1:FF:2D:F2:00:C9:02:4B:4E:57:28:D5:54:A5:A1:F7:35:56:7F:28
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019A70A5667CECD5C43EEF895F086DD7FFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 124D
Signing time: Tue 11 Nov 2025 02:01:19 +0000
Manifest this update: Tue 11 Nov 2025 02:01:19 +0000
Manifest next update: Wed 12 Nov 2025 02:01:19 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: xE3iCQtV3mT0yKdx+ITHe/SzTYmG3cEbVrhNMfEmCPw=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:66:7c:ec:d5:c4:3e:ef:89:5f:08:6d:d7:ff:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Nov 11 02:01:19 2025 GMT
Not After : Nov 12 02:01:19 2025 GMT
Subject: CN=a1ff2df200c9024b4e5728d554a5a1f735567f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:c5:91:ba:40:97:db:18:35:70:db:58:dd:
df:c7:37:19:23:f1:0e:6f:44:e1:d8:a0:0e:ae:5b:
ed:54:3f:f9:4a:5e:a1:9b:e8:f5:a7:ed:38:48:18:
fd:d5:33:b7:36:79:8a:34:56:af:59:26:e2:8d:de:
13:b3:c9:aa:0d:77:71:3d:59:6c:cd:59:44:7d:e9:
9f:f5:b3:db:d5:bb:ba:c3:f0:d6:ea:08:fa:a9:63:
3b:4f:09:96:30:14:0c:11:69:3a:e5:22:de:91:55:
0b:ff:1a:20:f3:b1:d5:32:31:95:39:c1:77:f4:56:
60:85:36:ae:43:28:37:88:5d:02:27:cf:df:f2:13:
3a:0a:cd:86:f0:af:be:ac:34:bb:94:18:0d:e8:35:
50:f3:44:65:53:53:6d:03:1f:49:96:6b:5f:5c:b6:
33:e6:41:36:3c:58:47:b1:fd:f1:4c:70:7e:f8:cb:
d8:ea:80:05:cc:98:96:ae:f2:70:6d:94:71:12:7a:
a4:7b:9b:92:9b:df:12:48:ed:95:3c:40:3d:f9:2c:
cd:64:23:9c:70:46:92:af:a5:e0:8f:61:fc:8d:af:
31:82:e9:48:09:0f:a3:df:40:4e:84:1c:3a:ac:1f:
22:f9:44:e9:76:36:ed:5f:ae:6c:af:35:ad:8c:12:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FF:2D:F2:00:C9:02:4B:4E:57:28:D5:54:A5:A1:F7:35:56:7F:28
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:58:57:4f:c8:34:cd:2c:ac:e9:0b:c7:d1:e6:b1:30:82:88:
97:50:29:59:b4:04:0f:0d:dd:d1:66:28:32:c9:a1:61:d3:ef:
46:d4:0f:37:39:1b:57:ab:a9:bb:3e:03:64:51:7c:1e:d9:da:
bc:ef:38:39:2a:45:e5:73:d6:05:6d:8c:10:40:fe:0b:36:ca:
5b:70:52:75:36:f5:b0:38:96:74:76:ff:d5:4b:1a:3b:78:2c:
3f:ae:75:41:41:0d:9c:d0:4a:ff:f8:ca:16:a4:2d:f5:3b:14:
35:9c:24:a7:60:fb:ba:a4:6d:a8:a0:31:96:70:03:97:77:68:
d0:12:1f:b2:ad:ef:20:9d:8f:8f:35:1c:dd:27:38:2b:09:3b:
0b:75:11:50:4a:80:8e:96:58:6d:32:2d:e4:18:e0:5a:b3:f0:
bd:26:ce:8b:78:10:a1:a2:d0:d2:9a:44:8b:ba:ce:79:46:f6:
e9:c3:88:2b:0d:7a:99:9a:b2:27:46:ca:e7:b4:d9:38:b7:c2:
5d:50:d3:b5:42:98:ab:6a:6a:4a:03:75:21:a6:3a:6e:da:b3:
96:4c:b3:f4:1f:09:93:33:cc:67:e4:e9:10:2a:97:1b:cc:e7:
87:40:28:9b:ab:46:2a:56:86:7b:84:fe:f9:52:8e:81:71:3d:
bc:db:b2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:10 2025 by rpki-client