Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: Ui6HiSxs1RBGLxs71s3mQfzRHHmUo7hRLoQIC8zDRUs=
Subject key identifier: 9B:87:43:F9:FB:8C:96:1E:41:4E:68:9D:4C:5D:0D:26:84:0C:71:DD
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 019A2A42F980BF6E1D8DE07AFF3EBFD597B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 0412
Signing time: Tue 28 Oct 2025 10:00:23 +0000
Manifest this update: Tue 28 Oct 2025 10:00:23 +0000
Manifest next update: Wed 29 Oct 2025 10:00:23 +0000
Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: kE9B8BuVuhTDcPMMV5haLenqpzrc95kEIh07h9/atJ0=)
2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:42:f9:80:bf:6e:1d:8d:e0:7a:ff:3e:bf:d5:97:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Oct 28 10:00:23 2025 GMT
Not After : Oct 29 10:00:23 2025 GMT
Subject: CN=9b8743f9fb8c961e414e689d4c5d0d26840c71dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:ae:6b:5f:be:19:a6:ea:2e:65:f8:8a:9a:
ac:c1:c2:8a:6c:ac:bf:84:23:3a:d8:ad:4d:f8:b3:
34:a4:82:d4:78:f0:50:69:1f:fe:f8:7c:6b:b3:58:
38:6c:81:e5:84:89:6a:0b:94:5c:33:e1:84:2a:77:
32:46:7e:9b:de:87:8b:d6:ee:2e:3a:9d:60:5f:8e:
69:b7:8c:12:7b:69:5f:1c:d5:ca:d9:d0:4d:9d:71:
90:ec:e9:e4:5f:8d:de:66:41:eb:17:2f:c0:18:cd:
a5:b2:d0:4f:0f:4d:f1:e5:65:29:0b:2e:b6:5a:14:
83:f0:78:60:93:e9:ed:91:2d:5b:64:46:4e:c0:2b:
69:26:44:e4:c9:c4:61:fe:fb:d5:67:c4:f6:0b:7b:
7d:b0:a6:0f:7e:37:dc:59:a1:fa:e5:0c:4e:43:01:
ca:f7:fb:c1:e4:a6:4b:72:ac:f5:3e:72:47:77:20:
6f:ac:a7:e3:55:80:af:3a:35:c3:75:e8:9e:f4:2b:
2e:fc:55:02:34:43:01:dc:1a:1e:25:82:47:cb:b5:
b1:76:f4:3f:cf:63:8b:82:c6:cd:84:de:f6:30:88:
a8:5a:7b:af:3d:b0:76:fe:e7:bb:fa:35:a8:b3:6c:
d9:27:75:e1:3f:ad:66:e9:a7:10:3e:e7:a1:04:bb:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:43:F9:FB:8C:96:1E:41:4E:68:9D:4C:5D:0D:26:84:0C:71:DD
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:38:7f:20:70:f4:23:77:b9:7d:92:4b:0c:40:12:8a:23:54:
fe:d9:76:a2:fd:db:9e:b9:d5:ad:df:cb:a4:6c:7a:e0:c0:84:
3c:8d:46:aa:f9:f9:25:a1:64:fa:78:ce:5e:bb:e7:82:d8:1c:
31:3f:4c:a9:eb:d9:c4:e1:e3:2d:fe:3e:e8:af:f5:2c:b9:37:
ae:9b:8d:1f:6e:d0:d6:ef:73:b2:df:8d:7d:9f:8f:16:ba:09:
91:44:dd:f9:7d:9c:0b:5a:d7:fb:e4:38:a2:bf:58:08:17:3d:
e6:7b:0f:31:3e:06:45:11:a2:80:d4:0e:56:52:90:16:47:58:
4f:31:b5:58:98:1f:23:71:4e:fd:a1:31:bf:d6:8e:63:69:39:
79:f9:60:76:f4:7d:3a:c4:c6:cc:27:66:41:3c:df:f7:0f:45:
c3:7c:dc:96:f9:1c:eb:b4:cb:fd:3d:bd:aa:e2:60:34:2d:43:
6f:1e:a7:b8:74:e6:16:65:dc:08:46:a3:58:bb:01:c7:a0:4d:
ea:3a:c2:80:7b:23:d5:e7:3a:ea:34:15:ee:2c:63:1f:c3:87:
48:e2:f0:ae:b8:2f:85:51:19:d5:72:a9:02:7b:cb:92:7a:ba:
47:23:27:15:19:1a:2b:91:b7:cf:66:05:e4:9d:2b:1c:86:e7:
ee:70:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:40:19 2025 by rpki-client