Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: he/qeNbsd5r9sj9O39i8V8b1554awxiQXiYj4V2ByWg=
Subject key identifier: 34:88:45:A7:34:52:E6:77:0A:24:87:F7:34:BE:A8:CE:E0:3D:06:30
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 019A722630535EA3B61E925DAEC6A79973B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 0384
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: nQXjGolD6X8q0zF9FbnOtHdchW+jL1MfQRJQ+2G7kFw=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:30:53:5e:a3:b6:1e:92:5d:ae:c6:a7:99:73:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=348845a73452e6770a2487f734bea8cee03d0630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:a6:ba:74:28:a2:59:0c:fb:9c:99:d1:b0:
e1:3e:df:6e:5b:51:31:76:3e:37:f6:47:64:b1:10:
b4:ec:f7:70:cc:c1:38:95:d6:a3:22:fd:8c:63:cb:
a4:21:60:13:69:4d:4e:6a:a5:d3:45:14:72:ad:65:
28:72:53:a2:e2:8a:a8:49:42:52:09:b9:3b:a4:1e:
c0:38:18:a9:b4:a9:5c:be:ef:c8:1d:d6:b9:50:00:
71:de:41:17:03:50:18:e6:0c:97:ee:0e:6f:bb:af:
71:0f:29:17:02:3b:4f:cf:59:9c:40:2b:d0:a8:f1:
a0:53:12:3e:11:41:c3:75:e9:21:07:5f:d4:60:1d:
b1:1f:ec:7b:3d:e1:ec:a6:9f:0e:b1:47:8d:2a:3f:
9e:26:d8:9c:23:75:5c:5c:a1:7a:be:f9:7d:ad:13:
42:59:de:66:45:00:79:d8:62:74:b6:b9:58:49:01:
d0:e4:6c:a6:a7:3a:9d:f2:c2:0d:1d:31:7b:52:91:
05:60:88:34:93:8b:71:09:22:a8:07:94:7e:f6:9f:
58:5b:83:b3:e4:da:4b:71:b1:2d:b9:9f:8f:05:c0:
37:26:25:22:df:40:c2:4c:3f:99:69:d5:5f:80:cb:
95:87:16:ff:44:89:f1:a4:2d:94:c3:a9:5e:d2:16:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:45:A7:34:52:E6:77:0A:24:87:F7:34:BE:A8:CE:E0:3D:06:30
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:dc:aa:df:7b:58:58:71:cf:04:15:0c:42:b8:f6:34:53:ff:
1b:d6:ca:d2:d2:60:73:19:7f:af:02:48:db:86:a4:c1:d5:23:
7d:7a:fd:8c:11:7e:6b:d3:3b:df:3d:d8:b8:57:d3:9c:3a:c5:
67:05:74:de:18:0d:d3:49:9a:9a:db:99:0d:78:03:e0:b1:a9:
c8:cf:7b:ad:00:cb:77:51:3d:05:54:95:5a:54:69:0f:10:43:
82:05:f7:b3:08:04:39:58:cb:58:be:23:92:a7:a8:8f:43:07:
33:60:3f:75:8a:c0:a8:4f:fd:6c:86:25:9f:3f:d6:f7:b2:09:
fe:3f:4c:1b:f5:36:3f:51:9a:a1:76:b2:f1:a2:04:fd:28:48:
59:6d:29:ec:ab:6e:e9:c1:a2:83:e8:b6:6a:e0:7f:59:73:a6:
e7:2a:85:88:fd:3c:3e:77:0b:ba:f3:af:fc:85:d3:cb:15:e3:
a4:9c:90:c7:ad:fb:26:48:18:e4:81:3a:a8:bd:7d:49:a1:49:
6d:4a:8d:74:b1:7d:49:38:7b:35:46:59:24:18:5e:f1:f9:82:
8a:e9:21:63:21:d3:83:e8:fb:d2:6e:70:d1:07:94:f2:2c:e0:
c3:ba:db:a8:b6:b3:83:7f:ff:44:72:bf:07:54:8d:9b:57:dd:
bd:94:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:33 2025 by rpki-client