Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: BVcFO76T/g7C8edx6MQHjepLEjMhH/a22EYEHPNP2G8=
Subject key identifier: 2B:F2:84:E6:1D:E3:06:7A:07:97:08:B0:C7:74:D4:A8:66:80:5B:01
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 0199221F48D40EFA5CF4A13CE4906F10FF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 02D6
Signing time: Sun 07 Sep 2025 03:01:39 +0000
Manifest this update: Sun 07 Sep 2025 03:01:39 +0000
Manifest next update: Mon 08 Sep 2025 03:01:39 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: A5+DUKKpM/7fDqDcxj23tjavSg1/Z2b8vVQQefwlnLQ=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:48:d4:0e:fa:5c:f4:a1:3c:e4:90:6f:10:ff:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Sep 7 03:01:39 2025 GMT
Not After : Sep 8 03:01:39 2025 GMT
Subject: CN=2bf284e61de3067a079708b0c774d4a866805b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:a4:09:1e:34:a8:e3:76:c5:8e:33:17:de:
62:5a:d4:f9:a2:fd:e9:ba:5e:30:94:aa:a5:77:31:
ab:81:d8:9b:88:11:f8:1d:aa:a5:19:f6:9c:c8:cb:
87:51:c7:33:ca:d7:61:51:16:63:fb:e8:0d:56:42:
65:93:a2:59:d9:ec:20:87:16:be:02:91:9b:df:f4:
c8:0f:37:98:5b:0c:9e:28:6d:6a:de:6c:2e:30:68:
36:c0:38:4a:d2:b9:fb:a6:7f:1e:69:68:8d:75:36:
b5:71:26:b6:2a:7a:ea:61:e6:8e:57:66:c2:9b:55:
0c:2b:34:7a:a5:9b:d5:10:27:4e:2a:5a:09:60:94:
7d:0b:69:fa:e4:91:10:4f:4e:f9:90:23:72:88:fb:
34:29:93:58:bc:79:51:4c:47:25:8d:64:74:d1:96:
ca:b0:7f:fd:2a:70:f2:f2:93:96:98:56:64:7c:d5:
47:de:74:c5:35:73:b8:4f:31:1a:b1:5e:5a:3f:1a:
4b:24:a2:55:d8:db:40:de:5e:93:55:c1:ce:b8:ba:
03:1b:1d:21:77:a2:51:03:36:f4:c2:1c:f5:18:48:
8b:7a:d6:f3:20:fe:a6:7d:20:3c:0e:bf:a1:e7:21:
bc:98:b8:6a:11:1f:86:f0:bb:56:cf:67:f9:a0:02:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F2:84:E6:1D:E3:06:7A:07:97:08:B0:C7:74:D4:A8:66:80:5B:01
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e8:01:f5:f8:86:2c:b5:4d:19:6c:a6:21:eb:1a:a9:41:eb:
a1:9e:60:e4:31:f0:99:ca:34:28:ea:26:ae:f6:54:ab:d7:02:
66:de:7e:85:5a:ac:41:3b:20:6d:bf:71:d6:8b:72:10:6a:70:
7f:e3:57:a0:78:6d:13:a8:d3:2c:cb:48:2b:2a:c0:c6:2f:14:
90:4e:59:cd:25:04:68:74:9d:d8:aa:63:5c:69:f6:fd:9d:25:
61:73:c5:d3:0b:9e:ad:e8:ea:6e:b1:bd:f5:24:7e:ff:48:42:
b3:2b:b8:c7:7e:45:84:7d:a7:48:2c:87:e4:cf:07:78:eb:da:
29:29:c8:c3:9e:d4:32:d1:d9:91:96:d9:b5:d9:6b:36:71:df:
2a:26:94:07:6a:a3:82:d6:e7:81:4f:fb:f9:4e:29:68:16:3e:
f9:42:16:d8:13:ac:1a:fa:c8:18:da:3a:b6:e3:3a:3b:92:96:
7d:57:66:8c:3e:0a:0c:a1:f6:f6:e8:81:e2:40:57:74:ef:30:
d0:b9:a5:80:7e:26:21:d8:2f:f5:f3:1e:e9:f3:5a:5f:c7:0c:
10:92:81:25:76:c9:9a:70:29:bd:0a:2b:68:5d:56:3e:93:64:
08:33:1b:1e:f7:7c:a4:6a:9d:fb:1d:db:b7:49:a4:fd:b1:55:
95:be:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:45 2025 by rpki-client