Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: Bc7L3qjTGlKRngROuOhOIJsl1qPE3+1HNfiFNk3pH+U=
Subject key identifier: B1:89:13:41:23:D9:CA:BB:07:91:41:0A:A6:BF:70:1D:39:6D:40:1F
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 019A1316FA8CFB77C0975529C8FE4545AD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 011E
Signing time: Thu 23 Oct 2025 22:01:04 +0000
Manifest this update: Thu 23 Oct 2025 22:01:04 +0000
Manifest next update: Fri 24 Oct 2025 22:01:04 +0000
Files and hashes: 1: FxDzr4dkx7gP7-0QN9qS1QSuAFE.roa (hash: 2+R/DqRWvZVRETti21Zc43TNJBFDVQNiLw4+AXiQO7g=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: 8Ih+81fPWxvs656rnDph1ElD8WhpMq032r/O8sboSVQ=)
3: aSbzflu2ueBH4HFc6DoptPDX5Rc.roa (hash: Ps8MiI9EyDzRjGBlJSLfyNG1HvPUvesSrz/Go0N5kKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:16:fa:8c:fb:77:c0:97:55:29:c8:fe:45:45:ad:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Oct 23 22:01:04 2025 GMT
Not After : Oct 24 22:01:04 2025 GMT
Subject: CN=b189134123d9cabb0791410aa6bf701d396d401f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:84:de:8b:25:5d:4b:19:e8:18:0e:01:56:
c0:c8:8f:8f:a1:1f:eb:05:52:fe:9e:4e:4d:91:59:
9e:88:0c:00:dc:b5:66:92:b7:06:dd:85:ce:62:f3:
5f:fd:d4:2e:20:45:c6:0b:89:c1:18:54:ae:af:4f:
6d:91:fa:c0:2d:cd:f6:9e:29:15:b2:41:20:56:b3:
09:46:d2:74:2f:2f:e4:9d:56:51:f5:2b:9f:b9:3a:
f1:67:f5:93:d9:49:9c:2e:6e:74:10:4f:9e:6f:50:
f8:27:ba:b2:1f:6e:a8:6e:ea:80:d1:96:7d:ca:41:
65:ae:e0:da:81:69:57:e4:80:cc:a1:cc:3b:cb:af:
fc:86:41:77:29:a7:f0:67:40:12:cb:02:6f:1c:a3:
00:53:4f:a1:e8:7c:da:7e:d8:ec:d9:4a:68:56:b5:
ec:b1:14:d0:9c:66:fb:7b:07:b7:a2:60:b9:18:e6:
0b:ba:cb:78:36:10:5f:a5:e3:23:d1:0d:f2:e1:d5:
d9:0d:20:d2:10:67:35:95:41:38:68:50:09:ad:b1:
55:9c:62:06:ff:30:89:73:6a:1c:ea:1e:70:d0:71:
7f:c6:b8:fd:2a:2e:4c:88:6c:d8:74:a5:5a:6c:22:
4a:3c:d1:a8:0f:c1:62:bb:35:a5:f8:cb:80:8f:0d:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:13:41:23:D9:CA:BB:07:91:41:0A:A6:BF:70:1D:39:6D:40:1F
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fc:27:58:c0:99:00:90:5d:8b:9e:74:a8:0f:e5:6c:50:0a:
f0:3d:05:02:c9:04:87:d7:6c:1f:ee:cc:c1:66:24:d6:4a:55:
0b:08:d8:af:bd:dc:54:e7:2a:c7:5a:5e:d4:f1:71:cd:01:43:
b5:46:31:b0:48:91:4d:8b:c1:ab:f3:27:10:bc:30:09:04:f4:
33:39:52:26:fb:a6:cf:db:98:77:68:b8:02:31:7b:c6:f3:0d:
ce:d8:26:7d:e6:31:7a:70:ad:4b:f9:17:a4:e4:10:ae:07:2c:
1c:bd:d6:33:ee:78:61:85:97:82:c3:14:61:ce:b2:5d:54:56:
3c:41:29:26:c0:c9:04:f5:df:da:6b:20:3f:8d:a6:e3:7f:57:
31:c4:fa:f2:3e:e3:b8:90:2b:4a:70:f4:bb:ae:3c:1b:af:e9:
36:ad:15:98:29:06:bc:aa:ba:ff:1a:13:d0:ca:62:af:66:19:
26:8b:08:8f:9e:a3:d1:a2:95:1b:74:3c:14:c8:c3:20:dd:84:
44:2b:13:60:18:a3:4e:b1:26:af:e9:44:ed:64:67:ba:c1:d6:
5a:88:8a:75:3b:cf:58:53:f5:8e:cd:90:18:1e:13:2b:13:b6:
57:7b:9a:43:44:f3:2d:3f:0a:3c:cd:1b:f6:45:ea:5d:e4:55:
fc:08:f8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:31:46 2025 by rpki-client