Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: J6iTAoON9zDSsFXqYYNWuItuftsAG45+ui3moNIjNyQ=
Subject key identifier: 2C:5D:75:9B:CA:E7:74:27:41:74:E9:26:C6:82:38:C8:77:14:62:A2
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 019A232EA7E70D49AEECBED3C12F5A31BF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 08BB
Signing time: Mon 27 Oct 2025 01:00:51 +0000
Manifest this update: Mon 27 Oct 2025 01:00:51 +0000
Manifest next update: Tue 28 Oct 2025 01:00:51 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: vkptOIWJeCgdfPZ8fJf2ZFENjhrWn6vBTHpEErB982A=)
2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:a7:e7:0d:49:ae:ec:be:d3:c1:2f:5a:31:bf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Oct 27 01:00:51 2025 GMT
Not After : Oct 28 01:00:51 2025 GMT
Subject: CN=2c5d759bcae774274174e926c68238c8771462a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:a2:6a:fd:fb:60:99:ed:b3:92:5e:aa:17:
4b:34:b7:91:63:a0:9d:f7:a8:cc:f1:c3:7d:9f:24:
a7:9e:23:57:29:30:ea:30:9c:87:3a:17:99:0e:69:
7e:22:85:0b:bd:91:d4:29:21:94:d6:f7:09:88:99:
1c:e9:80:b6:91:31:b4:90:24:20:81:0f:69:4f:a9:
a7:40:4e:c2:79:5b:79:1e:36:05:5f:8e:d0:30:81:
e6:c3:7a:dc:30:7f:db:28:9f:66:f9:37:dd:b8:d6:
b9:75:40:56:33:c6:71:ab:74:68:b9:3f:8e:06:6c:
aa:ba:3a:df:f3:ff:16:35:0d:0d:35:9a:47:b8:cc:
da:b1:df:1e:b9:d8:e2:e7:56:43:44:f5:1e:7e:32:
35:34:eb:8d:d5:3a:55:e9:18:c2:b6:e1:ed:0f:56:
2f:6f:9b:35:73:c9:fe:f9:d7:e1:6b:48:f6:94:3d:
2a:62:4c:81:8f:5b:6f:8f:a3:d8:0b:57:ee:65:a5:
2c:a3:84:56:c7:d3:68:8b:65:78:1f:34:ca:9d:5a:
7b:37:db:22:3f:1f:72:8a:7b:d0:e6:4e:08:08:6e:
63:3d:41:9b:08:73:03:2d:c4:3e:59:94:f6:e4:b9:
ed:ee:45:92:7f:22:be:b1:e8:43:85:78:18:81:b1:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:75:9B:CA:E7:74:27:41:74:E9:26:C6:82:38:C8:77:14:62:A2
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4e:d0:df:89:3e:ca:50:83:12:c2:dd:7e:86:0f:3a:a1:c0:
8c:55:9f:25:ac:d4:69:bd:cb:07:1e:6c:38:a1:b6:96:57:d4:
2b:2d:4e:2a:03:cd:94:9b:3a:de:5c:2b:ff:f4:10:9c:12:8d:
77:72:cd:6a:49:15:13:1a:b3:09:08:15:31:05:c3:19:e6:e8:
eb:7e:a1:21:23:7f:e5:4c:94:17:14:56:57:04:77:4e:50:f3:
09:e8:da:9b:81:36:10:ea:7c:94:50:ba:f3:88:9e:3e:99:e9:
a4:91:d4:f4:4f:fd:4f:55:45:24:98:6b:f4:35:98:ac:e7:64:
7f:11:4e:a0:86:0f:15:7f:aa:45:c1:1c:7f:45:47:38:2e:bd:
e8:e9:c2:77:db:d9:07:f6:73:91:22:e8:ad:c1:e8:2c:a5:f9:
fd:e8:e1:35:f5:2b:00:0a:09:ad:1d:a6:7e:aa:3d:38:ea:43:
db:fd:b9:15:b4:af:42:1a:5e:cd:27:f3:f7:69:8b:85:af:68:
ee:0b:03:0e:1a:6a:1d:b7:a8:72:6f:ac:2a:d1:05:66:22:24:
a3:64:d8:cb:f7:fb:1e:3a:67:fc:e6:2d:b4:5a:b5:c6:0a:5f:
46:38:af:bc:86:9b:9b:aa:71:8b:2a:40:52:52:a9:ad:5a:12:
5e:5b:a9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:19:32 2025 by rpki-client