Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier: gIbO/DRSe08U0olsDCTj2p3jU4DbtCaDS7kIscMy4gY=
Subject key identifier: 50:47:B3:46:A5:83:5C:69:3F:73:09:1E:BA:1B:8C:F2:EC:B1:7B:3E
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 019A71B819D1A511828DBD25CB651344D166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number: 0A73
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=)
2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: kXhxx9BVN2jRXOkudqixAZy1ZVRLASAnbKSxhcAy+v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:19:d1:a5:11:82:8d:bd:25:cb:65:13:44:d1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=5047b346a5835c693f73091eba1b8cf2ecb17b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:d5:73:b8:3d:c9:61:c2:f7:88:ee:75:88:
c3:f1:ad:0d:c7:cb:3f:34:4f:d3:8f:3d:d3:3b:1a:
a8:d9:af:07:a9:95:94:ec:8a:4a:d1:de:ba:ed:20:
ba:e7:f2:4a:c3:ca:54:ca:54:15:64:3b:9f:ce:fd:
62:08:e3:36:26:9c:af:e8:d5:2b:df:24:c5:21:51:
c2:08:6e:c1:31:d6:97:73:1f:ba:1c:89:49:b3:f9:
e8:69:ab:f9:c8:84:7c:67:8f:95:f6:0d:6b:66:82:
2e:45:95:65:31:b9:e7:7e:5d:28:7a:af:13:fc:88:
57:88:a2:a0:5b:26:0c:df:b5:c3:14:bd:31:72:c1:
3a:97:ea:e0:2f:d4:10:59:c3:32:6e:3f:49:2e:1f:
6b:a7:b3:fc:e1:3e:9e:6e:b6:6c:11:cc:c8:00:0b:
a7:27:e1:7f:49:31:b9:a8:a7:fc:b2:99:84:58:44:
e2:9d:46:6e:92:35:a4:82:71:27:db:21:eb:bf:d8:
d1:21:32:b7:a2:b7:aa:18:61:16:3f:38:bb:89:25:
dc:37:60:27:0e:f1:d2:b7:f9:5a:4f:eb:4c:ba:4c:
69:48:1f:d2:fa:93:f7:27:ac:2f:4e:d5:81:e1:69:
f0:6c:df:7a:e7:2b:1b:1d:71:cd:fe:c1:0b:9b:e6:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:47:B3:46:A5:83:5C:69:3F:73:09:1E:BA:1B:8C:F2:EC:B1:7B:3E
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9b:d7:31:72:f7:a3:78:76:64:67:0f:b0:52:dc:d2:da:fd:
a7:c0:11:6e:b0:d5:77:e7:74:f5:cb:13:af:10:d7:8b:23:08:
5c:d1:59:78:0b:57:8b:11:13:b7:53:b7:79:9d:df:ca:ba:35:
75:99:cf:33:f1:14:d2:3f:60:d1:a8:34:00:91:35:8f:33:cb:
e3:25:4c:c2:9f:1f:06:ee:04:7a:ec:58:54:7f:b7:a0:e2:f7:
99:03:4d:d3:39:17:9e:f2:c3:4a:5d:55:2f:32:ec:31:3d:b6:
9b:b9:dc:7b:b0:75:7b:bf:6c:a7:4e:6b:0e:91:04:cf:92:45:
a8:eb:f2:f6:ea:2c:e4:a1:55:90:3c:41:0b:7d:43:fa:ff:79:
17:ce:6d:e4:65:05:21:7b:ea:2b:9a:96:9c:35:7b:5a:c0:3d:
5a:3b:6e:ed:c9:fd:e5:b0:58:a9:ba:1c:f0:06:98:33:49:94:
6b:ad:12:23:1f:4e:62:ed:e6:22:19:48:8d:55:b2:af:a9:86:
1b:73:ab:f9:c0:6b:7a:8a:1f:66:5f:e8:8c:6f:5e:89:d1:52:
a3:c1:ea:69:40:f6:a7:90:e1:1c:4b:66:3d:0e:34:8e:62:5f:
44:ce:1b:6c:24:fe:88:99:70:64:f9:4b:85:1b:f3:cd:3f:cf:
0a:42:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:42 2025 by rpki-client