Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: kf1yhsgEkNwatO7fBxGgC4seuUiohDAm6PJXeL+59nE=
Subject key identifier: C2:2F:A0:16:36:85:35:05:13:E8:70:12:09:AA:E6:89:3D:83:4E:E6
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 019A4D3CFA4B1E3813F0D53EB54111250973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 08A2
Signing time: Tue 04 Nov 2025 05:00:32 +0000
Manifest this update: Tue 04 Nov 2025 05:00:32 +0000
Manifest next update: Wed 05 Nov 2025 05:00:32 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: 0gWiiCfOa/atEyjPDvkAhJBXgF1JYvQbm0Oql1GP8LA=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:fa:4b:1e:38:13:f0:d5:3e:b5:41:11:25:09:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Nov 4 05:00:32 2025 GMT
Not After : Nov 5 05:00:32 2025 GMT
Subject: CN=c22fa0163685350513e8701209aae6893d834ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:41:e0:97:de:42:7d:c7:d2:b4:39:6f:4b:
fa:d3:fc:d2:27:1c:5b:4c:27:ea:34:70:7e:38:94:
ff:eb:35:f1:ff:44:b3:d4:84:98:0c:f8:ab:2a:27:
b4:25:f3:01:0b:10:88:ba:e6:ac:ce:ad:9b:dc:79:
fe:50:1e:1c:fa:09:ae:54:2f:db:a5:4a:a3:6d:70:
99:3e:e4:4d:8e:5b:33:22:ca:dd:99:8e:ed:92:7e:
a9:e8:66:7e:cd:ea:27:6c:12:b8:aa:9c:35:97:df:
4c:b6:a4:05:a3:24:e0:2e:c3:44:d7:6a:54:57:97:
6d:67:8a:d6:90:7a:36:0c:15:e6:7e:7c:45:f7:a4:
91:44:03:9f:6c:e4:ad:3b:8f:30:4b:e1:38:5a:7f:
b8:b0:3d:76:dd:b8:c3:fb:4d:48:a3:b0:67:3c:37:
93:ed:82:8b:9c:09:d6:4e:38:35:eb:c8:52:8b:28:
9b:b8:fd:9e:42:06:65:42:83:85:ab:c3:78:71:40:
4a:4e:f0:7c:69:22:6e:03:63:64:3a:b9:c6:05:28:
39:5a:79:ce:77:b8:fb:da:d1:fb:67:f9:57:43:b9:
2d:57:3b:a1:a7:43:f4:d3:aa:4d:5c:5a:68:84:0e:
21:ac:1d:42:40:68:22:ea:47:b5:cc:04:78:ae:6a:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2F:A0:16:36:85:35:05:13:E8:70:12:09:AA:E6:89:3D:83:4E:E6
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ff:09:e7:c9:80:8b:4a:70:9d:21:ee:83:3d:6b:cd:f0:e9:
6e:76:d8:6b:5b:8a:69:cc:4f:10:00:de:0e:54:9f:f7:90:b0:
25:7f:30:66:f4:39:7c:47:f9:57:ff:31:10:27:0f:d8:30:02:
78:3c:75:10:c9:58:f4:9e:d9:6d:59:4b:fe:eb:fc:2f:3b:02:
71:e0:2e:f5:5e:c9:d6:43:1d:34:3c:fe:18:ca:d2:0a:1d:42:
70:bd:f2:55:ff:ef:9d:af:26:62:b0:f2:8d:d8:73:22:f9:c9:
dc:c5:ad:34:72:85:b1:9b:1a:0c:e4:dc:6f:59:35:3e:66:47:
1f:7b:34:47:5e:4b:4b:ef:2e:cc:1a:e2:5e:74:43:38:43:16:
3f:d3:a5:6e:c2:35:45:92:3c:5c:75:12:5c:92:d4:4e:b6:9a:
aa:05:b3:54:fe:f7:0e:35:76:bb:dc:4c:96:f1:05:83:22:6d:
52:07:60:37:12:5c:b5:a4:86:45:23:df:63:aa:7b:c4:80:54:
44:dd:28:fb:a9:dd:64:a6:64:c8:9c:c3:74:be:ed:64:c5:aa:
34:8a:0c:05:2f:6f:60:1d:f4:ed:d4:47:0a:cd:80:b0:c3:de:
2e:09:10:b3:b7:4a:9c:4a:75:9c:24:d2:68:fb:6e:36:97:71:
8a:1f:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:48 2025 by rpki-client