Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
File: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft (raw, json)
Hash identifier: txSVpBClAT/DNtoBa8qpDMIsHGJfwhIQ6yOPk1JXns0=
Subject key identifier: 85:D0:6F:19:D7:2B:CE:8C:23:8C:FF:7F:55:D9:E1:C7:AC:6C:D5:D1
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 019A4F995806BCEFC0DDFA9308B0C322433B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
Manifest number: 1499
Signing time: Tue 04 Nov 2025 16:00:40 +0000
Manifest this update: Tue 04 Nov 2025 16:00:40 +0000
Manifest next update: Wed 05 Nov 2025 16:00:40 +0000
Files and hashes: 1: QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl (hash: sz4rBU24RaxbEQTt+NkP1oqacQIMMR0n2N/KBQT2O9w=)
2: s2rqpwumhtmvSEX63lF_jSCCIqI.roa (hash: 8m00LdhJd4srRCMsExEiNSzzG4jj/QWLsZ3SSDUCdOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:58:06:bc:ef:c0:dd:fa:93:08:b0:c3:22:43:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Nov 4 16:00:40 2025 GMT
Not After : Nov 5 16:00:40 2025 GMT
Subject: CN=85d06f19d72bce8c238cff7f55d9e1c7ac6cd5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:cd:24:86:bf:9b:60:8d:a6:10:9d:d1:83:
ef:04:0a:3e:f4:62:05:d6:ad:ac:ea:61:10:21:53:
87:14:71:d1:6a:fb:8c:b1:68:c8:df:42:1b:1b:c9:
00:b5:44:5f:68:a0:41:9a:b4:65:13:05:00:ad:70:
23:d8:0b:2c:b7:07:6c:d1:6c:4b:d4:39:5c:f8:c4:
c0:be:9c:54:a1:75:f1:ef:3c:ba:15:4c:00:31:cc:
e7:c5:b2:de:33:4c:37:8a:6c:b5:68:d7:50:4a:fa:
0f:03:66:68:c2:40:e1:71:61:a6:55:94:a0:20:65:
95:92:69:fa:a1:73:cf:52:cc:ad:e7:96:a2:0b:c5:
86:b4:35:97:0e:ba:ea:6f:dc:ad:cf:e7:b8:ac:4f:
0a:99:95:57:ba:14:a0:ae:f9:4e:8c:70:5a:b7:4d:
c1:56:bc:51:fb:8a:1a:33:e1:74:0d:d9:be:85:3c:
1a:d2:cc:fb:68:ef:b7:f1:d3:10:f9:9a:dc:61:64:
31:79:04:9f:79:f3:35:ae:fa:84:f7:78:22:e0:78:
9b:99:bd:d6:3e:02:a7:52:ad:db:a0:29:13:bd:cf:
7f:78:98:8f:df:90:42:46:1c:d2:87:61:44:62:7a:
0b:77:33:98:58:0f:1b:8d:53:34:45:9a:54:cc:00:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D0:6F:19:D7:2B:CE:8C:23:8C:FF:7F:55:D9:E1:C7:AC:6C:D5:D1
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0f:06:50:ef:10:f0:a3:7d:44:84:14:74:7d:be:45:41:82:
29:d9:49:1c:00:f6:24:97:d9:68:c1:e5:49:12:ba:7a:b9:18:
f5:eb:5e:7d:75:2f:cf:a8:b5:df:9d:6f:96:1b:ac:3d:8a:97:
07:5d:70:44:43:5c:d4:43:c0:14:a3:c9:fc:31:d9:c9:1e:6b:
73:dd:8b:f9:cf:6e:d1:aa:5f:cb:81:c5:b7:c6:e1:b7:88:51:
3c:7d:34:59:6d:b5:3c:49:15:f2:ab:f0:7c:15:0e:c9:f6:97:
fa:09:27:94:6c:15:ae:a5:47:46:37:4e:76:80:54:08:68:ed:
7c:fb:53:ff:ad:0c:3f:72:24:3c:e7:50:83:e8:ac:d3:82:42:
d0:f3:4e:42:41:57:15:b0:06:a3:54:23:5e:8c:e6:69:70:ca:
df:ba:60:a6:28:94:8b:21:73:e0:7f:f3:a1:c6:d8:4e:e1:0a:
c5:86:b3:85:a7:d8:07:74:d1:84:2e:d5:1d:30:c1:09:a4:2c:
a2:ed:2a:fb:d5:a6:c4:7a:d6:e6:32:ef:b1:d1:9e:de:a9:df:
3c:8a:f4:9b:fe:48:fc:ec:39:52:0a:85:06:18:80:95:54:3f:
21:a3:d4:cf:f1:09:4d:7e:d2:04:e4:52:e4:3b:6c:25:56:28:
85:af:6d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:28:48 2025 by rpki-client