Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier: STlKJM3fL1j7cgImARmtjt9yZ3TTqZlOgKDilzomsnE=
Subject key identifier: D7:4C:D9:46:C7:23:65:19:BF:51:E1:C3:01:EA:95:BE:BB:AB:89:89
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 019A5307EEB058D520E47AD9F51F0F2DAA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number: 011A
Signing time: Wed 05 Nov 2025 08:00:19 +0000
Manifest this update: Wed 05 Nov 2025 08:00:19 +0000
Manifest next update: Thu 06 Nov 2025 08:00:19 +0000
Files and hashes: 1: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: J8EEZEers5nbWdc3iub+WX22bU9CYkA6LyxDO5AgtxE=)
2: ZhWVS_BxzDC-crYvHmP5Jp_0l9w.roa (hash: 2arBDBURi5cw54gyN2A95A3jd2xSCZuw/tiSOf4SzU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:ee:b0:58:d5:20:e4:7a:d9:f5:1f:0f:2d:aa:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Nov 5 08:00:19 2025 GMT
Not After : Nov 6 08:00:19 2025 GMT
Subject: CN=d74cd946c7236519bf51e1c301ea95bebbab8989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0d:af:53:c4:7a:3a:78:66:fd:d4:d2:0b:7e:
46:28:15:25:ae:c6:bc:bb:55:63:6a:67:d7:22:36:
38:2b:72:5a:9e:97:74:54:a1:31:c3:04:86:a3:34:
75:8e:34:65:96:4c:5e:eb:66:64:5c:0d:8d:54:f8:
6c:08:b8:84:d3:5e:0e:13:35:12:11:53:6a:43:3b:
7f:00:eb:b8:60:7f:84:2b:89:ad:b7:80:a1:a0:a2:
58:33:12:77:7a:7c:94:a8:0f:65:c5:6e:ee:09:04:
f4:c0:95:fc:44:16:e3:a3:78:cd:7b:eb:b4:b6:0b:
7c:ee:ae:0c:2d:88:65:6a:46:85:d4:9e:46:e8:e3:
e8:1b:60:42:3e:f4:b2:00:26:07:33:7b:67:b8:45:
e4:db:59:df:4b:0f:65:78:bb:48:91:81:e7:0b:ea:
1e:87:de:7d:4c:fb:02:b9:8a:df:ec:f6:74:7f:c6:
b8:a3:30:62:f0:7e:90:75:fc:d4:c9:fa:43:ce:07:
e6:47:69:e1:ff:21:7f:f6:46:e1:d0:96:19:5c:98:
85:d7:a0:85:fb:e3:b7:ed:2f:64:7e:46:09:b8:d3:
50:6c:7c:0d:66:ef:46:25:d3:a0:b9:d9:08:2c:a3:
76:7c:77:67:46:75:2c:49:ae:37:aa:94:91:5b:49:
1c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:D9:46:C7:23:65:19:BF:51:E1:C3:01:EA:95:BE:BB:AB:89:89
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c0:e0:b0:d7:e8:24:23:a0:ad:2e:c2:ac:4f:1d:54:4e:92:
12:cf:c8:a4:6a:e3:6b:2b:e4:ce:e3:6f:49:08:ef:3a:2e:57:
c4:13:6c:cc:d4:f2:04:53:5e:5b:38:e9:d5:e8:41:46:a8:fb:
cb:a3:dd:8c:0c:81:8e:44:1a:83:25:28:03:17:a0:e3:4c:88:
9c:cd:29:c2:84:9b:f5:e1:03:68:bc:c4:28:bf:b4:4e:18:f5:
83:22:f8:9e:ea:5a:12:37:5b:82:2c:8a:09:c0:55:b9:d1:ae:
b7:f5:67:de:87:6e:a7:d6:48:a9:3d:b9:33:42:2d:7c:c9:bb:
04:ed:e3:08:5b:f0:be:ce:3a:e0:d3:be:ef:1c:70:8b:98:ff:
1f:e3:3f:4d:fe:eb:fc:11:86:10:b6:a4:0a:a5:e8:b8:21:e9:
84:cd:b0:89:f6:64:06:9c:f3:63:3c:4a:ff:da:ad:64:1b:ea:
8d:94:ca:46:2a:01:e3:62:86:59:8a:0f:a5:d4:6e:a6:ea:c7:
93:c4:e8:62:04:e8:a1:0a:45:07:e3:6e:52:1a:97:80:41:63:
e7:91:e2:97:0a:0b:1b:b7:a2:80:fc:8c:c5:db:9e:89:a1:86:
77:9c:2f:f2:65:a4:08:3f:0b:17:39:fd:b5:7c:52:8d:d3:b2:
a0:53:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:04 2025 by rpki-client