Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
File: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft (raw, json)
Hash identifier: pK6ASsT055WRCipYNWvJi77wv6wfbhj/5hd1BR9BPTg=
Subject key identifier: E6:A6:99:64:5B:B8:C5:8A:70:04:AD:3D:CB:50:4E:73:87:90:54:90
Authority key identifier: 42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
Certificate issuer: /CN=421e49e1c755fde038bd1875c7f397a568646014
Certificate serial: 019A4E1910C5C7A702F2A8A883D5CFB951A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
Manifest number: 091F
Signing time: Tue 04 Nov 2025 09:00:56 +0000
Manifest this update: Tue 04 Nov 2025 09:00:56 +0000
Manifest next update: Wed 05 Nov 2025 09:00:56 +0000
Files and hashes: 1: Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl (hash: p36r1mTjVesDc4EBfF4b3YQPUJFWuflIC2OMuEmHvGM=)
2: pOmwZuP6Q-BxWvua_azIxnDrtaY.roa (hash: 1Gh5sWhYQZnz90m+gcSVdtSatfk353c30A4J7Tl7xJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:10:c5:c7:a7:02:f2:a8:a8:83:d5:cf:b9:51:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421e49e1c755fde038bd1875c7f397a568646014
Validity
Not Before: Nov 4 09:00:56 2025 GMT
Not After : Nov 5 09:00:56 2025 GMT
Subject: CN=e6a699645bb8c58a7004ad3dcb504e7387905490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:bb:5e:4f:99:a4:ec:a0:03:10:03:49:d0:
3a:47:4e:2f:08:42:1a:6a:c4:4d:6d:4b:0a:d7:12:
eb:2d:b9:e7:31:5f:53:11:7d:d4:a5:a2:0d:5e:1c:
45:8f:1b:23:90:6e:1c:18:57:ab:10:47:dd:ff:67:
2a:64:0d:44:32:9e:aa:6b:f4:72:14:ce:ad:e9:0c:
7e:9b:7f:8e:52:5d:08:23:9f:36:04:b7:d7:47:68:
6c:27:fe:2d:bd:3b:73:35:2e:63:e4:e0:bf:90:9b:
23:53:65:6e:92:53:4d:e6:65:b3:19:39:64:71:88:
34:1c:5a:0a:90:4a:ba:03:0e:fc:27:62:d5:eb:0b:
ff:d9:42:cb:1f:20:91:a3:c7:f3:23:b5:02:94:fe:
43:d4:6d:52:7c:d7:c6:1d:9c:84:6b:53:20:cc:06:
ef:3a:da:c4:e1:6a:64:75:85:61:d0:ee:5b:e1:ee:
80:c1:14:52:70:5e:3a:fd:84:8b:8b:50:6a:0f:42:
21:f8:da:04:fd:6e:2c:ea:07:83:a4:38:3b:e5:18:
05:07:8e:db:04:24:30:85:76:b6:2a:44:fb:52:99:
e8:ee:36:e4:9d:99:fd:46:ea:40:31:26:67:74:1a:
86:ac:c8:b5:40:f3:0a:4a:41:0f:3d:bc:0c:f1:92:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A6:99:64:5B:B8:C5:8A:70:04:AD:3D:CB:50:4E:73:87:90:54:90
X509v3 Authority Key Identifier:
keyid:42:1E:49:E1:C7:55:FD:E0:38:BD:18:75:C7:F3:97:A5:68:64:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6cbb0e-f455-4573-a9f9-38d6716b2005/1/Qh5J4cdV_eA4vRh1x_OXpWhkYBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b1:7a:1e:1f:cc:99:ca:8d:f6:02:72:36:58:dd:13:5e:29:
81:79:95:da:0f:00:85:d2:ad:fb:ef:5a:bc:9e:c5:fb:cd:20:
6d:83:a0:55:9d:42:a7:48:de:a9:82:25:74:99:f2:b6:67:77:
b1:10:42:48:4a:15:28:b0:a2:5d:ad:e5:b2:b9:4e:5c:e7:04:
95:49:c2:1c:7f:a1:e3:83:60:f5:d8:0c:7f:cc:95:9c:9a:66:
2b:02:ad:34:7d:bc:6e:b4:06:2a:9f:88:9c:e0:aa:7d:08:4b:
f4:4d:f6:d7:3e:62:c9:53:10:56:e2:61:0c:55:6c:f6:43:75:
41:10:fe:f1:06:cf:cb:20:ca:71:02:20:f4:f9:46:c8:78:94:
de:a4:5e:19:3b:8f:8f:aa:ad:9b:13:e4:5b:a6:e9:e0:32:de:
2a:bc:64:e5:fb:d0:4e:b8:23:5d:54:c2:d3:72:aa:44:d4:1f:
8e:d0:65:f5:b0:49:a6:aa:d3:3d:c8:d8:45:4b:97:49:24:7d:
75:01:f3:c3:98:e3:dc:df:e6:f2:6b:17:da:bc:87:48:63:78:
f4:ca:60:67:f7:fe:22:f9:50:04:4e:0d:9f:74:5a:c7:4c:62:
a4:a4:d6:60:d8:e7:0a:d3:26:86:a3:30:d4:b1:31:22:50:4c:
9b:3b:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:41 2025 by rpki-client