Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: +dCYBk7T42T03/3JIG0G6YZHAW4qX2OHVIl1iVwaJ3A=
Subject key identifier: D3:7D:DB:79:BF:17:E9:DB:49:B7:F0:BD:F2:98:DA:6D:C8:61:E3:66
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 019A4F61E848E4650AD7145352FAE09A933D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 0372
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: cMiX0uSm6/M/Rb4C9hJICcpmbQqalWIchZ6lpaICTpQ=)
2: nNbHw-B9ovJEjkk8hXq6L72QjEA.roa (hash: gipZmwcUyYZU1rfrC2SjuA4uq7CTXt+ZJKoz6Ec8OnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e8:48:e4:65:0a:d7:14:53:52:fa:e0:9a:93:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=d37ddb79bf17e9db49b7f0bdf298da6dc861e366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:89:39:20:36:94:ce:a2:1f:97:f3:92:ba:
57:eb:33:07:51:79:2b:87:2f:ee:a9:56:e8:74:00:
fb:86:af:32:b3:73:79:44:b7:b0:1d:22:7e:7d:f3:
73:ee:79:fb:c1:84:ca:78:c3:46:7a:13:44:f3:d7:
c6:af:4b:78:7d:bc:a3:d8:19:26:33:f8:31:c7:28:
ee:e4:cb:d8:22:ef:fe:d4:84:5b:68:80:20:15:f5:
49:d7:84:0a:8b:4c:fb:d3:4e:8d:f7:49:d9:84:4e:
8f:4e:dc:bf:04:1d:3f:d5:7c:a8:80:4c:cb:1d:f3:
69:bf:1b:9f:ce:cf:14:8e:4e:51:0c:77:f5:d3:a4:
6b:ac:74:2c:54:5f:27:f4:04:3a:49:9b:bc:75:f0:
ef:d8:7b:ea:ed:21:f8:65:f1:c7:4f:51:2b:8f:1e:
ee:a9:49:e4:09:7f:d2:d5:55:76:74:c7:dd:33:f3:
8e:e0:fd:eb:aa:36:bb:e7:9f:8f:dc:36:64:8e:a0:
69:97:15:e4:c7:e8:3c:86:b6:0e:c8:d1:d5:e4:40:
20:ee:fe:b1:ba:a4:43:1c:08:5c:45:68:b5:7c:36:
6e:c9:a0:aa:3c:02:33:15:86:b3:e2:fd:8b:10:af:
85:c0:ca:ec:3c:82:04:0d:89:4e:eb:7f:68:39:38:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7D:DB:79:BF:17:E9:DB:49:B7:F0:BD:F2:98:DA:6D:C8:61:E3:66
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:83:19:56:56:f1:81:bc:8a:7a:1d:48:96:39:5a:12:1e:87:
4e:82:71:69:d8:25:1a:49:c6:47:b9:4d:66:2b:1b:e5:99:33:
ae:69:39:ed:4b:6e:da:73:bd:a8:e0:64:1f:08:e6:2e:05:30:
1b:ad:95:c6:ec:cf:54:95:95:65:21:81:48:fd:a4:b1:1a:1b:
8d:6a:e2:e8:d2:24:0c:0f:55:41:3c:43:39:e6:9d:39:2a:19:
28:0e:7e:f3:fb:d7:5b:41:d6:52:25:38:47:b2:83:02:8c:ed:
35:2c:5a:77:80:14:1c:0f:d3:f8:fa:c3:bb:35:bb:03:ae:66:
ab:1c:e8:fb:db:b0:2f:55:94:a5:bd:b7:da:61:a3:2a:f7:8c:
be:9f:5b:67:7f:39:c4:b3:04:58:77:cc:c5:ec:f2:7b:da:39:
59:d6:b4:bb:fe:c0:c5:a4:36:f3:e8:98:75:17:86:8b:08:a2:
fc:4a:ce:3f:48:56:08:87:1a:cb:56:d9:43:cc:7d:35:b0:20:
a4:3e:e8:9d:1c:29:7e:68:ad:77:66:17:8d:11:aa:9c:d5:84:
f5:d2:77:1c:d8:a3:9e:53:ac:f4:63:53:f8:20:45:8f:0b:0b:
48:9f:c0:43:de:61:df:46:7c:66:51:8a:65:0a:6a:0b:2d:00:
36:64:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:23 2025 by rpki-client