Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: OFFwoNw3LlMnW/VemuFEiuoMIuhNOeOuvYbegXUoGXs=
Subject key identifier: 01:9E:19:92:9B:4A:01:9C:F9:76:C1:55:88:CB:B2:34:7A:3D:B7:A8
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 019A4D73F0650507EAF847B0C8FB21D51476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 06:00:35 +0000
Manifest this update: Tue 04 Nov 2025 06:00:35 +0000
Manifest next update: Wed 05 Nov 2025 06:00:35 +0000
Files and hashes: 1: 1-tobmuArgsO1CcS37ElbRPB4oI0.roa (hash: eoz/B2g3BVZDkFcVrm+jT5e/XqpAm/AHcMzK9BR9JlQ=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: caseUvqpUoSIiM0eM1knwkr1gsvNlGVktY6YViwlMNo=)
3: dysGc3dUC19B4xYH14h547-J3bU.roa (hash: xZJSB931nK/0DYsJmXQtw/2T7yJN+gcQPJ/Rr8Mu1dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f0:65:05:07:ea:f8:47:b0:c8:fb:21:d5:14:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Nov 4 06:00:35 2025 GMT
Not After : Nov 5 06:00:35 2025 GMT
Subject: CN=019e19929b4a019cf976c15588cbb2347a3db7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:96:8b:41:23:2a:d7:7e:65:25:40:39:9c:50:
49:35:3b:88:bf:f1:51:3a:4a:98:fb:4c:86:75:d3:
b2:5f:a8:60:5f:55:fd:a1:42:74:1f:5e:94:ef:b3:
8d:9c:68:08:9e:ac:df:90:00:0c:aa:b8:2a:56:30:
1e:c1:0c:f1:32:ef:80:b4:aa:7c:5b:ae:92:5c:94:
d3:35:60:8d:4a:3f:13:13:a0:ee:05:55:99:47:b9:
5d:94:66:57:57:ba:9a:70:ae:e2:4b:a4:5c:0f:0b:
00:32:7b:30:3d:58:3d:d6:22:05:d1:18:cf:d6:e2:
1a:f0:18:db:66:f1:5c:75:ec:35:66:7d:9e:5e:f9:
36:52:88:a6:14:50:44:9c:bd:10:69:e6:04:b4:6c:
bf:c0:d6:f5:93:53:ea:1f:18:51:18:a7:ac:c7:2a:
91:71:b7:ac:f0:94:d9:9c:22:43:fe:e8:3c:fc:8d:
30:af:2c:98:28:00:0e:21:6a:39:77:2a:00:6f:41:
76:77:fc:77:4b:2d:6e:1d:c4:8a:88:3a:d9:3c:7b:
25:4c:53:ce:68:85:1f:e9:1a:dc:84:a9:d7:26:8d:
fb:c3:7e:b8:0e:c5:7a:33:4f:7b:f9:29:f6:20:72:
4c:8d:e8:b2:53:f0:c9:ee:19:fd:53:f4:b5:20:38:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9E:19:92:9B:4A:01:9C:F9:76:C1:55:88:CB:B2:34:7A:3D:B7:A8
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:83:0e:d4:72:98:67:d1:d1:01:c4:5d:5f:bb:03:4f:4c:d2:
2c:19:8c:3f:72:da:13:2b:04:15:fe:ee:d1:75:12:f8:c0:46:
29:0e:9e:27:26:27:ff:05:da:87:18:88:6d:d2:b8:df:d7:0d:
0f:da:4c:d6:a1:78:7c:4e:3c:3b:08:ff:be:9b:d3:7e:96:eb:
cb:96:5f:ce:d0:36:bb:c4:33:12:ef:1a:23:ab:e3:98:85:80:
67:23:fb:c1:99:21:c6:b7:00:d1:35:19:af:86:e5:e6:4b:30:
1d:23:56:16:34:8a:0b:65:30:5f:6a:ef:df:4f:51:ff:4b:85:
be:d1:ff:72:4d:be:36:27:54:b4:f7:2b:84:85:bc:05:87:ef:
f5:ed:a8:c8:b4:d8:97:ac:6e:ae:55:72:3a:30:6c:6b:87:d9:
ac:1b:04:05:de:da:6d:2e:75:dd:1b:70:a4:1d:ae:19:af:2b:
ed:4d:a0:03:a4:1c:85:73:c7:17:de:0b:fe:b9:3f:3f:21:8b:
05:b8:c0:f9:ae:e8:55:72:43:ad:1c:e7:34:37:b5:c2:b3:d1:
01:bd:93:b0:6f:6c:81:2d:7e:39:8c:d0:ac:26:d2:63:54:b4:
6c:71:7e:e5:2b:72:02:99:85:51:87:84:52:df:72:b9:30:d2:
e3:9c:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:43 2025 by rpki-client