Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: UyzGhQ3pH75YUmNK0oeJIlo/bsOOYUplzYix7rCKtKI=
Subject key identifier: 52:B3:6E:5C:5A:A2:BF:FE:D7:05:D3:E2:17:9B:56:85:43:E8:74:0B
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 019A21ADCA70637E21D38A6DD1B92C3324DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1701
Signing time: Sun 26 Oct 2025 18:00:28 +0000
Manifest this update: Sun 26 Oct 2025 18:00:28 +0000
Manifest next update: Mon 27 Oct 2025 18:00:28 +0000
Files and hashes: 1: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: HbO7Cn6EkZ8Q33AOiey5JO8wR7tOLHV+Dq1z3Vxp6cY=)
2: ULw_e6rY6wER2z1dGFmp31jEgd0.roa (hash: MY5YBBTJCozx9Da4ab7Dr9d2mlZWfjLXtBL3DR2CzxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:ca:70:63:7e:21:d3:8a:6d:d1:b9:2c:33:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Oct 26 18:00:28 2025 GMT
Not After : Oct 27 18:00:28 2025 GMT
Subject: CN=52b36e5c5aa2bffed705d3e2179b568543e8740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:b1:f1:e8:89:23:4c:23:58:44:6d:75:f0:
5e:3b:1a:2f:f1:40:2a:6f:9a:e9:9e:f0:9b:51:79:
5e:46:06:eb:cd:b4:9c:99:aa:69:6f:e4:49:5e:4e:
03:1a:f2:60:17:da:e0:91:89:46:4f:f6:7a:5f:60:
87:51:2f:21:82:d5:51:62:7b:08:a2:3c:7e:d1:83:
9c:bc:97:53:c3:1f:08:f2:6d:cb:a4:6c:98:e2:e0:
08:37:44:7f:44:6d:28:2a:2e:dd:6f:b3:f7:ef:39:
c7:5c:d4:9e:7b:87:33:b6:76:6e:2f:5e:c2:a8:01:
51:6f:2d:4e:7c:ee:8c:8b:c2:31:a1:37:2a:2e:b7:
3a:0e:2f:74:7d:cf:98:67:c9:71:72:4b:b4:20:61:
37:c1:c7:06:19:5a:23:a2:46:e6:32:6b:bf:e3:93:
03:9c:63:ea:7c:d9:00:be:10:df:29:75:87:24:a1:
22:a9:7d:16:ef:9f:0d:69:f2:2f:4b:bd:7f:c7:ad:
d6:12:ec:91:ea:6f:64:22:16:f8:a1:30:0a:06:f4:
f3:38:bb:a9:be:c9:17:fe:50:d5:c7:a0:7e:6e:0e:
e8:ea:77:16:7a:e8:d3:66:0a:69:de:5e:34:89:a4:
29:8d:c8:86:36:6c:17:32:60:0c:d7:f4:44:ff:6a:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B3:6E:5C:5A:A2:BF:FE:D7:05:D3:E2:17:9B:56:85:43:E8:74:0B
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6d:f9:ad:b4:2d:ca:8b:a1:13:ae:9d:8b:04:07:b0:e0:35:
3a:21:3b:99:c8:bb:5e:98:5f:ed:b2:4e:b2:7e:22:bb:e0:1e:
e6:57:8b:f3:0b:80:ce:a0:26:26:22:cf:67:30:9a:49:5c:7b:
df:c1:f3:82:89:bb:7a:06:59:fe:7a:ed:fd:99:29:47:3f:1c:
1f:07:12:5e:14:7f:b4:c6:e6:94:05:f7:58:fb:30:a8:d0:6e:
11:68:cb:cc:14:bb:e4:fe:40:80:67:e5:95:1e:eb:c6:aa:b7:
22:4c:bd:bf:d0:ff:f7:95:5b:25:3c:bf:43:97:6f:4a:98:70:
57:59:03:b3:ab:6a:77:4b:2d:cd:e9:4b:fa:b8:f4:96:2c:ea:
28:c4:28:e5:c0:2f:7f:63:f9:39:97:e4:2f:a6:fb:9c:92:1a:
1b:f5:b3:90:8e:83:31:a0:76:59:81:f6:e6:1e:ac:fe:98:7f:
bf:f5:fb:b8:1f:1b:15:2c:d2:d5:37:e6:03:4b:b0:32:09:12:
1f:86:ef:80:b4:ba:0a:d1:3f:4a:6e:cd:4c:38:d1:eb:c7:0d:
7f:3c:db:0d:78:f1:a5:30:9c:f8:59:d8:78:26:b1:cb:a8:91:
bc:16:ec:2a:a4:76:e8:73:5c:ec:0c:6d:74:69:69:b9:8a:f9:
73:7e:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:42:05 2025 by rpki-client