Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: yQyuNRqflXLMDcaNLyQqqSEYz21RmLsUbgs4Pz4qh+M=
Subject key identifier: 26:14:30:E1:D2:25:D3:8E:EA:DE:BB:AD:31:9B:06:E9:52:99:FF:D6
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019A30EA9300FDC9645D368CCDDF866AD924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 16FE
Signing time: Wed 29 Oct 2025 17:01:10 +0000
Manifest this update: Wed 29 Oct 2025 17:01:10 +0000
Manifest next update: Thu 30 Oct 2025 17:01:10 +0000
Files and hashes: 1: 7kOLb5agTvJNiZmHbg7oPOSBoq0.roa (hash: 0jza8HkowMAhNdk3rHbioNC6hwm48YtOGKmOL8x2OVw=)
2: OltzXJJiE9XyxoEWZKwac5KxNNc.roa (hash: MXwRj0eiEFB7lamZjGpRz17XKhXqe6VMpTtPXa7Dwss=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: Av7ktFatm0xhrYBhJ2eCGi2RRNadwfrpQtP8LpdzTrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:ea:93:00:fd:c9:64:5d:36:8c:cd:df:86:6a:d9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Oct 29 17:01:10 2025 GMT
Not After : Oct 30 17:01:10 2025 GMT
Subject: CN=261430e1d225d38eeadebbad319b06e95299ffd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:a6:f5:d7:28:d2:ba:0d:54:d9:d8:74:42:
a9:58:58:f8:81:e1:05:f1:43:8c:f3:30:b6:92:10:
c4:d2:3d:f2:0c:d6:8b:50:fb:0e:8d:cf:71:c3:d3:
ba:67:20:21:ee:c5:70:4b:d2:9d:35:bc:09:32:1e:
75:90:03:bb:96:f7:88:2e:52:49:f5:f8:90:0e:1f:
82:5b:f0:16:ec:a0:e5:45:4f:b8:3e:ff:79:7e:8e:
73:b0:cc:29:c8:ec:ed:fa:47:7a:cf:c1:27:19:0b:
81:43:5b:09:85:01:98:e5:81:8a:7d:6c:3f:20:6d:
3d:5f:e2:03:17:da:d7:dd:87:85:ed:d8:a5:66:fe:
15:ba:97:6e:4f:ac:33:70:ca:ca:a0:12:af:9f:21:
3e:ff:f3:8f:95:d1:6c:20:92:d2:36:7c:1c:84:71:
4d:13:c1:47:d4:82:cc:36:96:8c:99:bd:76:e4:0e:
a0:18:d2:39:2f:27:05:e0:0a:5c:e4:e1:f7:6e:d1:
55:44:22:84:4f:b1:f7:cc:b1:fa:15:99:3d:23:4c:
96:fb:e8:f6:3e:5e:2a:77:57:db:d1:ce:4b:6f:9d:
af:a6:73:0a:7b:b7:49:73:2d:f7:b8:e8:44:7f:70:
30:94:c5:c3:99:2b:48:13:59:88:30:60:f7:45:8d:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:14:30:E1:D2:25:D3:8E:EA:DE:BB:AD:31:9B:06:E9:52:99:FF:D6
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a7:5c:dd:60:ba:56:32:45:3e:0b:8f:eb:0c:f9:7f:63:8a:
96:51:16:5d:7d:f6:1b:fa:b1:67:d1:53:a8:7e:d0:1e:cf:f9:
cc:bc:58:23:fe:c9:50:a9:5f:b9:ae:96:12:66:10:72:10:0d:
96:4f:1c:6f:f9:0d:dd:bd:6f:14:c1:5d:e6:d0:89:f1:1c:74:
a4:f3:0d:7d:16:a3:d9:5e:51:70:f7:fc:a4:7a:5c:08:4f:f1:
8c:f1:91:8b:c9:5a:e4:c0:3b:c1:f5:b1:df:d8:8e:7a:c3:bd:
b6:f1:0e:8a:8f:32:98:a0:f5:ec:d3:f1:cc:b9:64:d2:00:83:
5a:b8:cf:94:0a:f1:86:c8:45:5b:2f:b8:e5:94:ad:29:71:49:
cd:80:3d:43:24:28:73:c2:0d:fb:a7:fe:b9:77:83:91:1d:92:
d3:a2:c2:42:34:0b:3d:4a:60:1f:d5:cc:46:8d:a6:3c:45:33:
ee:70:1c:45:ec:2b:fd:77:58:eb:cb:d2:ba:18:96:5a:bd:11:
bc:aa:20:16:9d:e8:1b:81:d8:dd:5e:7b:2f:76:47:55:98:f1:
b3:d5:d0:51:00:29:80:83:85:6a:e7:6c:3f:8c:fd:2c:c1:80:
c5:78:31:3f:cd:3f:ca:76:dc:ce:23:ea:fe:4f:33:91:b4:e3:
eb:64:ed:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 22:25:29 2025 by rpki-client