Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: vpxKruPXiyfP/PnQorruuLkfI5ejt0jz1YWx2nA3FE0=
Subject key identifier: 5C:1E:FD:F7:E6:F3:FD:DF:0B:CD:6F:93:8B:CA:78:08:AE:7A:37:AC
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 019A2289D2F8E22316E48F183BE2CE2960B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 22:00:48 +0000
Manifest this update: Sun 26 Oct 2025 22:00:48 +0000
Manifest next update: Mon 27 Oct 2025 22:00:48 +0000
Files and hashes: 1: GdTMSBHmMXNMZFzwt5_uvXtdYsM.roa (hash: /RIp+uP4i74bIeQs1XWyli9bmZacqyl6MLZjDPeo5VM=)
2: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: 0w0TF/W/AJIlplC7+73FqUZT/eugyQ9tpbSf6ogbjYs=)
3: xBlZNvgMRnCf6UrKRvQ5pkUd7xU.roa (hash: i1uwfhxsD9mnwkgjUW+Sjt1kQC/b/5iVv+3Mpx4LXks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:d2:f8:e2:23:16:e4:8f:18:3b:e2:ce:29:60:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Oct 26 22:00:48 2025 GMT
Not After : Oct 27 22:00:48 2025 GMT
Subject: CN=5c1efdf7e6f3fddf0bcd6f938bca7808ae7a37ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:a3:0c:b5:83:72:60:2a:16:54:75:66:38:
1f:8f:e6:4c:56:32:14:8c:a7:25:6f:cf:40:fa:1b:
52:01:72:96:ba:6b:6a:e1:a9:fa:16:9f:d5:5e:ac:
c5:3f:b7:48:f0:ea:25:2b:35:fd:88:fc:dc:20:3c:
2b:31:8c:90:19:03:95:5c:8e:96:12:92:32:3f:e5:
83:6e:46:f1:45:bc:ba:8e:ab:55:65:59:6b:46:8f:
4c:26:05:a1:fc:45:00:86:af:c0:9f:63:d8:f8:b5:
40:57:4a:61:01:84:c2:18:c9:0e:4b:0c:69:b6:1a:
8f:8e:33:c3:96:28:3c:da:c2:4f:1b:d4:b8:72:7b:
5b:5b:73:2e:14:94:2c:11:56:23:15:ad:ee:c8:97:
3b:49:17:1e:74:5f:11:21:2f:ee:db:49:ca:46:1b:
af:74:8b:4e:bb:a6:74:e4:ee:47:bc:96:f5:c1:b4:
85:4a:eb:6b:48:fe:ea:96:cc:cf:dc:97:51:08:5b:
40:82:fa:8a:09:6e:08:a5:dd:77:b5:cb:b7:ce:ed:
21:da:0a:ce:57:ef:32:f8:37:d0:83:37:be:f1:93:
95:2e:62:d4:a0:91:e9:ad:9c:cc:5c:ca:d2:2f:ec:
35:6f:f7:ea:39:0e:9e:fd:a0:b0:3b:c9:1d:0e:8a:
93:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:FD:F7:E6:F3:FD:DF:0B:CD:6F:93:8B:CA:78:08:AE:7A:37:AC
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:b2:59:31:1a:16:5b:d4:99:03:bb:22:52:54:eb:78:8e:dc:
b2:4f:42:a6:02:6a:2f:7f:1e:ca:ce:79:1f:26:90:e6:4d:59:
ee:bc:a8:a3:49:60:27:e3:82:2a:b6:80:59:55:81:46:f0:cc:
73:11:37:7f:55:20:42:3b:5c:f0:99:5c:9d:03:ac:86:0c:16:
db:b6:35:1a:c6:e9:f4:58:9c:fb:0f:38:9e:ec:77:16:91:c5:
cd:ee:51:c1:91:56:b7:c1:8a:4f:92:9b:3b:a6:23:58:f2:c0:
43:8e:2e:17:a9:de:92:42:a8:86:2d:f9:e4:3f:99:2b:ce:cc:
c1:48:61:f9:19:e1:4a:87:0e:83:1f:38:3d:66:72:c8:cf:5f:
36:99:cd:df:88:cf:3c:0f:bb:1a:9d:35:4d:9f:b2:65:42:27:
61:86:96:2b:40:dd:c7:b9:49:01:3c:53:95:82:3c:38:b2:26:
89:1f:ac:f4:35:9d:cc:19:05:82:05:15:b1:fd:69:71:1f:a9:
e7:21:43:d2:37:2f:1c:ec:93:87:e0:a7:c0:fd:1c:7e:79:e4:
53:17:dc:e9:fc:e8:61:8b:d2:19:25:86:ab:34:b7:24:d4:05:
ac:92:50:51:7f:be:e4:8f:9a:b9:8f:54:e6:96:3a:66:bb:e0:
0e:e4:de:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:03 2025 by rpki-client