Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
File: QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft (raw, json)
Hash identifier: Brw0t5snkqjZejDvP5MZW9FuV+bIw7UeR4nJKFIcJQY=
Subject key identifier: 5D:9C:03:A7:A0:B2:5D:22:3E:CF:6A:2D:40:29:61:38:28:AB:7D:C2
Authority key identifier: 42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
Certificate issuer: /CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Certificate serial: 019A01483C2F76F8628356A97A42B17A24E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 11:01:42 +0000
Manifest this update: Mon 20 Oct 2025 11:01:42 +0000
Manifest next update: Tue 21 Oct 2025 11:01:42 +0000
Files and hashes: 1: QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl (hash: zArHbmxjI2D6f5F9paSe/7X5UhBYayv6NukfsnSG/7k=)
2: rjvci4lVGCr57ADE7C3M4Mib4mk.roa (hash: yRKI8JSBUthmJegOInkpPYFyfDjZ1t7SRsTNJhUbFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:3c:2f:76:f8:62:83:56:a9:7a:42:b1:7a:24:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421b4cd40bae47d48f51c9cccc607cce57ce00f7
Validity
Not Before: Oct 20 11:01:42 2025 GMT
Not After : Oct 21 11:01:42 2025 GMT
Subject: CN=5d9c03a7a0b25d223ecf6a2d4029613828ab7dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:bd:6b:dc:32:cb:69:47:41:63:ef:26:65:
75:c1:23:e6:85:aa:69:78:b5:42:04:87:02:b8:9c:
ee:9c:6e:28:eb:95:cb:97:8c:eb:75:26:2d:f1:4e:
9b:7e:c5:3b:5b:f9:43:cb:ff:18:e5:6d:cc:10:08:
76:e3:13:d5:f7:37:05:b6:ec:1b:64:35:03:21:fb:
0e:a9:7f:71:3d:0d:34:b5:c9:e4:6b:ab:6b:e9:cc:
46:b2:22:7b:ce:db:a5:62:a5:7f:f2:22:c6:2a:e7:
eb:77:c1:02:9e:ac:ed:da:56:a3:f3:86:ac:76:cf:
4e:15:00:9d:74:3d:e4:07:40:6e:d0:43:34:23:de:
f4:b2:5b:ea:56:62:f7:d5:f8:35:ad:ba:c7:e3:8d:
b8:2d:d3:ff:52:d0:0c:0a:98:aa:a2:c8:e8:41:56:
44:d3:68:89:01:78:9d:8f:e2:b9:99:70:3c:f7:17:
7c:fb:e1:41:77:f5:64:c2:04:ab:e4:ef:29:86:ed:
16:2b:b6:0e:6f:db:0e:f3:60:03:d3:0d:05:f5:c0:
91:ae:c5:1f:de:75:f4:1c:32:a1:f6:c8:a1:5b:20:
10:69:20:d6:dc:4b:7c:6d:63:c5:5a:cb:1d:28:e9:
83:5c:3a:e6:45:ea:72:b9:ed:3a:fe:28:76:3a:14:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9C:03:A7:A0:B2:5D:22:3E:CF:6A:2D:40:29:61:38:28:AB:7D:C2
X509v3 Authority Key Identifier:
keyid:42:1B:4C:D4:0B:AE:47:D4:8F:51:C9:CC:CC:60:7C:CE:57:CE:00:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhtM1AuuR9SPUcnMzGB8zlfOAPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/QhtM1AuuR9SPUcnMzGB8zlfOAPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ed:96:bc:0f:c2:25:1e:60:a1:8a:98:d9:7d:f6:c9:2d:68:
58:99:c7:c5:7e:da:c1:c8:72:24:9a:b7:21:a1:a9:66:ed:35:
bc:89:5a:01:ae:d1:bc:f3:58:cc:7a:19:66:92:8c:f6:a6:d7:
17:70:cc:84:8a:20:58:cd:01:45:6e:e3:b0:8b:70:94:bc:f3:
2a:89:6d:24:0b:2f:34:10:61:8b:29:f0:9a:cf:2e:d9:8f:fc:
39:5d:75:ff:f1:dc:42:59:d4:75:68:ef:6a:f9:4e:f4:b2:c6:
8e:42:4b:42:c3:f1:b2:c5:3c:87:c9:90:6e:e8:68:c6:20:94:
3e:55:7c:cf:50:9f:74:3f:f4:43:2d:b1:f3:15:da:2a:7b:b3:
2a:d5:fc:24:95:10:a9:6a:03:90:15:18:52:4e:c0:37:98:c6:
50:6c:8a:28:89:21:04:57:36:40:a7:39:89:d8:c4:1d:fd:30:
e0:71:6f:b0:48:07:14:6e:fb:33:4c:f1:10:d0:1c:49:c3:e0:
6a:a6:9b:94:fb:13:17:b9:25:88:b2:79:a6:4e:76:59:51:db:
64:59:6c:d9:2a:08:3e:c8:d0:b2:07:3b:56:f7:23:eb:d3:3f:
21:53:8c:7c:c4:2e:c5:75:b5:df:7c:3a:1d:31:75:60:5e:6c:
64:23:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:30 2025 by rpki-client