Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: RUv9A8L6tOK4c/5bKgnK+B+UZPdDTYXy2u3LQUEx4UQ=
Subject key identifier: E8:5B:0C:49:29:0E:4D:E6:90:1C:F5:4F:24:8D:92:9A:49:43:5A:3A
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019A24E56A3D484157E9E55342D10177311B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 09:00:05 +0000
Manifest this update: Mon 27 Oct 2025 09:00:05 +0000
Manifest next update: Tue 28 Oct 2025 09:00:05 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: lD9QZ3+dEMvxVqG0pxrSBLWPcXxqN9P5fgnWszuKwJ8=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:6a:3d:48:41:57:e9:e5:53:42:d1:01:77:31:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Oct 27 09:00:05 2025 GMT
Not After : Oct 28 09:00:05 2025 GMT
Subject: CN=e85b0c49290e4de6901cf54f248d929a49435a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:d6:3e:f8:76:31:b3:7b:3e:e4:25:ed:12:
19:91:2b:09:99:c7:5a:f7:60:78:f5:71:91:81:c3:
3d:97:fa:ea:9f:7a:47:e9:9f:2d:d2:37:c9:6d:7a:
65:ef:8a:21:22:12:7e:06:c4:d5:c3:1b:b7:93:03:
44:df:73:d5:54:6a:59:7a:54:7a:24:a6:2e:80:6c:
98:31:92:73:33:00:87:31:c6:12:87:b6:72:c5:f3:
2e:1d:99:44:89:a1:27:51:6e:d7:0b:1e:4c:a4:8b:
04:65:c8:5f:52:11:04:46:38:9e:c1:0f:d9:7f:31:
e9:ee:af:19:c8:0d:0d:95:3e:15:db:f4:f4:38:75:
1f:5b:0f:35:14:16:ba:a6:9a:fc:da:21:b2:ab:83:
4f:e1:ec:13:a0:50:e2:28:1c:91:5e:e8:ec:fa:d1:
d0:13:db:8f:e1:e2:c3:6c:aa:88:88:65:12:c8:6f:
49:bf:b0:b9:22:f1:f1:f1:cc:1a:e9:35:7e:cb:46:
d0:99:da:a7:f3:06:50:db:65:d3:a4:7f:94:d0:de:
4a:14:11:77:55:09:72:34:88:3b:4a:15:cb:c9:01:
3f:e4:8f:f6:9d:6b:6d:ea:d1:49:fc:4e:80:46:24:
53:22:b9:f8:b6:7c:60:76:0b:16:60:84:8f:d0:53:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:0C:49:29:0E:4D:E6:90:1C:F5:4F:24:8D:92:9A:49:43:5A:3A
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f8:ff:88:b8:9f:34:2d:e0:5a:48:58:81:1d:18:dc:22:72:
41:3a:43:a5:83:eb:a4:73:c9:75:10:f6:0f:24:65:c1:8b:ff:
d9:1e:24:0c:0c:f5:c4:62:7e:c4:14:f5:73:7e:f6:56:bb:95:
8f:a2:b6:f7:a0:c5:41:30:7f:13:28:74:b9:5f:8f:56:7f:08:
e4:6b:28:4a:bd:b2:31:c1:00:e0:12:ae:8a:d5:5c:f9:1a:52:
ef:0a:58:f9:61:60:65:18:b1:45:ce:71:3f:4d:f3:54:22:06:
02:b0:1c:7e:c3:da:33:59:b8:1e:1f:f8:78:13:76:09:5b:89:
7d:0e:6d:dd:21:d4:42:48:fc:0f:0a:03:cc:69:df:34:4f:42:
45:8b:b5:3a:0e:59:b5:47:37:ca:03:ed:06:91:d5:2a:56:f7:
38:8d:dc:d3:1d:2d:99:b7:75:ab:34:03:2a:43:67:e0:5d:9b:
dc:32:c1:1c:d8:1b:b8:b8:98:55:35:27:5e:4b:5f:dd:c8:a5:
e9:24:7b:1d:c4:8a:fe:64:32:fd:f4:78:97:5a:bc:48:c1:d9:
1a:82:25:0d:80:de:02:82:8b:5b:fd:a9:91:df:ab:9e:6a:b6:
45:7c:d1:da:ca:29:c5:93:45:52:38:c8:03:e4:78:59:c8:3d:
cf:45:ff:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:00:04 2025 by rpki-client