Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: 06UmNG6NoadnppUizz1N2REkmStF/Y3q4TsIaPyW3Ow=
Subject key identifier: 81:F2:2D:BA:C7:98:3E:B1:78:1C:02:C8:C7:10:D8:C4:89:31:99:63
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 019A2AB1626D054B77D94D163AC9A9054B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 12:00:59 +0000
Manifest this update: Tue 28 Oct 2025 12:00:59 +0000
Manifest next update: Wed 29 Oct 2025 12:00:59 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: utmDwOZ1WPQTyipLOv3VUmQYhMqRrtFo7hJZ3VpqwbA=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:62:6d:05:4b:77:d9:4d:16:3a:c9:a9:05:4b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Oct 28 12:00:59 2025 GMT
Not After : Oct 29 12:00:59 2025 GMT
Subject: CN=81f22dbac7983eb1781c02c8c710d8c489319963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:04:b2:c6:7e:62:9c:54:f1:f4:9d:98:a7:
72:15:e0:38:86:bb:7b:a2:dd:6d:95:3c:a8:4f:8a:
e8:07:a7:c8:4e:35:38:5e:bc:3c:99:ef:2c:27:ba:
46:ef:4b:f6:b4:4c:d0:85:bd:7e:a3:0f:1b:3a:c3:
22:de:bd:4b:df:63:f3:89:aa:58:34:ab:d8:dd:de:
62:9d:50:36:5d:44:cc:2d:b1:99:0e:88:cf:5b:3c:
92:94:ae:4d:a7:6a:47:40:01:43:bd:85:5a:86:4b:
78:89:77:13:41:ec:e2:29:d0:79:6f:63:b0:08:a6:
fc:b1:62:bd:13:34:45:09:9c:22:e5:c7:39:e6:04:
63:56:44:49:95:df:2b:18:ab:b9:b2:0c:02:5c:24:
ef:a0:fd:aa:01:00:f2:8d:bc:aa:e8:30:18:a4:cf:
85:59:e9:e3:c5:54:66:71:f0:c1:3b:40:bd:2b:84:
32:83:3b:85:10:18:33:b4:56:de:32:f7:ab:96:af:
c3:9d:9a:3f:00:51:09:03:d1:62:cc:bd:a4:a7:74:
4b:6b:07:d0:5a:d7:e6:0c:f2:09:07:5c:88:96:7a:
a6:a8:c1:83:82:90:1c:92:91:65:9b:03:41:47:46:
9b:aa:61:24:a7:1d:00:78:47:7b:36:d6:50:74:d2:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F2:2D:BA:C7:98:3E:B1:78:1C:02:C8:C7:10:D8:C4:89:31:99:63
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:ef:c1:e8:52:f1:19:26:8c:6c:68:48:a3:15:ee:d3:80:
3c:fd:6b:dd:04:d2:6c:88:86:6a:4c:47:0b:ef:24:15:e8:7d:
04:63:5c:c4:5b:55:99:95:09:46:56:dc:ec:71:a8:a4:de:c0:
f7:e2:98:81:57:af:5b:6a:70:29:e6:4d:c6:a5:93:c7:03:be:
c7:44:68:91:a0:1e:b9:5c:2a:ed:ab:ac:12:fc:e6:0b:1f:a9:
2e:6b:d3:a2:59:73:ca:f7:2d:53:96:37:18:c4:d7:45:96:cf:
89:bd:f5:d8:84:d1:66:ba:99:3b:75:61:f7:8f:57:ff:73:79:
85:35:26:54:e0:8d:b1:38:36:8f:23:1d:b5:75:f9:13:22:cc:
55:57:fd:70:c5:99:a5:08:d2:0c:19:37:0f:c3:85:cd:a2:08:
56:65:dd:b4:c6:75:e1:c9:71:d8:46:e2:6a:0b:d4:6e:4c:4a:
85:46:88:85:89:df:23:39:04:1d:1c:4b:b8:1d:34:ff:ca:ac:
ce:b8:b9:fd:5c:0e:19:11:78:f0:6a:5c:8e:a7:74:5e:83:02:
11:6a:44:da:89:7c:ef:3c:4c:f3:5e:e1:6d:4b:b8:9c:ed:e7:
37:87:4e:15:38:04:fc:7e:55:15:98:ec:64:05:cf:23:f1:67:
b8:e5:1d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:20:18 2025 by rpki-client