Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: MxUrbBjDhwpCGCefusBwZ0shb8d5oTzZbJdRZHH3ozg=
Subject key identifier: D9:35:1C:E9:FE:A2:F5:FD:98:35:F7:81:7B:D9:49:8A:4C:CD:D7:02
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 019A0B5E15773F59398507F7AD174B8A0E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 10:01:46 +0000
Manifest this update: Wed 22 Oct 2025 10:01:46 +0000
Manifest next update: Thu 23 Oct 2025 10:01:46 +0000
Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=)
2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: xeGS7K1ZN06EADocoVDoW1yupzeIaTStYaP/n1oPsQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:15:77:3f:59:39:85:07:f7:ad:17:4b:8a:0e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Oct 22 10:01:46 2025 GMT
Not After : Oct 23 10:01:46 2025 GMT
Subject: CN=d9351ce9fea2f5fd9835f7817bd9498a4ccdd702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:e2:24:99:b3:b0:50:be:e6:6b:ca:e5:a6:
a9:62:da:5d:5a:22:e4:72:54:58:dc:64:8c:c0:07:
9f:ac:04:99:55:67:b8:a5:02:0d:99:0f:96:a5:dc:
03:99:c7:33:75:a9:f5:7a:42:c0:f9:12:21:5f:f5:
18:a6:b1:52:75:0a:90:d8:6d:87:f9:d2:36:85:2c:
04:c4:f1:1c:4c:14:19:09:5e:97:75:51:69:64:cd:
6c:d1:77:ef:a9:39:3d:d7:7a:00:20:22:b6:93:2d:
4a:40:04:32:e1:2b:10:a6:5b:59:87:96:01:08:54:
e2:52:62:9d:ac:7d:f9:49:dd:b0:c2:88:26:38:04:
27:fc:57:45:e2:ca:5d:29:44:51:cd:54:2e:0f:fe:
2a:4c:22:dd:57:aa:0d:b6:95:24:2a:68:16:33:24:
11:46:cf:9a:b0:64:7e:48:b8:85:89:ee:8c:a9:f4:
53:cc:3f:fd:e6:83:2a:68:84:38:82:b6:c8:12:73:
2e:b9:38:30:29:c8:df:fb:f0:dd:b9:04:d3:09:7b:
36:8d:24:5a:e9:53:16:73:93:47:b7:d1:70:83:4e:
6f:b9:d2:92:18:61:06:52:0c:24:d2:94:0c:40:84:
d1:e5:68:98:ed:bc:7d:8e:ad:cf:ce:b0:72:88:a5:
f2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:35:1C:E9:FE:A2:F5:FD:98:35:F7:81:7B:D9:49:8A:4C:CD:D7:02
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:25:21:fc:81:4a:66:f2:64:eb:fa:27:81:e0:ca:9d:ef:6a:
5a:4e:f1:75:ab:36:8a:81:e3:36:de:14:ba:51:7e:97:1e:a0:
10:ab:18:90:22:d0:0f:21:2b:d0:10:3a:06:ed:0f:15:22:92:
fc:e0:f9:3d:28:e6:6e:93:02:e4:98:28:78:82:02:08:43:89:
a2:d0:7c:af:69:c9:d3:99:5e:3a:1c:43:1f:2f:f4:2a:77:7d:
1b:e8:a0:d3:f1:fb:e4:9f:10:d6:42:52:b3:bc:f5:f8:80:c9:
e6:3a:62:40:c5:86:97:1d:17:dc:8b:dd:38:5b:e0:37:3b:61:
aa:7c:e1:ab:71:d0:14:af:26:97:70:aa:53:ba:21:38:3c:bd:
03:13:91:75:42:71:f1:9b:94:e9:ee:eb:51:90:92:a2:e8:6d:
2e:8a:b9:fc:79:c5:bc:1d:c0:1e:8c:38:56:9b:3e:91:74:58:
f5:96:e7:d4:e1:22:db:d5:ec:11:7e:97:ae:08:b0:28:0e:83:
f3:3a:f8:db:ea:ad:c4:65:2b:2f:c4:d4:7f:df:44:fd:6f:f3:
9d:2d:93:d2:54:bb:79:e1:00:06:3c:a9:64:8c:79:c4:1c:4c:
61:3a:1f:b6:a7:f7:c2:cd:09:45:06:d1:28:28:b7:ee:27:2b:
9e:8a:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:52:10 2025 by rpki-client