Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: vFQ6AeXVQTuvkFv0Osc+C6Zz/7lDiAzZsouEGp91ciA=
Subject key identifier: 4B:5C:DE:E1:59:CE:A4:31:7C:54:A3:CC:C2:0F:98:C7:B0:D1:CB:C6
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 019A2109454429471ECF1D595B05C309DFDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0F88
Signing time: Sun 26 Oct 2025 15:00:46 +0000
Manifest this update: Sun 26 Oct 2025 15:00:46 +0000
Manifest next update: Mon 27 Oct 2025 15:00:46 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: sgsu8c+j6nkPynaDVm+nb8ioEPYsJqq5IQWbSTkCIeo=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:45:44:29:47:1e:cf:1d:59:5b:05:c3:09:df:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Oct 26 15:00:46 2025 GMT
Not After : Oct 27 15:00:46 2025 GMT
Subject: CN=4b5cdee159cea4317c54a3ccc20f98c7b0d1cbc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:dc:6f:a1:d6:3c:76:65:2f:e4:58:77:53:
52:bf:a4:b4:84:01:b1:18:6e:4f:98:7b:7e:72:e9:
e4:fc:fb:01:e0:d1:5d:0c:22:59:06:4e:1c:92:83:
da:87:e4:86:31:aa:ef:af:6e:25:f1:04:d4:0c:b3:
53:2f:db:34:78:ef:28:70:12:14:ba:a0:6e:54:11:
20:39:d9:1b:9f:49:54:e4:36:19:34:8b:81:f1:76:
f3:3b:6c:b8:ee:25:da:dc:6f:b9:0b:37:6b:df:c8:
31:0b:e1:2f:4e:4f:e3:0c:b6:06:f5:0f:a2:d0:70:
b6:4b:29:dc:cd:2a:9c:05:7e:d6:b3:16:ac:f8:47:
86:8a:f8:a1:b7:98:52:c5:18:aa:16:79:33:61:66:
c0:01:9d:f6:50:58:e5:29:36:08:cc:f5:e2:1a:7b:
97:e4:da:f2:3e:ff:a8:95:8c:39:8e:43:3e:07:5e:
ef:b9:29:15:d7:d4:22:f2:9d:65:44:54:c0:29:33:
26:92:a8:99:20:ea:ff:40:8d:47:5d:81:d2:92:69:
30:a9:a7:c4:9c:5b:b2:c1:e2:29:eb:99:c7:9b:f2:
04:17:d9:32:4d:b7:54:cf:9b:db:c4:ef:a2:8b:34:
55:f4:6f:1b:3f:31:3b:77:5a:4b:aa:92:2f:df:34:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:DE:E1:59:CE:A4:31:7C:54:A3:CC:C2:0F:98:C7:B0:D1:CB:C6
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ce:d4:87:29:08:ef:af:79:36:16:5a:79:96:e8:c0:ed:d8:
03:a6:dc:77:e5:50:77:84:78:ab:7d:5f:3a:cc:80:70:55:5a:
90:28:93:77:b1:76:30:d4:6f:71:9d:fd:ae:95:51:50:6c:25:
2a:03:53:52:36:a8:ca:61:c5:83:33:5f:a5:3e:ba:29:dd:2d:
fa:be:36:36:98:3e:f4:43:74:0d:5e:e4:8a:af:0e:2f:cd:4c:
3d:8a:2a:a5:11:2a:51:d7:e4:5a:50:e2:20:b1:a4:19:b6:f5:
e3:3d:a6:fd:23:a0:4e:dd:b8:3d:86:c7:04:43:0d:e0:c2:b7:
0b:1f:e4:d1:50:dd:0c:f2:f8:d5:de:01:c2:72:a6:7b:8d:b0:
ce:ab:4e:83:eb:c0:bf:f9:16:3b:bb:e5:a0:93:49:d8:ac:0c:
5e:01:6e:1d:6b:7c:77:bf:55:c7:85:ef:f6:dc:d6:3e:26:33:
9c:13:4e:73:c7:d0:ba:17:51:e6:f8:1b:32:26:06:14:5c:9c:
2d:ef:b1:f8:5d:aa:57:0c:44:78:95:c5:26:9a:51:b8:4b:71:
b0:23:d6:7a:17:95:cb:09:23:3e:19:06:9e:64:47:0c:19:16:
5c:50:84:5b:78:53:47:9d:9d:ed:4e:16:92:92:7c:ad:7c:61:
b1:49:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:34:24 2025 by rpki-client