Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: bOuFSJ0Q5DknfMQ6zvfdMOlX7rpl6EqSggF+slDdYeo=
Subject key identifier: C4:59:E5:1C:4C:B8:22:1F:61:A2:7A:B7:68:FF:27:9C:1B:8A:41:EC
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019A21E4672C75D81A8EF61BAD5071795004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 16F5
Signing time: Sun 26 Oct 2025 19:00:07 +0000
Manifest this update: Sun 26 Oct 2025 19:00:07 +0000
Manifest next update: Mon 27 Oct 2025 19:00:07 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: A3uhYoEfIA9UiABefoIcyuLsBv5XuQzRJj3HLyNfKmU=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:67:2c:75:d8:1a:8e:f6:1b:ad:50:71:79:50:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Oct 26 19:00:07 2025 GMT
Not After : Oct 27 19:00:07 2025 GMT
Subject: CN=c459e51c4cb8221f61a27ab768ff279c1b8a41ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:98:28:00:b1:eb:00:2e:e2:3b:39:c5:fe:
77:81:bd:04:48:00:45:15:0c:52:45:50:b4:4b:4c:
23:57:c7:b5:65:4b:f8:fb:fc:ab:55:4d:2c:fb:95:
0e:ba:30:ad:43:92:31:2b:f9:46:d8:5a:98:57:b9:
42:c7:92:60:b2:b4:9d:e3:dc:09:91:60:3b:5c:76:
21:3c:dc:95:33:5b:75:f3:0c:2f:ed:58:ad:25:08:
b6:0a:c6:bb:30:ef:0c:47:bb:ab:6b:6d:40:44:cd:
96:19:90:aa:43:a8:78:75:a3:f5:26:ee:3c:cd:3d:
4c:7b:55:d9:c6:ff:e6:cc:41:7f:48:4a:f0:5c:4d:
93:4e:73:30:c7:f2:ca:cc:1b:91:f1:06:81:0d:4c:
bb:d5:1c:1a:f4:93:4a:69:9d:fb:65:20:fb:90:40:
1b:fb:17:37:86:26:ef:53:1f:32:22:d1:b7:c5:5f:
50:cb:b9:14:ad:46:ad:95:6b:16:be:98:0c:6c:ea:
51:61:b6:a8:32:78:ac:06:69:88:5e:27:da:ce:2f:
4c:d8:ff:7a:2f:8a:42:f6:68:a1:4b:eb:2f:eb:bb:
1d:62:ae:55:41:68:24:70:ef:e8:15:95:35:91:ed:
f8:5d:fc:43:b2:7a:c1:5c:28:39:3e:8d:f3:44:d4:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:E5:1C:4C:B8:22:1F:61:A2:7A:B7:68:FF:27:9C:1B:8A:41:EC
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:67:6d:d5:5f:ad:10:aa:b8:d9:4b:09:46:69:59:d9:ad:2d:
c3:12:a9:fb:7f:ea:ca:07:2a:10:a3:b5:9c:08:6d:6e:22:e3:
72:52:40:d2:c5:a9:86:2c:d4:e5:3c:f3:c6:68:ea:a3:91:be:
93:af:b7:8e:6b:0f:08:db:fd:fa:03:fa:0d:8f:38:c0:9b:0f:
b9:fb:0e:86:3e:64:4a:c6:c9:24:8e:9f:67:0d:72:58:44:54:
dd:e1:57:51:41:c1:2f:26:fc:f3:0d:07:19:5d:9b:67:fa:6a:
4e:12:16:f6:ca:2a:76:b1:6d:6d:20:41:c0:b8:41:b0:d4:6d:
22:b1:11:7f:10:15:d4:1e:3a:79:61:cb:dc:c4:20:60:14:a8:
ec:e4:3c:75:9d:36:bb:33:9e:08:0d:9d:1e:12:ab:28:75:a0:
62:8f:30:03:21:d8:bb:68:51:07:de:67:51:a4:38:58:5f:9b:
fb:13:e3:fb:f0:dc:33:4b:32:01:fc:b0:24:41:63:73:7b:fb:
45:f5:a6:fb:bc:e4:10:cb:e7:46:3d:bb:b0:28:e1:7a:00:11:
6e:1a:06:d3:54:37:ff:cb:14:1e:6b:8d:a3:59:17:f8:4a:9d:
64:e8:08:95:f2:e7:69:f9:cc:13:c3:a7:a2:6d:54:b4:43:15:
8d:3c:4c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:26 2025 by rpki-client