Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: la+xEAZKOT7azJEKa2SMOV5halO+FJHgg31rExVGPRk=
Subject key identifier: 6D:97:BE:75:5B:B3:10:AA:40:EA:03:FF:72:EB:18:91:48:CF:3D:57
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 019A209BCEB789EFAA1707B4B135D51CAD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 05E9
Signing time: Sun 26 Oct 2025 13:01:13 +0000
Manifest this update: Sun 26 Oct 2025 13:01:13 +0000
Manifest next update: Mon 27 Oct 2025 13:01:13 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: mdCdZvchYNu38Bu1xshR2J894ZQWyjPzQGTgs0CfQzs=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:ce:b7:89:ef:aa:17:07:b4:b1:35:d5:1c:ad:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Oct 26 13:01:13 2025 GMT
Not After : Oct 27 13:01:13 2025 GMT
Subject: CN=6d97be755bb310aa40ea03ff72eb189148cf3d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:09:64:29:96:36:6d:e7:04:0f:93:1a:57:
f0:96:49:6a:82:b2:a5:5a:db:36:f6:dd:51:bb:75:
ab:7e:39:c3:5a:65:e6:cc:ce:37:4a:49:c6:29:e2:
f1:7b:4a:ef:ca:54:06:0f:dc:ad:f6:85:42:e2:5a:
b3:ac:e4:18:1c:5f:07:24:6a:6f:4b:4a:18:e0:4f:
a3:05:28:88:21:f1:42:7c:1d:c0:b9:7f:0a:87:9e:
5c:5f:08:18:a2:db:5a:21:8a:25:e4:a9:61:be:53:
4b:d1:e7:7a:15:18:58:ff:04:88:bd:66:36:bc:51:
d1:59:d4:82:90:cd:2c:3a:50:b6:14:39:1f:2b:7c:
57:00:27:97:3f:d1:ed:e3:ca:f9:7f:a6:09:25:fd:
ac:11:50:c9:38:a8:89:37:72:bc:34:1b:48:97:81:
7a:71:a6:08:82:d6:d9:38:28:84:7d:6c:c6:e8:e8:
d2:3e:83:ff:68:7f:03:a8:71:94:55:b2:9e:25:e9:
f9:45:4d:62:22:8f:e5:c2:68:84:d6:a7:15:1d:24:
f4:4c:00:bb:f2:77:c6:bf:92:38:25:99:88:bb:df:
f2:2d:8c:c4:f5:6c:f5:48:51:07:75:d4:10:ef:ff:
d5:2f:d9:dd:5e:89:ad:fe:18:ec:80:e6:da:2c:97:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:97:BE:75:5B:B3:10:AA:40:EA:03:FF:72:EB:18:91:48:CF:3D:57
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:50:9a:93:ec:a2:c8:3e:49:b0:69:5d:e3:b0:eb:57:bc:55:
0e:d4:67:ef:64:9d:83:da:9a:37:ab:fb:33:50:31:e0:b4:e0:
b0:3f:62:43:f5:d7:a7:ed:05:e1:50:cb:4a:53:81:98:b3:9d:
a4:d2:99:a5:f7:7f:ac:09:84:8f:82:55:9e:bd:0d:b5:54:bb:
69:10:c5:9d:a2:e4:6f:a9:6f:9e:2a:aa:5f:6a:f3:64:72:7e:
92:6b:6a:ff:d6:0b:dd:5a:21:d8:16:34:3c:56:c2:8d:6c:e9:
63:5b:09:df:63:1d:e3:e9:f9:fa:36:52:4a:80:41:67:e0:b1:
2e:aa:70:c7:41:de:87:79:0a:d4:54:40:dd:e5:a5:86:a3:50:
bd:99:7a:eb:ac:f4:e8:a7:0e:60:62:35:03:88:6b:bc:0a:f5:
07:0d:6b:f3:00:9b:e0:38:28:e2:83:72:24:65:5d:99:e7:eb:
74:51:36:6e:4e:4c:7d:9b:02:6e:b1:68:bc:b7:e9:04:2d:79:
96:64:c5:22:fb:d2:19:c4:a6:e8:77:66:db:40:48:bd:6f:01:
b3:cb:ac:61:3c:f1:b9:6d:3b:e1:8c:4f:5f:2b:58:8a:e8:71:
ec:d8:ef:9d:4b:a6:d4:38:77:03:66:92:7b:c1:26:ab:03:f1:
c0:bf:4f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:39:06 2025 by rpki-client