Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
File: QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft (raw, json)
Hash identifier: MktuL3kvMkgg7Kv0yDP8meZpo7XylSbJ/xuP0u9KiN0=
Subject key identifier: 96:2F:38:2E:26:91:14:AE:41:39:79:0D:7F:C9:23:60:58:14:49:AF
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 019A2778E67FAE75F58D152A09CCBB5173B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
Manifest number: 168C
Signing time: Mon 27 Oct 2025 21:00:26 +0000
Manifest this update: Mon 27 Oct 2025 21:00:26 +0000
Manifest next update: Tue 28 Oct 2025 21:00:26 +0000
Files and hashes: 1: HM44YU_keUzYw0-k8-_A-z_iUEg.roa (hash: SXS4UlPdGWp6+QLYLhTDdcpIKj693zGOOUmfQDbJfCI=)
2: QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl (hash: iDWNnF8G5NYTjwsVnS5bf26SI0A/+5IFd85zbdT5nLQ=)
3: kh936l2vxgccX_jvVlzYGLxpdnk.roa (hash: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=)
4: yR56vcKwFBMaxDiG7yY2cvJ4n0Q.roa (hash: iQ1t4A53B7El/PSKuRvXWWegJvuT/fcPU9ZHNFZ4LFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:78:e6:7f:ae:75:f5:8d:15:2a:09:cc:bb:51:73:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Oct 27 21:00:26 2025 GMT
Not After : Oct 28 21:00:26 2025 GMT
Subject: CN=962f382e269114ae4139790d7fc92360581449af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:ce:8d:fc:34:f7:e4:88:de:f1:93:22:ed:
75:02:f9:b4:03:ad:0c:f6:c1:24:64:b1:84:c6:02:
26:9c:e6:40:23:59:2e:8b:5b:71:28:bd:e8:38:ff:
c3:06:a1:b0:43:a5:57:fa:80:27:dc:3a:e1:8b:66:
49:1f:49:15:3d:d7:ba:91:e1:f1:85:54:3d:09:b1:
e8:c7:d8:ac:72:2e:2b:13:39:5c:90:2e:e7:32:06:
84:51:07:48:34:04:5b:b6:34:26:81:36:1e:6f:ff:
65:1a:6e:37:30:2f:e9:88:bc:3d:df:86:63:9d:c9:
72:b0:fe:0a:03:a9:50:87:82:a6:c1:0d:ea:84:6f:
73:6c:f3:bf:56:1c:42:a6:c0:24:da:57:8a:67:b3:
5b:ec:7a:1c:62:1b:d2:9e:8d:62:77:d2:f0:a9:2f:
ea:f8:bb:72:8c:24:f3:53:97:fc:a5:c8:34:96:44:
bd:82:2b:6a:9c:d7:b6:fc:5f:a0:b4:5a:6e:e6:df:
9a:b8:28:7f:cf:12:3b:51:6c:aa:bc:05:3b:ac:8e:
75:55:49:d8:95:1e:44:df:a9:7f:85:47:55:ef:d3:
cf:21:90:3a:ca:7a:e7:46:20:42:97:f0:08:f4:11:
58:53:c6:7c:6c:8f:12:ea:34:09:6b:59:08:ba:1c:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2F:38:2E:26:91:14:AE:41:39:79:0D:7F:C9:23:60:58:14:49:AF
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:93:bc:55:fa:cd:94:6c:b7:e2:6e:50:28:c5:ab:f6:9a:
06:cd:96:4b:5c:24:17:38:13:68:70:55:5c:41:53:ba:c2:9d:
6f:ca:a6:6b:bf:5e:f7:98:5f:5d:47:9c:9b:ba:b0:0c:67:3b:
93:81:b5:ed:70:42:88:95:2d:89:26:cb:ed:37:c8:50:d7:80:
39:8a:82:1b:95:02:17:09:b3:7a:f6:ab:1b:91:51:11:b8:5b:
24:f5:12:c7:c3:26:68:db:45:0c:18:93:e8:29:4d:ff:8e:5b:
38:dd:2e:b4:92:67:dc:dd:c0:9b:69:67:09:d0:08:d9:e8:48:
84:38:33:ca:b8:01:d9:20:ba:75:c3:d0:22:c6:66:b7:ea:94:
b6:87:5b:89:f2:dd:9f:90:04:45:73:c9:86:70:59:e6:a4:14:
14:15:02:e9:59:26:40:9d:bd:7c:c2:64:8f:21:35:94:da:60:
83:cd:e7:ee:65:2a:fb:88:8e:4a:0e:27:77:4a:aa:2b:48:fa:
7c:b3:4a:80:96:5d:b7:db:c2:2e:fa:d2:7d:cc:f1:5f:fc:ec:
cb:25:66:82:01:44:92:ba:1c:0f:dd:69:7d:77:19:0a:62:07:
ca:90:ca:87:f9:d4:2d:57:52:b5:c7:8b:e5:46:22:b1:a2:04:
b6:a2:c2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:35:20 2025 by rpki-client