Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: 4P7p8ocCxUNKaHLo+axrA7I4aJPhcHiGmLO8JydNXOw=
Subject key identifier: 4C:C3:4A:16:F5:D0:D9:CB:B2:CC:B7:78:4E:DA:14:2B:23:5A:89:E5
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 019A1BE2F29E1AC24337217F5C3DBC64F5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 16FC
Signing time: Sat 25 Oct 2025 15:00:49 +0000
Manifest this update: Sat 25 Oct 2025 15:00:49 +0000
Manifest next update: Sun 26 Oct 2025 15:00:49 +0000
Files and hashes: 1: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: GLcAYB4+5sy/POny7xZp+agMz2e5+cAUcd8Agxkki9E=)
2: UauqkNEmM03HfyR0DfZ-u4VKpi4.roa (hash: awMAcPwR6G+MfeZBXCCLJ68VGxx4mPcomrMOc4HQztA=)
3: XuDenjm8kUtBAuV4QGpzOH7mGc4.roa (hash: JNV/wOADSaN3R96qV0GAYEvW10iJH7xuBlcwSDA4/FE=)
4: c1UFEngK3GGY1urY5KGBx69byP4.roa (hash: +n2tU72CIBGho6rrhlHMLTcRKx6Op/7dsiuNf5HzdOM=)
5: oi0U9f8KU3xL5hcxj-l_j_oxaQE.roa (hash: VaBV5SBKPM+Ny0Aym3FdNVG9ABI2dtE3XxpwOFbyKqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:f2:9e:1a:c2:43:37:21:7f:5c:3d:bc:64:f5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Oct 25 15:00:49 2025 GMT
Not After : Oct 26 15:00:49 2025 GMT
Subject: CN=4cc34a16f5d0d9cbb2ccb7784eda142b235a89e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:25:c9:9e:8c:ae:c9:41:a2:39:6b:2f:f4:
e4:0d:a7:78:6b:cc:bb:c8:02:00:7c:c9:24:6a:23:
ec:1b:3f:00:fc:e8:7b:50:65:76:c2:b4:91:f2:f9:
66:e7:91:0c:23:d7:26:c5:1c:62:a7:9b:90:c4:33:
57:f5:43:c2:b3:68:8c:61:af:e2:62:07:35:ff:bd:
ce:9f:d2:f8:21:97:b4:3d:37:f8:73:17:70:46:11:
a0:19:83:26:da:bf:58:86:a7:3c:81:ec:7e:c7:86:
d3:8c:22:6f:9c:e0:16:63:17:6b:d5:3b:25:78:d1:
c0:1d:b4:59:17:3b:c4:bc:e0:41:3a:4d:ef:92:ba:
7c:32:23:d4:c5:cf:b7:42:52:10:06:d2:92:e4:71:
ec:d7:e3:d9:7b:da:c7:85:95:84:04:48:4c:3c:4d:
13:29:c2:e3:42:7e:83:8a:fa:9d:b5:15:a4:92:0b:
57:3e:0d:34:ee:83:75:83:4e:a1:b2:eb:3e:b8:1f:
5b:f5:74:98:a9:ce:5c:83:de:75:9b:94:60:6e:3a:
ab:47:92:50:61:89:0b:6a:d7:44:bd:60:34:0c:8e:
38:2c:76:0b:4c:d8:bc:17:db:61:b4:e0:c5:fa:35:
c0:e8:e5:b4:3d:0d:05:f4:69:74:41:3d:57:40:9b:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C3:4A:16:F5:D0:D9:CB:B2:CC:B7:78:4E:DA:14:2B:23:5A:89:E5
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dc:d2:c4:b2:4f:48:44:83:d8:f5:06:55:a1:f3:10:0b:52:
c5:b3:73:bb:38:5b:ed:76:7e:bd:3c:fd:b4:7e:2e:38:6f:81:
a1:15:8a:4c:6d:57:33:49:f2:75:65:91:60:42:1e:db:df:a9:
47:a7:20:a5:1d:80:ce:08:fd:f1:20:d2:87:26:0b:d5:fd:25:
43:d2:7a:a4:b4:69:ee:51:dc:d1:23:31:52:4a:9e:e5:41:9d:
82:af:c5:3a:eb:9e:ad:d0:c5:0f:d2:62:bc:d8:dc:6e:af:3f:
52:02:b1:f2:26:3f:c8:f0:30:e6:26:a4:02:70:5b:9f:c0:cc:
01:21:4b:1b:2c:96:3c:d2:91:af:ca:c3:c6:5d:4f:dc:0b:e3:
30:ca:87:d3:ce:ec:f7:16:9a:c8:3c:e7:5e:1f:ae:fe:26:74:
a0:ac:61:09:91:bd:eb:e7:06:5e:26:07:10:3e:1d:cf:c4:77:
1e:9f:37:89:8e:e9:6e:fb:ba:2a:49:03:bb:e2:b8:49:08:e8:
db:69:ad:81:ec:1e:1d:19:31:14:ff:a5:83:36:dd:40:c7:f4:
b3:79:b1:48:e6:2c:ac:5a:b1:d1:95:52:cf:01:9d:14:61:2b:
db:af:81:b6:82:45:3d:4d:07:c9:92:e3:b5:16:b9:2b:64:e7:
42:7f:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:03:09 2025 by rpki-client