Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: biDBDVW3RTNs7QZJaNnru2uyU2W1IsVWNuI0YQZ1wqU=
Subject key identifier: 9B:D9:C2:7B:B9:CF:35:EE:91:5E:E8:CA:FA:54:4B:33:B8:F7:92:11
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 019A2B1F2026297CDE76A4FE4C21E7C2F214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 14:00:51 +0000
Manifest this update: Tue 28 Oct 2025 14:00:51 +0000
Manifest next update: Wed 29 Oct 2025 14:00:51 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: 2oG+S8yfVQ36QimLLCS2TR5y5C1xSTotHCZ6BY2K+So=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1f:20:26:29:7c:de:76:a4:fe:4c:21:e7:c2:f2:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Oct 28 14:00:51 2025 GMT
Not After : Oct 29 14:00:51 2025 GMT
Subject: CN=9bd9c27bb9cf35ee915ee8cafa544b33b8f79211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:63:b9:e2:eb:be:b1:a5:39:17:58:b3:5b:
66:20:f1:5e:44:c4:f2:c5:77:79:6c:e6:8a:60:95:
bc:6c:80:f1:b6:bc:80:6f:d8:c0:b6:b9:36:3b:14:
1e:94:80:29:bb:3d:81:ef:67:6a:10:21:92:a1:5a:
c7:8b:f8:98:28:3b:58:99:01:17:de:e9:46:bd:ee:
b0:53:0a:c2:0d:4c:0a:2a:91:24:56:fe:44:fa:d1:
9c:f7:d1:c9:1c:e9:cc:43:82:19:73:41:2e:d8:53:
47:ac:3a:ad:e1:5f:f1:d0:58:19:05:b9:46:eb:27:
8c:12:0a:a5:3a:c6:f1:14:90:7d:15:b7:26:9c:1b:
c5:98:95:bb:73:d8:a5:f3:4d:e2:b7:5b:0f:03:95:
a0:af:51:fd:d5:07:f6:df:65:02:5c:5f:32:69:b6:
74:e5:96:ab:11:04:65:22:b0:75:65:93:d2:2e:58:
91:4c:db:bc:0f:6b:0d:cf:f1:52:e1:d9:5b:ac:70:
7a:b8:7a:f3:44:0b:a0:94:62:72:b5:e7:58:a0:ac:
65:3d:ba:f0:01:b1:b0:6d:ca:00:cb:98:46:05:98:
59:76:f6:cd:72:2b:bb:f5:45:5e:df:84:66:19:5e:
ef:55:10:e1:de:ac:66:6d:c2:8d:20:65:80:07:9c:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D9:C2:7B:B9:CF:35:EE:91:5E:E8:CA:FA:54:4B:33:B8:F7:92:11
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:0f:ee:d3:ca:a9:f4:e6:99:b2:cc:35:95:27:e1:89:37:eb:
04:0e:be:b2:86:b8:67:dd:13:12:59:97:dc:a4:93:c8:c3:15:
dc:87:34:15:3c:7f:ee:1a:2f:ac:24:4e:4b:4a:5f:b1:51:38:
8b:e7:fb:df:13:f2:4a:98:db:69:33:f4:29:fb:4b:d8:ce:ef:
88:00:bf:b9:11:7b:1d:ed:e3:3f:e8:f8:a2:43:69:1e:8b:6d:
91:b1:02:30:93:8b:e5:a6:72:5d:22:fa:a2:41:77:ad:45:40:
56:60:ee:b3:23:09:af:11:0d:00:2e:e7:fd:dc:e3:1a:c7:b8:
41:7d:45:24:7f:99:2e:7c:df:7a:5e:be:fc:57:2a:6b:99:1b:
2c:08:1d:52:9e:ac:28:cc:62:ac:b7:5e:21:be:4d:65:4b:61:
a1:2e:b7:59:11:e3:36:f7:6a:b4:fe:78:cb:46:dd:71:05:02:
22:99:7f:33:89:bd:f6:79:ef:ea:37:78:64:bd:c9:f1:c3:42:
6c:db:e0:55:a0:c0:57:29:01:0f:7d:8a:5b:89:e1:90:06:d0:
cb:55:46:ec:67:a0:6d:bc:25:af:2f:7c:4f:d1:c4:14:de:73:
7f:41:b6:ae:22:04:77:36:7c:0b:36:c3:83:87:57:81:ae:6c:
3e:ae:56:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:44:56 2025 by rpki-client