Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
File: QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft (raw, json)
Hash identifier: vbCCVtC0zAHIbRRve9Qy/RfipNR71n3YJwudnrIba7k=
Subject key identifier: 1B:D8:C5:CF:B8:F7:ED:B1:76:08:1D:A2:45:99:40:7E:A2:FF:6F:26
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 019A0AEF73DBCFAAC8329E28DCD53EDE53C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
Manifest number: 08C4
Signing time: Wed 22 Oct 2025 08:00:56 +0000
Manifest this update: Wed 22 Oct 2025 08:00:56 +0000
Manifest next update: Thu 23 Oct 2025 08:00:56 +0000
Files and hashes: 1: QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl (hash: y2dUNieRyAYp8QW022Sqc18c/Wbp6RB5KvZhJbFs6eE=)
2: pqlsmAxEb6u37QxzF6qCzpQ4SBk.roa (hash: teI/DPbnnC6ro04KC4yzmzn/SS2I9ht6+3TdoQMOA3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ef:73:db:cf:aa:c8:32:9e:28:dc:d5:3e:de:53:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Oct 22 08:00:56 2025 GMT
Not After : Oct 23 08:00:56 2025 GMT
Subject: CN=1bd8c5cfb8f7edb176081da24599407ea2ff6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:12:ab:d7:d4:44:ea:dd:91:b6:b3:31:cf:
98:ee:f8:c4:4e:3d:6b:da:53:fc:29:e8:66:9e:14:
b9:f5:df:bd:a4:ea:b3:c3:7c:44:0e:b9:0d:1f:b4:
4b:39:de:b7:79:f1:8f:e8:f4:9b:ac:e3:c6:c1:64:
43:e7:5c:22:e0:a4:f7:93:78:59:c9:cb:41:f3:48:
24:33:8c:f1:32:51:a4:29:8a:36:08:92:9f:1d:a4:
93:50:7b:ff:d5:78:c6:82:f0:58:d0:6f:aa:6f:cf:
ee:4c:95:4b:af:48:86:0d:2a:98:5c:3b:cd:e5:48:
90:ed:c2:b9:83:02:df:e3:23:27:72:fd:fb:77:be:
ac:02:4c:19:a0:35:9d:4f:fb:e9:5f:bd:3c:ee:1b:
14:67:87:c5:3b:ae:35:c0:75:da:ea:53:83:e4:b2:
7c:91:d0:73:e5:93:f3:35:26:da:e3:f3:a9:6c:fe:
ab:16:8e:35:8b:de:22:67:e3:22:58:8f:2d:ab:34:
dc:d3:0f:bc:55:42:57:8d:7d:d8:b7:d6:4e:26:ae:
47:8b:f2:bc:8f:7b:25:3d:e0:d0:c1:bf:16:68:62:
42:77:5d:ac:c3:67:d0:3a:0b:f4:06:a2:fa:30:35:
aa:3d:2d:57:2c:d7:c3:fc:68:f9:31:2e:98:7c:88:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:C5:CF:B8:F7:ED:B1:76:08:1D:A2:45:99:40:7E:A2:FF:6F:26
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ad:1e:c2:4a:40:4d:ed:f0:e0:e9:34:20:b5:66:a0:f2:b2:
00:78:89:69:a3:b5:22:4f:1b:52:9f:57:3f:8b:1c:47:0e:c7:
cc:3e:2f:dd:bd:50:f6:3f:fa:ff:62:f8:45:5f:e3:0f:cf:4a:
03:39:58:34:da:75:f0:53:4f:cd:cf:b4:35:c3:d1:77:ed:b4:
71:a7:f0:23:6a:f0:3c:08:81:b8:17:c8:1a:36:47:25:34:9f:
2a:fa:93:a7:7e:12:f7:94:88:67:94:54:dc:b0:69:23:29:00:
31:a0:38:ae:95:fd:68:e6:cf:d2:8d:ec:0b:74:77:da:f8:da:
be:42:de:5d:a7:5d:65:d5:7b:9f:22:ef:51:c8:a0:5d:98:ad:
c9:11:d0:35:e8:28:ff:07:1b:8b:e4:b9:e7:81:e2:32:c7:7c:
a6:ab:04:2c:8b:bb:86:a0:d4:06:f4:44:4c:43:08:6f:25:4e:
27:a1:23:c6:1d:a3:e1:c7:01:31:19:e7:a2:ff:fd:73:86:49:
f3:fe:df:16:37:5d:3d:f8:65:c3:18:8b:31:db:0a:9c:ad:48:
ba:d2:de:59:c4:0b:04:83:a8:ac:f6:12:24:b3:02:b1:5c:40:
df:c9:20:2e:fe:f5:41:b9:ec:26:69:bc:a2:fc:01:61:c0:8d:
f9:64:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:08:48 2025 by rpki-client