Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
File: QA4H15n7NVyVICXz0nsA6bTuNO0.mft (raw, json)
Hash identifier: 05TUtQ7ZoAWIOE4Ci9QbrDcEPepgcEuOnTrRZ5DgtZ0=
Subject key identifier: AA:82:81:CB:F5:BE:34:94:39:57:16:41:88:B7:3C:EA:61:48:F6:37
Authority key identifier: 40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
Certificate issuer: /CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Certificate serial: 019A1B3DE1A345D40C8E70741476A30D4E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
Manifest number: 095B
Signing time: Sat 25 Oct 2025 12:00:31 +0000
Manifest this update: Sat 25 Oct 2025 12:00:31 +0000
Manifest next update: Sun 26 Oct 2025 12:00:31 +0000
Files and hashes: 1: QA4H15n7NVyVICXz0nsA6bTuNO0.crl (hash: CpGVBeNBSZ8865XPQ5I8R8zy3uzphhMHxmPpO5Tl7G0=)
2: bysUciiIqYU9vJ8UfK9pbwZkqG0.roa (hash: JZVYwqtyAp0nMHO1FDIE6qYD96KGmAzDi7aqiaMlMrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:e1:a3:45:d4:0c:8e:70:74:14:76:a3:0d:4e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400e07d799fb355c952025f3d27b00e9b4ee34ed
Validity
Not Before: Oct 25 12:00:31 2025 GMT
Not After : Oct 26 12:00:31 2025 GMT
Subject: CN=aa8281cbf5be34943957164188b73cea6148f637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:22:ae:88:a5:08:a0:8a:40:35:0f:5b:31:
d9:42:26:e8:ae:02:3e:50:e3:b4:ee:18:8f:23:48:
99:ec:50:5e:2e:64:8a:03:ad:6e:99:bb:9f:2d:00:
e0:e7:c5:f0:a6:90:5e:c8:47:ca:d3:63:90:bd:13:
c8:86:3e:45:ab:11:91:7e:38:60:03:32:c4:86:81:
84:dd:5e:15:8a:00:2b:de:01:cb:11:ba:ae:8b:97:
36:7f:a8:b6:0f:55:f7:f4:69:04:87:0d:bc:78:53:
84:b8:bd:3a:8c:a3:03:77:d5:f5:f6:19:92:8f:04:
b7:97:f9:2c:ca:2a:b1:0c:97:8f:10:df:c9:78:63:
4d:5e:19:11:66:47:02:7f:eb:ec:ac:ac:9d:b2:de:
44:89:4f:da:f9:d7:8a:54:9d:50:8b:f2:ed:02:57:
f6:8a:b8:82:27:37:d6:ff:9f:6f:6e:37:3b:14:a5:
67:e9:3c:04:d8:2e:53:95:a3:f2:51:a6:60:3c:8a:
2d:79:ad:f8:12:ff:25:b6:60:74:97:b5:1a:47:fb:
80:9e:6f:00:11:da:dc:d8:be:eb:b3:38:17:d3:29:
8d:86:0f:b7:aa:57:2d:38:bf:9d:2f:46:9b:60:1e:
29:d0:22:ce:fe:e9:ae:5b:bf:cc:70:d9:bb:1f:17:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:81:CB:F5:BE:34:94:39:57:16:41:88:B7:3C:EA:61:48:F6:37
X509v3 Authority Key Identifier:
keyid:40:0E:07:D7:99:FB:35:5C:95:20:25:F3:D2:7B:00:E9:B4:EE:34:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA4H15n7NVyVICXz0nsA6bTuNO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/QA4H15n7NVyVICXz0nsA6bTuNO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:24:54:d5:b2:c9:38:3f:4b:11:66:b8:d0:8d:a5:0b:66:cb:
58:44:31:ac:f2:20:d7:8d:71:e8:8b:d6:f9:f3:e2:d0:08:26:
df:bc:be:93:ee:89:3a:ff:8c:8e:9d:32:c8:ca:f6:ed:0b:9f:
7c:fb:ec:ac:a1:e1:db:e3:37:08:e4:ff:5d:27:2b:5f:d3:f3:
c5:6f:de:b3:1e:80:ad:ee:46:b1:a6:0a:53:6b:2e:96:11:23:
4e:5c:07:41:8d:01:2f:d9:be:61:a7:da:25:2f:36:fc:4b:43:
bc:0d:c3:c2:01:7a:6c:b1:b5:cb:81:d5:20:74:89:2c:eb:b5:
17:17:a6:cf:f8:f2:1d:88:cf:7f:50:3d:00:f6:8b:55:73:ce:
0b:0a:b2:a6:50:9d:cf:e0:c8:d8:f5:70:a6:81:a2:8e:39:9e:
af:c8:e7:b2:7a:9f:a7:07:98:31:77:42:71:7c:87:52:1e:1a:
ad:c0:6f:f5:cb:22:25:c4:e1:b3:6e:0c:29:6b:b9:9c:68:26:
c4:9f:58:b0:df:43:47:09:9e:29:8c:79:9d:8f:b9:34:a8:ac:
39:53:36:36:f3:d8:1e:e0:2c:b9:c1:e6:0f:a8:a6:31:21:35:
07:9c:30:23:ac:14:15:49:ca:e0:80:39:17:bc:65:c1:0b:17:
b2:1a:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:57:36 2025 by rpki-client