Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier: tfwAa5wMEgexb4+sJBhTwpc8lyPuCQSUiruus1+vKY0=
Subject key identifier: C5:FE:98:5A:29:7D:C9:1C:70:51:8A:F6:82:84:47:FD:C7:79:90:B2
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 019A2409C8CDF82D699630DF09DE0C3884AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number: 1688
Signing time: Mon 27 Oct 2025 05:00:12 +0000
Manifest this update: Mon 27 Oct 2025 05:00:12 +0000
Manifest next update: Tue 28 Oct 2025 05:00:12 +0000
Files and hashes: 1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=)
2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: GuhmMJtmaMnR0smi0w4Mv8tKP2H8eeCI9XXl7B6gYFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:c8:cd:f8:2d:69:96:30:df:09:de:0c:38:84:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Oct 27 05:00:12 2025 GMT
Not After : Oct 28 05:00:12 2025 GMT
Subject: CN=c5fe985a297dc91c70518af6828447fdc77990b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:a9:bb:05:a0:4e:32:89:4e:0f:10:e4:3f:
c0:ca:e4:16:b7:b6:fc:b6:82:dd:3d:88:27:e1:6f:
9f:d3:44:22:d8:20:63:17:5b:d2:7f:b4:92:ad:a5:
77:e0:6f:fd:68:16:91:b1:e9:dd:c2:e6:96:24:d6:
88:23:8d:a6:58:2e:e8:dc:7d:48:aa:3d:5d:73:86:
d5:ec:95:cb:6c:3a:4a:78:d3:55:89:e8:96:ff:5a:
75:f7:c0:4a:66:34:1b:a4:52:48:78:91:e9:d7:61:
a5:ad:27:1a:38:7a:a2:81:0b:69:f8:a4:85:d4:12:
6c:91:b8:8b:01:9b:cf:94:da:5e:16:8b:2d:02:c9:
22:29:cc:a1:fa:33:07:b9:eb:0e:89:b1:b0:43:57:
75:e5:3e:28:6d:ea:fc:37:24:7a:77:ef:a7:80:36:
ed:f5:fd:72:49:4f:3f:75:9c:95:02:c4:6f:59:1a:
be:77:fc:04:34:fa:4c:89:93:6c:73:ef:c2:00:f9:
1d:c0:c2:a8:f7:a3:cd:72:2a:9c:9c:0b:bf:09:fc:
a3:db:e5:31:e4:b5:a4:4e:57:fd:a3:32:e8:52:d1:
07:74:59:32:2f:d3:8a:19:32:61:17:80:ac:36:2e:
00:88:e5:e3:78:5b:8a:8d:43:7d:81:da:28:b8:9b:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FE:98:5A:29:7D:C9:1C:70:51:8A:F6:82:84:47:FD:C7:79:90:B2
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:85:00:2c:20:bd:72:a5:d7:86:57:43:37:bb:9a:b3:2a:0d:
bc:2b:38:05:59:c1:da:72:b1:87:77:96:20:18:84:fb:b1:72:
6b:7c:5f:1e:f1:4d:ad:0a:63:ef:89:34:02:02:37:bf:0c:b5:
fd:2e:f7:bf:b5:3b:ce:f1:a8:ce:4d:25:67:2c:2e:d0:97:8d:
93:37:e1:25:b0:4c:21:95:9a:cf:e6:0f:01:65:d2:18:67:c4:
95:2f:75:e5:fb:b6:e4:15:16:f4:dc:82:4a:ca:6b:f7:55:14:
1b:49:c4:1e:94:75:99:32:2c:11:02:31:20:59:eb:8c:40:7d:
1a:bf:33:d7:1b:0f:e0:a5:ad:d2:6c:dc:54:9a:85:8b:21:a1:
ae:37:a6:1e:0f:d6:39:c6:2b:ba:de:bd:ef:d0:93:fe:66:35:
35:8d:46:07:53:5f:80:10:87:2d:77:1b:7c:5c:4f:c4:2c:0b:
3a:55:c5:8d:e7:f0:26:30:5b:98:88:09:c4:6d:aa:01:34:a2:
f5:42:1a:4f:db:35:74:50:d3:b1:ef:51:56:59:33:9c:80:89:
73:31:06:b5:5f:30:24:41:b8:38:ee:94:69:6f:9d:d9:f8:ba:
c5:09:b2:72:30:e5:71:d4:86:18:fb:42:c5:5d:7c:11:76:eb:
58:43:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:22 2025 by rpki-client