Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: fbL+KV/4EKX1gwaXaOC+C8fU9mInZVSInPi3oz4p4Ak=
Subject key identifier: E6:96:B1:FC:A4:CB:4A:68:93:93:BF:8F:41:AF:DE:10:A8:E4:4C:D6
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019A221B9477BED25AE277457192A41DB59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0C02
Signing time: Sun 26 Oct 2025 20:00:24 +0000
Manifest this update: Sun 26 Oct 2025 20:00:24 +0000
Manifest next update: Mon 27 Oct 2025 20:00:24 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: EnH9J2Lp0Ewuwzc20J0ycadEVA87vJ35wgkaQiN/sd0=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:94:77:be:d2:5a:e2:77:45:71:92:a4:1d:b5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Oct 26 20:00:24 2025 GMT
Not After : Oct 27 20:00:24 2025 GMT
Subject: CN=e696b1fca4cb4a689393bf8f41afde10a8e44cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:4a:9d:08:76:41:f4:65:f0:65:df:fc:b3:
84:e6:27:e5:e9:e3:28:90:ad:13:87:c7:a6:cc:70:
3f:15:b8:8d:22:bc:48:11:36:29:5b:55:58:d1:7c:
35:73:a6:51:1c:dc:05:a7:06:96:a5:e8:39:69:ec:
3d:ea:db:ef:03:59:91:9e:0b:75:c3:e6:d2:62:ac:
c1:b2:23:30:69:af:eb:8a:4f:13:3d:49:05:2b:27:
20:52:97:97:b3:09:9d:89:1b:68:bb:0f:67:4e:9c:
bf:39:8f:8e:a2:99:c8:f8:71:e7:1b:3a:ad:e5:dc:
29:6f:30:a1:5b:54:56:8d:4d:5a:6d:18:4e:60:36:
7c:9d:c2:97:29:dd:2d:48:3c:ec:16:3a:1f:d6:3e:
d4:3d:ef:07:ea:e1:e8:b0:bd:da:30:bc:d1:00:93:
a6:4c:e9:2b:a3:a5:84:51:f9:83:79:3a:81:da:1e:
56:61:a4:e5:28:51:74:8b:23:f3:b3:a4:46:a8:53:
20:24:81:c7:4f:9f:e0:e0:62:94:b1:2d:3a:51:26:
1f:5a:99:9e:e4:fb:63:ec:11:1c:40:6d:60:c0:ae:
e6:74:77:85:6b:3a:e1:fa:1e:3b:92:e9:75:ad:90:
10:e9:c4:8c:a6:c6:a1:44:39:f4:ba:b0:1f:55:f1:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:96:B1:FC:A4:CB:4A:68:93:93:BF:8F:41:AF:DE:10:A8:E4:4C:D6
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:20:8b:b1:a7:2e:af:7f:9d:b8:59:3b:71:3e:22:c0:fe:6e:
19:6d:68:40:75:81:36:3c:1c:f3:18:1d:fd:b2:80:cb:dd:e5:
27:2c:50:7b:88:65:de:22:55:93:df:2c:fb:00:9a:30:94:13:
3a:7e:e4:34:76:bf:26:8b:d5:25:ee:f9:41:3d:b0:19:fe:5c:
34:bf:fd:b2:28:9c:76:64:d6:a3:91:60:a0:0b:3a:8f:50:cf:
78:ba:da:17:f0:aa:6d:3a:51:cd:75:43:b8:12:3c:63:d4:41:
83:25:2f:b4:43:5b:22:6b:6e:dc:02:c7:bf:d4:cd:ed:3c:3a:
aa:96:2f:6b:ed:10:3f:4a:2c:b1:10:7a:f7:c8:40:2d:e9:2d:
32:d4:11:93:3b:a0:08:e8:d3:6b:4f:85:c8:20:4b:d6:47:92:
d4:fb:c3:89:c7:07:48:86:a0:7e:c6:57:61:f8:d8:36:ba:59:
31:4e:d7:9e:4b:23:ea:d6:91:c4:5d:6f:be:b0:d5:9f:6d:92:
99:6e:a5:d1:57:8e:39:e6:36:2f:52:c9:81:58:b4:b0:e9:4f:
90:46:fe:81:bd:67:0b:c0:06:c0:50:63:f1:74:eb:15:e4:a9:
8b:13:73:d2:df:e9:86:ea:a4:39:4e:69:2b:59:83:84:91:45:
ac:82:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:48 2025 by rpki-client