Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: YrwiRlTLtphYrmAlWNjpe1Q5Bkc0ZEHWCISS0AGTcnc=
Subject key identifier: F2:57:BF:B2:ED:C2:63:97:62:DA:FF:57:BD:FD:A5:CC:CB:D3:CE:76
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019A09DC12B2DBFB3374D9EA4ABD5E6E44B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 09CA
Signing time: Wed 22 Oct 2025 03:00:08 +0000
Manifest this update: Wed 22 Oct 2025 03:00:08 +0000
Manifest next update: Thu 23 Oct 2025 03:00:08 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: rz4wlQ+rI5GxeUR7bbZZmqkcVBFgnLJ073AEBAAsnew=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:dc:12:b2:db:fb:33:74:d9:ea:4a:bd:5e:6e:44:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Oct 22 03:00:08 2025 GMT
Not After : Oct 23 03:00:08 2025 GMT
Subject: CN=f257bfb2edc2639762daff57bdfda5cccbd3ce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:c2:7a:7f:82:ec:9d:15:4a:5a:99:91:8f:
b7:96:cb:bf:69:f5:3a:f8:fa:b0:44:fa:20:69:25:
50:07:99:31:2e:88:44:6c:a2:47:f0:68:24:85:ae:
0f:d3:03:03:b8:d6:c9:84:27:cd:1a:62:be:33:39:
38:45:af:62:7e:52:c6:fd:2a:97:6b:7f:14:6e:17:
de:2b:6b:bd:dd:f2:df:8f:73:04:b5:af:65:cd:a6:
e0:50:4e:89:b8:45:a3:f1:34:e1:a1:02:c0:a4:8d:
34:6d:31:78:71:f6:fd:dc:08:52:f8:69:58:4e:77:
99:b0:c0:93:8b:ef:08:e7:5e:08:bc:69:a5:d1:54:
6b:26:41:3f:37:6d:08:2d:0b:a0:6f:38:7d:68:a2:
fa:d4:65:1b:19:af:5a:db:ef:39:ad:ee:b8:ef:2f:
c7:e1:1d:a2:54:67:84:6c:79:91:a8:c8:ec:69:c3:
9d:1b:77:22:6e:6c:e5:7e:12:83:86:44:48:b4:df:
e7:b2:39:e3:a6:f4:6d:24:29:11:28:07:c8:6f:16:
66:31:d9:1d:9e:d2:45:ec:d9:25:c8:30:d6:86:24:
15:78:b0:09:71:ee:29:be:b3:4b:40:5e:f8:b2:da:
3a:83:33:0d:50:02:2a:e2:a0:62:2b:43:fe:69:df:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:BF:B2:ED:C2:63:97:62:DA:FF:57:BD:FD:A5:CC:CB:D3:CE:76
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:af:51:36:d2:c4:25:71:b6:3d:86:31:95:c7:c4:9f:ee:
7b:ab:44:49:46:07:64:42:cf:b3:28:49:59:2c:32:9a:c4:40:
f9:dd:04:a5:4e:7e:8b:2f:0d:4e:9e:6d:f2:05:48:b7:8a:f0:
e7:2f:e4:1d:85:f8:91:75:61:26:40:4a:53:fd:93:e2:b7:04:
26:85:6b:4d:0b:bc:86:b9:62:ab:b3:22:c6:99:63:1a:fd:f7:
54:e8:8f:c3:84:0e:88:4f:e8:51:ba:7c:2e:6e:d0:19:9d:5d:
ee:d3:e4:57:ee:a3:e3:5c:87:96:9e:7f:cd:0d:49:aa:6c:28:
d4:48:de:16:82:3c:10:cd:2d:86:0f:3d:53:9e:e2:90:d1:12:
d5:ca:7b:82:62:4a:bb:7b:dd:a8:28:ed:df:4b:3c:35:85:9f:
e0:08:e8:49:28:07:a0:8e:41:7b:24:59:5b:4f:95:9d:a8:35:
6b:12:4e:96:78:27:cf:5d:df:1b:ba:d3:39:7b:e0:b7:38:f8:
a2:40:5e:92:fe:f5:78:e2:43:38:e3:dc:ca:24:c8:70:f0:94:
bb:ef:d0:ab:75:50:7f:9a:51:64:eb:aa:ab:8f:74:00:04:56:
13:b7:ed:85:c5:c4:33:ca:a1:64:4c:c0:09:9a:98:30:f0:f3:
20:b8:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:49:08 2025 by rpki-client