Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: Pz9kDvPRFQ/s1R9BQUzd5dLppUb/lVRbO2ylhOI9KdU=
Subject key identifier: A9:71:5C:CB:09:EE:ED:BD:BF:34:13:13:FD:CA:1C:A2:D4:D5:BE:80
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019A164E404D19D15D4BE73BBCFB845FB264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 05F5
Signing time: Fri 24 Oct 2025 13:00:18 +0000
Manifest this update: Fri 24 Oct 2025 13:00:18 +0000
Manifest next update: Sat 25 Oct 2025 13:00:18 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: tp6o+VqjGkMkrDmaiJWpdpofej5E/uxFqiBnqbqu4ww=)
3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4e:40:4d:19:d1:5d:4b:e7:3b:bc:fb:84:5f:b2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Oct 24 13:00:18 2025 GMT
Not After : Oct 25 13:00:18 2025 GMT
Subject: CN=a9715ccb09eeedbdbf341313fdca1ca2d4d5be80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:db:96:84:e9:dc:8a:f8:ff:c7:d9:ef:c2:08:
ca:b5:3b:85:de:f5:4c:d0:b9:02:bc:7d:16:35:9a:
05:1b:dd:a8:84:dd:97:ed:bc:d8:3d:f4:0d:e2:ef:
87:9c:ce:57:4f:41:08:20:b7:87:96:45:a4:18:cd:
d1:f5:55:af:fa:ae:a0:95:20:1e:11:cf:f4:b1:6c:
ef:93:fd:fb:f4:f1:95:10:9f:a2:64:1e:db:4b:c4:
f1:f2:ef:e6:e9:2e:65:fd:36:0f:d1:00:5b:fc:0e:
9e:51:d9:30:c9:a8:66:1c:03:71:04:41:e0:1d:ab:
d9:54:68:67:9b:4b:20:d6:00:ec:59:c4:93:28:db:
6d:74:f0:0e:d5:0a:c9:4b:13:8c:f4:50:0b:ae:74:
ec:9a:ed:6f:a8:40:a9:91:1a:91:4a:1d:ed:eb:a8:
96:ec:02:7c:c4:01:b8:26:83:26:d1:a3:08:5d:0e:
7d:e5:a6:d4:21:c8:85:60:3a:fb:bc:5d:18:0c:8f:
70:6f:32:b4:29:8b:d1:f8:ba:8c:26:48:e8:f1:63:
30:f7:e0:46:fb:ec:f4:68:f4:f7:17:ef:ee:b1:81:
3a:24:f1:04:5f:d4:62:f9:10:18:84:3b:ec:5a:3b:
ed:61:4f:9a:8c:97:79:5c:5f:fd:64:85:d0:12:b6:
a6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:71:5C:CB:09:EE:ED:BD:BF:34:13:13:FD:CA:1C:A2:D4:D5:BE:80
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f3:b6:be:1d:ee:25:ab:3b:8f:b5:f0:6c:6b:ec:1d:f2:88:
aa:26:0f:d1:2b:d7:e5:da:37:a5:0c:f1:d4:b4:a4:e9:ac:e0:
05:4d:ce:cc:ef:1a:9e:6f:4f:75:86:a0:db:e2:f2:04:cc:b4:
98:ba:fa:18:82:b5:a0:fb:6b:16:ec:5c:5e:18:15:89:ab:c1:
5c:39:f2:16:20:b6:bd:8e:33:ee:25:ed:b9:aa:fc:78:80:af:
cf:cb:dc:67:f0:17:31:42:88:fb:18:84:61:86:08:d0:b7:a7:
e5:2d:a4:92:97:bc:d3:20:e6:44:ab:5e:73:c1:36:2e:4f:68:
4b:f2:30:e8:d1:e9:ac:68:34:86:17:90:f0:e9:19:7c:aa:6a:
c6:fe:95:bc:ba:18:42:83:0d:a6:83:73:98:b9:bb:36:b7:05:
e6:0c:d9:e9:cf:43:04:3f:3d:03:07:57:7d:69:87:cf:e4:6c:
c2:da:98:f0:c4:39:33:27:d6:db:ee:cb:b2:00:34:ca:b7:fa:
81:0f:1c:5a:ea:18:70:c0:ba:cf:f4:14:74:ab:8a:21:4e:b0:
73:31:4a:c7:a7:05:a9:af:48:8c:e8:2c:b0:e9:87:c9:ac:93:
1d:bb:df:a8:4c:5b:37:14:fc:be:a2:0d:78:af:b0:a7:fc:fb:
31:3b:44:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 18:57:09 2025 by rpki-client