Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: 3IfgmYZVF/bdvdohKm72P2cUup0devspRgk4eIgbZXs=
Subject key identifier: 67:5B:C7:BC:F9:2D:C9:A4:FC:97:F5:F3:DB:AD:0D:CB:EC:F5:AA:16
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019A2A43DC78D1BB070C0DE85047539DBCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 16FC
Signing time: Tue 28 Oct 2025 10:01:21 +0000
Manifest this update: Tue 28 Oct 2025 10:01:21 +0000
Manifest next update: Wed 29 Oct 2025 10:01:21 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: h8Tw06rsRY6z3ASb1hR3Qh1nnUMGg91FckZ5EejKRsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:dc:78:d1:bb:07:0c:0d:e8:50:47:53:9d:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Oct 28 10:01:21 2025 GMT
Not After : Oct 29 10:01:21 2025 GMT
Subject: CN=675bc7bcf92dc9a4fc97f5f3dbad0dcbecf5aa16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fb:67:0e:4d:da:14:ff:88:f0:a6:96:14:f8:
95:df:09:a9:37:52:a6:f3:76:8f:e2:43:79:f7:c1:
9b:d2:b8:69:00:55:d7:1d:37:ea:10:35:d7:b7:0d:
ad:b8:ac:d4:7e:d3:95:31:e4:1f:50:63:0b:f7:f9:
d1:27:c9:c8:37:45:78:56:c2:d9:ec:84:58:27:30:
fa:7a:88:96:f3:b0:67:0b:b5:3d:39:10:9f:a6:3e:
ce:cb:a1:d1:0b:8e:b1:c1:b8:26:0b:47:8c:9c:37:
e5:1b:be:10:82:64:b5:f2:56:44:e1:a4:29:35:b8:
2b:1e:51:02:47:52:55:e3:00:e0:ea:d1:5c:15:92:
d8:25:19:f2:bb:71:af:ac:28:8f:44:bd:85:8b:b7:
21:75:c3:c4:3a:53:54:19:a6:f3:6c:0e:25:94:b6:
f4:61:5e:47:86:52:6c:6d:81:69:15:cc:4a:3c:f7:
3c:a7:af:08:44:cd:c3:48:e0:45:0e:5b:f2:6b:49:
88:96:78:40:a7:0f:a4:97:5e:86:3f:91:f7:c5:73:
41:3b:c8:47:a6:55:12:d5:90:2c:4f:82:86:b1:e3:
0f:c5:4a:e5:34:c9:33:a3:8d:59:a3:11:4e:ab:94:
ab:58:dc:c4:c0:32:ca:e2:69:84:57:88:38:8e:00:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:C7:BC:F9:2D:C9:A4:FC:97:F5:F3:DB:AD:0D:CB:EC:F5:AA:16
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e8:73:2a:e9:0c:03:f2:c4:32:2c:22:3e:fb:03:f8:d0:8d:
f4:dd:8d:64:7c:71:a5:4d:9c:da:13:58:9e:5f:88:9e:f1:ab:
23:c8:fc:7e:48:43:d6:fd:f5:85:32:9f:1b:3b:0e:e8:a4:71:
27:ad:38:fb:8e:4f:05:06:f4:dd:f2:d3:36:5f:cf:f6:e3:c7:
01:0a:32:f3:1d:66:c6:57:01:6d:4d:80:51:85:93:01:72:c9:
91:88:4a:7d:fd:90:62:dc:d3:c0:f2:87:ab:39:ef:16:04:45:
8a:22:ec:a3:09:d2:96:ec:bb:1f:b0:2c:8d:c4:7d:12:c1:18:
6f:44:3b:8f:14:2d:bd:a8:f0:39:c1:87:f6:09:d0:df:6f:2c:
65:58:7e:da:85:da:e0:12:32:55:00:b9:fc:f4:67:2d:90:cd:
85:ea:fc:9b:97:48:9c:8e:27:0e:95:bb:7d:a4:74:d5:d7:8a:
4d:c8:37:50:b8:fe:f2:cf:a5:ce:8c:4f:55:f5:cf:9b:5d:93:
e2:f6:12:64:eb:a1:02:4d:f5:4c:a5:19:4a:a2:93:0f:b5:d0:
16:d2:36:16:27:4a:3a:21:f6:32:7e:90:9f:0c:0e:39:8c:6a:
ec:02:aa:12:8e:92:4d:58:73:1e:f1:32:20:2b:26:77:a2:11:
17:70:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:33:33 2025 by rpki-client