
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier: Fmt5TcWS1x3k/wG1idvn52cVHKVtzp6O+52jZed7e0c=
Subject key identifier: 8B:D4:74:4A:EF:A1:6A:50:03:0C:25:E4:FE:A1:20:1D:5D:BB:B3:99
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 019A1CF55796E4D2C0AEFC2A84DA155EF367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number: 12D2
Signing time: Sat 25 Oct 2025 20:00:31 +0000
Manifest this update: Sat 25 Oct 2025 20:00:31 +0000
Manifest next update: Sun 26 Oct 2025 20:00:31 +0000
Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=)
2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=)
3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: qfSn8iyEjijFf3MsWkhL6PtH1BfN8beWmzcAhpY9PRU=)
4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=)
5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=)
6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=)
7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=)
8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=)
9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=)
10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:57:96:e4:d2:c0:ae:fc:2a:84:da:15:5e:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Oct 25 20:00:31 2025 GMT
Not After : Oct 26 20:00:31 2025 GMT
Subject: CN=8bd4744aefa16a50030c25e4fea1201d5dbbb399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:73:dc:8f:55:6d:4c:24:3f:e7:15:4a:a3:
df:1e:1a:20:de:3d:2e:f1:3c:2c:d3:52:c9:5b:d6:
eb:ce:dc:3a:62:3c:cb:90:f3:48:b8:98:cf:11:3e:
40:03:06:ca:3b:21:15:5d:65:58:c1:83:2c:ac:5f:
9f:83:0f:be:98:7c:22:12:46:35:2b:c9:9c:3e:21:
3f:4b:23:02:ee:e4:4a:77:61:f8:0b:b8:1b:9a:d1:
a3:42:e7:99:5c:96:02:56:52:86:ad:db:27:d7:7b:
69:21:15:e4:56:9a:07:81:ad:58:b8:12:a9:f9:7c:
4e:4a:96:dd:97:10:88:3e:a7:69:30:13:f9:9d:0e:
f0:b4:be:33:75:59:4f:34:57:c6:9c:aa:2f:c7:bb:
49:69:e0:c8:60:4c:bb:19:1f:6a:1b:30:a4:8a:b9:
37:84:0a:3c:76:48:fc:46:b1:e8:c8:1b:de:5e:c9:
4e:ba:08:5b:f2:18:22:b3:7b:dd:38:b4:c8:50:22:
a3:32:7d:ce:84:40:3b:87:39:3f:e5:d9:7d:25:71:
56:91:c1:91:95:1f:f4:a5:41:78:17:0a:11:7e:30:
46:8b:a4:42:6a:e2:ff:14:21:5b:ce:b4:58:20:d4:
44:9d:43:a4:f1:fa:d1:2c:21:7e:ad:f1:9f:46:37:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:74:4A:EF:A1:6A:50:03:0C:25:E4:FE:A1:20:1D:5D:BB:B3:99
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:17:64:30:85:65:03:cd:ec:d5:9a:97:38:3f:48:6d:4a:79:
1c:af:62:91:3b:85:d3:5b:6d:cc:b7:23:9a:ba:55:06:97:c5:
a6:82:78:06:95:a0:f9:94:55:20:fd:96:a4:67:7c:9f:7a:45:
a8:95:7a:39:a3:af:f7:4a:56:33:4c:a9:86:ad:28:81:e1:0b:
b9:3c:f3:5d:eb:f2:c0:b6:5a:e9:f2:4e:95:5f:73:b2:f7:f5:
ef:21:47:4e:29:3e:17:93:fb:ba:f6:07:cd:b7:b8:cd:f5:28:
7f:ab:e4:6d:5a:0c:ed:33:f2:c5:cc:d4:72:27:cd:80:78:8d:
67:db:63:6e:5a:06:8c:d2:d5:a2:35:9a:17:64:e8:bd:8f:4c:
9e:29:59:bf:32:8d:50:a5:41:48:c9:28:5a:8a:eb:39:e7:bd:
d2:06:d2:77:30:0a:59:31:62:e2:4c:05:d1:c9:6d:90:9e:74:
ad:b6:51:32:94:ac:96:d6:05:a0:a4:c8:62:c0:3b:4c:f9:4a:
5e:d2:d9:88:bc:91:74:d6:e9:00:7f:b1:93:62:27:df:21:a5:
d7:0a:57:ac:e4:fa:59:98:90:26:de:92:99:95:5c:f8:66:c0:
e9:69:4c:ee:4e:6c:0b:55:5c:37:76:3a:71:b1:97:e4:11:ee:
29:2d:2e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:25:52 2025 by rpki-client