Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: P83n+YAf4flRW0I+5CoXfbsI0g9VsS5fGvz3XnWdYZM=
Subject key identifier: B9:60:03:6B:0D:47:52:6D:F3:9D:19:B6:3A:20:13:95:5B:45:85:25
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019A2AB0CEE6D21B4D9F3E1EA28C3D58A4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 04C5
Signing time: Tue 28 Oct 2025 12:00:21 +0000
Manifest this update: Tue 28 Oct 2025 12:00:21 +0000
Manifest next update: Wed 29 Oct 2025 12:00:21 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: iG7Kdf8uSOE6C6bI8WNrw0Ncu2PlkCZzLFDVDzbVRuI=)
3: kwFJhE8jwEHJybQlTEKHmXErsEs.roa (hash: alWNviEQV6Ni9Uyx0rYA0Shsy6KWc4y7zd5M53FLUU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:ce:e6:d2:1b:4d:9f:3e:1e:a2:8c:3d:58:a4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Oct 28 12:00:21 2025 GMT
Not After : Oct 29 12:00:21 2025 GMT
Subject: CN=b960036b0d47526df39d19b63a2013955b458525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:79:00:b0:ba:d2:3f:cc:93:67:96:41:44:
33:8c:8d:d9:30:1d:5b:74:69:cd:5c:3f:25:4c:8c:
a5:70:87:08:95:d7:52:ee:cf:ec:23:5b:db:5f:21:
23:e2:17:1d:58:79:ec:82:ec:6f:8b:28:a8:30:0a:
6e:c7:fe:e1:8d:ad:26:17:f6:98:97:0e:21:93:a7:
fb:45:30:ef:5c:39:02:66:02:23:e8:2e:ac:42:f1:
1f:1f:b1:28:b5:40:2b:18:82:2a:f0:8d:31:40:46:
dc:ba:1c:ca:80:c9:43:be:95:f6:c0:70:9d:46:a1:
a3:1b:c2:01:a0:62:33:eb:40:39:96:7f:b4:6f:b2:
f9:bf:4d:08:33:85:fc:5f:9f:eb:2b:b1:3e:43:9d:
0e:39:a8:b3:61:fe:e9:fe:a2:56:32:bf:1f:c9:e0:
24:ef:9d:7a:bc:1f:3a:1b:99:45:06:93:16:ec:42:
77:32:1f:fe:ad:52:a1:2c:f2:bd:c1:a1:82:e2:db:
19:8d:61:e1:66:4d:40:89:f0:41:2c:17:1e:26:25:
7d:20:30:38:91:04:77:a6:20:1f:c8:d5:97:c4:b2:
4c:e9:ed:76:36:f4:a8:a8:58:41:67:ef:78:f7:70:
38:df:dc:cc:e7:42:0e:fe:d6:87:f0:c4:58:a0:f8:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:03:6B:0D:47:52:6D:F3:9D:19:B6:3A:20:13:95:5B:45:85:25
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:88:20:90:f2:27:ca:80:fa:78:60:66:9f:e3:1d:83:c9:81:
74:d5:65:3c:9c:69:20:87:aa:27:4d:41:b5:51:19:ee:64:c8:
1a:77:2c:e1:2e:4b:35:f1:65:81:78:95:0f:a5:80:37:ca:05:
57:9a:47:ea:bf:a7:13:18:d6:bc:19:28:f5:80:ad:ea:cd:3b:
b3:c0:c9:00:43:cd:b6:30:8d:15:05:41:38:eb:cd:0a:2f:a4:
f7:e7:68:fb:f1:1e:68:05:bd:4f:5b:99:72:84:32:a7:59:72:
ae:aa:c6:04:af:72:f1:4d:da:b6:4b:85:ca:48:10:38:3c:8d:
1a:5d:76:5d:d0:dd:0e:a8:cf:53:4d:1a:a0:cb:cb:04:ec:ac:
83:a8:14:80:fa:28:f4:98:29:51:7f:45:d2:8b:5b:53:06:d8:
d9:85:73:11:f2:00:09:62:ea:08:ed:f9:10:af:7c:67:d0:a5:
ca:6d:d3:a7:b5:7d:96:c9:a8:b6:ae:a3:f3:e4:cf:b7:a7:cc:
86:4c:e8:52:69:bb:b4:3f:b0:97:b5:57:2a:da:53:b4:c7:5a:
8a:3f:f2:32:e5:32:9d:38:89:f0:84:7e:47:02:84:c2:6b:68:
9a:46:b4:c5:71:ca:35:1a:cf:d3:c3:26:4f:8e:16:b3:7e:eb:
d6:a7:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:13:48 2025 by rpki-client