Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: mMXqd3AFCu3pMcr/+hiUxgYqEJiBO9aV/EOjh3vtNcI=
Subject key identifier: 69:98:DA:0D:00:EF:7A:C2:7E:0C:5B:F5:2D:FD:39:3B:A8:8C:49:D1
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 019A07EDD180E35F24D649470EFDA954A515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 16ED
Signing time: Tue 21 Oct 2025 18:00:17 +0000
Manifest this update: Tue 21 Oct 2025 18:00:17 +0000
Manifest next update: Wed 22 Oct 2025 18:00:17 +0000
Files and hashes: 1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: t/tLgUpV8xbLOvrMrpI0PFo/5WekokKupTKWeOugbsk=)
3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ed:d1:80:e3:5f:24:d6:49:47:0e:fd:a9:54:a5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Oct 21 18:00:17 2025 GMT
Not After : Oct 22 18:00:17 2025 GMT
Subject: CN=6998da0d00ef7ac27e0c5bf52dfd393ba88c49d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:ac:e7:32:f0:f7:6a:e3:cc:5f:8d:2a:66:
6b:16:f3:a1:b5:82:3c:11:b2:d7:cc:ad:d7:0d:7f:
2e:db:cd:e9:1e:46:0c:47:10:69:bd:9b:13:d0:09:
90:2c:3c:28:32:2a:e5:fe:eb:a0:d9:61:36:fd:7e:
4b:66:fa:c7:2c:15:ae:e7:f0:0a:51:5c:8f:50:97:
87:32:a0:10:10:bc:6b:c4:d7:57:7d:f3:13:e7:45:
e6:83:16:39:45:75:20:6f:35:a4:47:1d:3c:df:b3:
62:5f:9e:b6:5e:5d:1b:35:55:45:5a:fe:23:77:37:
31:d8:7b:5f:94:a4:d0:70:a2:68:15:e5:ba:1c:52:
e2:1d:41:95:5c:7c:de:dc:74:88:72:34:ed:b6:26:
86:a2:07:dd:36:ac:3c:2d:02:0d:71:f0:cf:52:0d:
cb:72:1d:20:c8:6b:af:0d:8e:ba:42:79:d9:c9:a9:
7a:ba:e6:a0:a9:6d:90:c5:86:2a:10:1f:d1:ad:0b:
f0:f0:01:4d:5d:e6:a4:be:10:4a:9e:f7:33:a2:63:
49:31:49:af:74:51:3c:e5:b6:f0:a1:f3:04:e2:2a:
0e:41:27:1e:04:7d:aa:18:3f:06:ef:98:54:57:55:
cb:44:b0:a8:c0:7b:e8:42:0a:4d:03:4e:fb:9b:b9:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:98:DA:0D:00:EF:7A:C2:7E:0C:5B:F5:2D:FD:39:3B:A8:8C:49:D1
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fa:35:25:f2:c0:8f:e2:4b:15:a5:f5:2f:8e:1f:08:25:9a:
88:cc:a2:9a:7b:75:20:78:e4:e0:70:48:38:35:c4:d0:04:0f:
1e:72:8f:46:80:14:5b:61:6c:c8:c0:06:28:e5:44:aa:53:d5:
51:65:2c:bf:92:f8:86:68:3b:03:43:7d:2b:de:a4:31:d9:13:
8b:dc:22:cb:17:50:37:ba:59:97:98:fb:b8:cd:ad:6d:ff:e0:
f4:b9:15:89:f2:a4:fd:27:4e:f2:9e:1c:c0:ad:8a:77:f0:b0:
ae:63:cd:cf:f7:52:0e:88:6e:d8:f9:d7:86:16:24:39:2a:6d:
0c:fc:59:07:f5:db:6c:a9:76:91:93:6c:4d:1b:56:d2:1f:58:
d8:4e:dd:0b:b6:27:af:d6:63:c6:27:16:73:1d:53:00:ec:ba:
91:75:b2:85:73:63:87:d5:07:c6:e9:31:5a:d5:d9:f2:11:f5:
ec:61:d8:0d:12:9a:36:b3:00:c0:21:c6:0a:6e:94:f4:5a:6b:
fd:a5:c6:af:b0:6b:36:d0:d8:55:0a:c0:8e:9f:e8:38:e9:4b:
30:18:37:8a:22:09:56:eb:a8:e6:51:0b:8f:4a:65:d8:48:49:
1c:92:0f:b7:8a:12:b7:8d:46:3d:57:c5:2b:1e:22:9c:c2:01:
6b:ce:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:13:33 2025 by rpki-client