Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: zncODyoHrME6FoAOVKJkSZ7wzfn3mM+m52zNijE2hA8=
Subject key identifier: 1E:9F:77:FD:18:3B:B6:76:0E:0C:4D:23:14:85:1A:1C:E4:83:96:49
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 019A228AD248016BB94B91E3F9BAD157020F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0E17
Signing time: Sun 26 Oct 2025 22:01:54 +0000
Manifest this update: Sun 26 Oct 2025 22:01:54 +0000
Manifest next update: Mon 27 Oct 2025 22:01:54 +0000
Files and hashes: 1: LYrINpBkGiqMBKci7kDEkT4clMM.roa (hash: rpmajg0c6Lkm2tGH4aWf1gD3QwFb6C9vHxZey3xWrlo=)
2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: pemg5qhD8HulW+w4C0o5+/5Bn0Kq5HYWpyn+8Lx2wxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:d2:48:01:6b:b9:4b:91:e3:f9:ba:d1:57:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Oct 26 22:01:54 2025 GMT
Not After : Oct 27 22:01:54 2025 GMT
Subject: CN=1e9f77fd183bb6760e0c4d2314851a1ce4839649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:97:e2:95:ac:7d:3e:9f:6c:e9:2f:93:19:
2c:83:70:67:1e:b6:55:55:a4:de:75:4a:05:99:80:
ca:57:50:cf:70:7e:2e:2e:c2:84:0f:31:65:32:70:
d8:98:b1:cd:c7:ca:78:e0:72:62:fd:24:54:df:4c:
b9:91:6b:7e:5c:75:e9:5b:8d:4c:4f:ff:b1:31:32:
73:8e:c7:cc:8c:39:b0:a9:85:30:74:ea:91:ab:d9:
21:f0:28:fd:8d:e8:69:a9:3f:52:9f:fd:a8:98:a1:
00:1b:8d:99:58:12:14:0d:c9:13:c5:32:bc:f2:67:
fa:4e:d2:c2:69:a9:54:f8:44:52:e5:7b:ad:6c:d9:
c2:59:6e:d1:2c:b2:c3:c1:31:c8:75:16:ed:3a:bc:
75:25:3b:77:73:a7:af:62:60:75:fd:2d:6a:c3:6b:
3b:7f:0d:34:fa:9e:0c:b4:38:dd:f7:4c:41:c5:f4:
ba:12:56:26:b3:e1:05:8b:06:e6:a6:5a:0a:84:44:
53:ae:07:8d:06:c0:2a:34:fc:9b:af:4f:02:b6:e2:
9c:b4:a0:0a:13:7b:f2:f3:11:d4:55:c7:51:b1:74:
6d:72:51:ca:c9:4f:b5:56:ab:eb:ab:2d:e3:71:7b:
cb:6d:e7:66:c8:20:26:77:d9:4b:66:87:ff:88:88:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9F:77:FD:18:3B:B6:76:0E:0C:4D:23:14:85:1A:1C:E4:83:96:49
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9a:cd:a6:04:c5:a8:27:97:b7:08:57:83:44:0a:dd:4e:2f:
32:bd:26:4d:2e:b0:24:76:2c:e7:89:22:30:b6:15:e1:02:4e:
fc:89:de:c9:8c:07:a2:b0:dd:2c:d9:91:65:d1:c1:9d:a9:81:
cf:cd:37:6a:a5:1f:9d:c2:fd:c1:64:05:d6:58:7f:70:72:19:
de:20:3e:1b:37:f1:9f:be:9b:49:f1:33:6e:45:de:59:86:84:
63:37:c5:5b:81:c7:90:15:ff:95:d5:71:f6:2d:eb:5e:9e:5b:
c8:bf:33:06:10:cc:40:22:74:bf:d4:82:c6:ee:8f:54:14:35:
45:19:27:16:6c:7d:50:b3:16:f0:c3:be:bd:cc:b6:56:0c:bf:
1c:70:c0:55:29:76:f0:9c:f3:f9:ac:f3:cd:c5:36:0d:cb:7b:
d9:8a:71:12:20:9a:86:bf:85:0b:49:db:f3:0c:10:80:7c:60:
0b:2a:4a:fc:0e:73:dd:52:41:f7:52:ac:ae:15:f7:0e:38:5e:
4e:8a:ba:de:42:a3:2b:fb:da:19:f7:8e:56:d3:11:3f:50:97:
a9:15:96:50:27:21:f6:4f:c8:50:54:96:27:3a:f8:a5:b3:df:
0a:2d:71:e5:24:f6:77:0a:7b:dd:d9:10:6c:25:ab:89:3f:01:
2a:08:50:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:41 2025 by rpki-client