Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: vOaX2Qvi/XWcajJziKnsgyFe1HbxsAPY8rpOD1QU8FM=
Subject key identifier: 93:01:20:EC:43:BD:85:15:E6:26:5F:C5:C4:77:F8:C9:61:39:82:A7
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 0199FBEB0E978D53ECECCD7C06D39407D982
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: 0369
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: FQG0ejLSzUt4iA-ikpx0cAR2OKU.roa (hash: kXmpv8tYACCxfjQibnimCHCR1m+/Ufm2bbWZrvhXv8Y=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: jBw5Yy60Wcgng5ISXoGXeoDhmxfnoj1/a3p+N8/rf3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0e:97:8d:53:ec:ec:cd:7c:06:d3:94:07:d9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=930120ec43bd8515e6265fc5c477f8c9613982a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c4:8e:2f:6c:16:ca:d6:3f:c2:f2:6b:92:45:
92:c0:69:df:86:9a:48:d3:59:4d:e5:f3:e7:aa:5f:
2a:65:7b:26:2d:a0:62:55:83:07:e9:91:99:5b:5d:
78:4c:6f:51:1d:14:a1:59:da:15:af:20:84:9c:5c:
ec:f1:f0:84:06:f8:5f:d4:d2:f4:5f:c9:83:33:dd:
e7:93:59:3f:f9:47:6e:e1:6b:a6:aa:31:0c:69:97:
fa:18:48:f9:f0:ef:1c:e9:4a:e7:e6:0a:82:27:7d:
b6:79:03:f2:e5:9e:f3:6a:7b:2c:39:53:87:52:56:
ec:23:ea:0d:5b:59:c6:f4:e8:7f:4c:68:cc:92:bb:
f6:aa:69:ad:dd:cf:bc:39:4f:12:fd:ec:ee:b0:eb:
6d:6c:4c:79:c1:c6:24:bb:11:f8:4b:4a:34:e2:f0:
97:fd:68:be:80:c4:d6:1a:d6:16:b9:a9:cf:bb:fc:
c4:b6:f2:18:99:83:7e:ec:85:a3:64:8a:f2:38:c0:
a0:10:8c:eb:05:ba:ae:64:b6:52:41:69:97:a8:c2:
ca:74:00:a1:0e:0f:45:91:31:18:13:19:17:80:01:
ea:61:9d:22:f4:68:a5:fa:52:b1:cb:37:e0:b8:15:
01:ce:a1:f7:19:3d:b1:5a:b3:51:94:17:06:4d:53:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:20:EC:43:BD:85:15:E6:26:5F:C5:C4:77:F8:C9:61:39:82:A7
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d2:f0:cc:56:0a:b0:a0:14:b6:a6:47:0b:04:61:6e:3a:c4:
48:b1:1a:f2:f7:f3:ad:08:bc:a8:d8:f5:a9:c4:53:1c:87:47:
8b:8b:3d:c8:83:81:c9:57:3f:0d:a2:1f:6e:fb:bb:ed:07:19:
00:c4:f0:fb:3d:35:9f:0b:fd:65:93:c5:81:08:12:cc:93:7c:
51:22:b5:9c:67:e2:73:c6:3e:36:d1:ef:06:58:37:86:c4:a8:
4c:9a:b9:7e:3e:e8:d1:e4:83:df:05:34:2e:70:e3:88:c8:6e:
a4:b1:e4:2b:e4:21:e8:0a:c6:7f:d5:78:03:b9:15:e0:6b:d7:
d7:09:49:73:75:12:bc:14:8d:8b:a7:fa:67:a5:34:aa:cf:6b:
33:01:80:de:02:de:31:87:5e:9f:dd:e4:75:98:c1:43:3a:be:
21:85:9a:82:7c:e4:76:eb:66:d3:68:bb:08:fc:a6:4c:19:8d:
c3:68:28:10:f8:64:e4:12:d5:de:ec:f4:0d:a5:d9:5a:c5:9f:
67:65:95:e6:fd:4b:99:de:43:8f:76:86:bb:4d:54:ec:79:db:
f1:e7:21:24:7b:7e:62:ca:01:12:23:2f:70:af:60:52:d7:b4:
3c:52:8a:b7:08:48:e4:1e:fd:1f:e5:0f:5d:71:46:3d:98:91:
8e:3e:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:28 2025 by rpki-client