Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: tVsKjl256ANv9+T/SxWA4CKFGRyLm2zermqaifna8jg=
Subject key identifier: F6:6E:CC:3F:DF:E4:03:FD:26:84:AC:77:CE:F3:F7:3D:5B:07:6F:CF
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 0199FE7E2118AECCC546CA1AE77AC40D05D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 22:01:42 +0000
Manifest this update: Sun 19 Oct 2025 22:01:42 +0000
Manifest next update: Mon 20 Oct 2025 22:01:42 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: S14F2z2sdoMHmmBw8jlkcNllfwrnPriiJzqCSwd1c0g=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:21:18:ae:cc:c5:46:ca:1a:e7:7a:c4:0d:05:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Oct 19 22:01:42 2025 GMT
Not After : Oct 20 22:01:42 2025 GMT
Subject: CN=f66ecc3fdfe403fd2684ac77cef3f73d5b076fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7c:7b:ec:54:ec:f4:a4:0c:74:a5:3a:28:bf:
5e:6e:95:c6:7b:a1:fb:ab:de:a4:1b:74:9b:a3:a0:
e3:05:97:9c:4e:ab:28:ef:67:a2:08:f2:38:81:92:
10:4d:b1:e6:f7:ac:a7:b9:ed:5e:db:69:2b:70:39:
bd:a1:21:04:11:2a:f8:aa:36:a2:7c:56:03:17:43:
ab:17:a8:11:5e:86:27:f8:63:80:87:31:1d:e1:00:
24:2f:c1:81:af:11:93:1c:78:1e:3d:3f:c5:cc:33:
7b:c2:b8:14:b7:d6:6c:d4:6f:5b:32:70:96:d3:88:
57:b5:1d:a7:93:a6:46:85:3a:e1:0b:3f:55:99:53:
06:9e:d2:e1:e5:4a:5a:5e:64:37:1b:e0:ee:52:61:
c0:ea:1f:56:cb:33:85:35:a6:e8:0a:e1:e9:70:81:
8b:07:e4:8f:07:d6:13:85:dd:a3:ea:51:d3:76:86:
d3:ba:3a:d6:5f:06:80:7b:7b:1d:21:f4:df:06:0b:
c7:e8:da:5b:1a:a0:3f:f0:7c:58:72:b9:d0:5c:54:
43:24:12:b6:70:17:bc:6b:77:e2:23:e5:3c:72:42:
ee:9f:cf:04:46:26:3e:48:90:59:85:b0:df:84:0e:
33:1b:bd:de:7c:76:2b:0c:12:f1:08:51:b9:81:68:
ff:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6E:CC:3F:DF:E4:03:FD:26:84:AC:77:CE:F3:F7:3D:5B:07:6F:CF
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e4:62:1b:d0:0e:ec:4a:0b:5f:42:f5:5e:93:5d:6b:c8:f0:
7d:72:36:91:7c:1d:b1:34:c2:d4:53:0a:44:a2:42:11:fd:79:
1b:98:89:2b:95:87:ad:a3:38:d1:0d:7c:0f:df:51:e1:81:55:
18:a6:ab:aa:ca:c2:7a:9d:d8:97:04:03:35:84:c8:9e:44:05:
5f:2c:74:bd:c6:40:95:0c:0f:cf:5d:a8:fe:d1:d5:7b:41:1e:
45:37:2d:77:ed:c5:ad:58:74:40:a5:e8:ff:78:cb:e0:44:f9:
a2:b3:c1:50:2b:05:93:b1:db:35:71:e3:46:ca:4e:1b:c4:b4:
fe:d0:06:fe:de:c8:06:0e:7c:e9:81:2f:c9:73:a4:fc:a3:2a:
49:92:50:81:ba:2f:20:f2:54:89:a4:d4:2c:66:c5:92:a5:64:
d5:d0:0f:56:72:ae:5e:d6:ca:63:43:4c:7c:1d:c7:c4:07:ff:
0c:96:78:bd:90:e7:53:1d:12:df:b4:c3:36:cc:6d:d1:4f:e1:
5c:4a:39:97:37:2b:5b:4e:d3:0e:70:16:1a:28:84:09:0c:14:
00:9e:f0:34:bc:17:3b:94:ba:7b:c6:47:c8:c5:43:5d:ec:86:
25:92:5f:b9:34:b2:a6:68:7f:e3:04:56:82:3e:ba:95:47:78:
5e:bf:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:33 2025 by rpki-client