Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: 03eofe+hJU6k2x2L4sCfpFgjGE/vqzVDHrcrI3KK458=
Subject key identifier: A3:BD:B4:EF:CD:72:FC:83:A0:84:EA:25:B7:CB:9D:B2:AB:6F:29:48
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 0199FE0FEB12EC9D07CCDD4189A9127B3F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0566
Signing time: Sun 19 Oct 2025 20:01:19 +0000
Manifest this update: Sun 19 Oct 2025 20:01:19 +0000
Manifest next update: Mon 20 Oct 2025 20:01:19 +0000
Files and hashes: 1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
2: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: OyBiIl7KpkHU6XEwTBHvy8otpmKPKCtnyns+rUXJS3A=)
3: lyYoYFNGC2A9WNKCueXrm4mkRZo.roa (hash: IZrpJH4Ut/OiG1jPgHzsJ5IYnAXiTXDkQvi3YTSJS9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:eb:12:ec:9d:07:cc:dd:41:89:a9:12:7b:3f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Oct 19 20:01:19 2025 GMT
Not After : Oct 20 20:01:19 2025 GMT
Subject: CN=a3bdb4efcd72fc83a084ea25b7cb9db2ab6f2948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:84:b6:f7:c3:60:aa:8b:09:2d:81:dd:3b:
95:35:23:f4:58:ec:d4:b7:02:7c:39:29:76:bb:6b:
b4:6c:2a:6f:c7:8a:a6:61:ac:14:90:1c:71:d7:20:
66:67:5a:86:98:08:4f:cb:1c:13:1a:74:17:84:ba:
67:73:e7:35:c6:e1:29:da:07:29:13:b5:cd:b9:39:
da:d8:32:25:f0:b6:e3:e9:af:4f:c0:09:14:de:ae:
10:be:ea:c6:c5:84:f5:56:a5:1b:c7:c5:78:65:7d:
9c:4c:76:f2:f0:15:c5:b8:3d:eb:47:3d:cf:8d:5f:
cb:90:0c:84:4e:77:7e:13:6a:f9:d4:66:e4:a9:5e:
94:3d:25:36:b3:8b:52:fd:28:24:4f:6a:09:a3:dd:
1c:46:b5:12:42:4c:9a:cd:94:6e:63:d2:5f:82:2d:
f9:23:1b:99:07:b3:dd:59:3b:35:bc:42:d4:9d:1f:
4a:aa:19:5a:d5:b0:67:56:e1:9d:db:0a:2a:5c:14:
6d:3c:ec:5b:04:8d:7c:55:cc:29:ce:ff:6a:8f:67:
30:e7:8b:15:25:7c:33:15:e6:f4:80:ee:05:d8:fe:
ac:30:fb:71:6f:17:cd:d7:80:cf:bb:5a:b7:e5:e0:
31:51:ca:9a:1f:4b:94:3a:7f:10:17:14:48:0f:15:
20:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BD:B4:EF:CD:72:FC:83:A0:84:EA:25:B7:CB:9D:B2:AB:6F:29:48
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b8:8b:f4:72:7d:65:32:21:8c:68:17:f0:0a:ba:7a:91:35:
55:15:d6:ee:d4:3c:16:ec:32:7b:9c:0c:c3:9e:7b:af:e6:2b:
49:d8:74:23:16:31:56:af:d0:75:5f:3a:8c:fe:93:bc:9d:5f:
f2:77:8c:6d:df:7e:80:20:0a:b3:86:d7:1a:75:8d:cf:30:8e:
5c:11:b8:e4:e4:6a:b8:77:ce:26:76:47:9c:22:28:31:ba:80:
ae:b7:0a:7f:61:30:46:85:29:be:29:49:f3:0d:8a:46:47:25:
19:47:ca:f9:f4:f1:64:e8:24:5e:df:0f:d5:d3:a8:98:1f:5d:
59:32:01:79:41:35:17:cd:8a:e8:34:cf:13:4e:09:aa:4b:34:
32:e5:92:a5:35:56:9a:3e:60:63:3a:c8:91:47:6c:85:bf:43:
f3:aa:0b:8e:60:86:9e:a1:aa:19:79:7d:dd:1e:e2:e1:e5:74:
0a:e1:f8:5f:e5:85:20:ee:b1:71:68:12:b6:19:9d:95:ff:4f:
dd:ea:8a:9a:73:0e:d8:ed:17:5d:91:95:c2:a1:5f:95:62:a6:
e0:11:74:1d:9f:57:cb:49:4c:96:41:68:46:51:2d:99:91:77:
61:33:b9:cf:c8:24:88:78:b8:f9:be:92:0a:d0:0d:55:21:a9:
c1:e9:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:51 2025 by rpki-client