Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: 8i8Xspf/8Z5YM0EOmQ2oHgTyRB7lPMhSsw7po8tqlAU=
Subject key identifier: 1C:01:F0:B7:29:38:C0:BE:AE:A1:A9:02:7D:17:C0:8C:81:81:CA:0E
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 0199FEEBCC08B5E9A1F375992614622AB0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 16F1
Signing time: Mon 20 Oct 2025 00:01:30 +0000
Manifest this update: Mon 20 Oct 2025 00:01:30 +0000
Manifest next update: Tue 21 Oct 2025 00:01:30 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: I5z4feoKk2QvPR+zotEUA65L507S8nDQuIHuButFG+c=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:cc:08:b5:e9:a1:f3:75:99:26:14:62:2a:b0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 20 00:01:30 2025 GMT
Not After : Oct 21 00:01:30 2025 GMT
Subject: CN=1c01f0b72938c0beaea1a9027d17c08c8181ca0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:f9:fb:1f:47:73:38:30:84:4b:94:69:4d:
cd:46:9d:a3:34:2d:ae:82:5b:03:d6:07:8a:c9:c9:
39:30:50:02:eb:f6:84:07:93:e9:82:2a:1f:70:43:
df:4e:78:6f:e4:d7:c7:fb:a1:63:c7:09:6d:73:95:
9c:fd:1f:21:7b:7e:0c:03:cb:e0:89:35:fa:7e:d3:
b7:99:a0:0f:7c:6a:aa:46:e1:96:be:69:21:0b:71:
be:90:ba:84:08:19:07:85:d1:13:b8:92:6e:46:e5:
6e:87:b8:0c:2f:e9:c2:71:3f:73:36:fe:f9:5f:69:
05:b6:a8:6d:b2:ec:f9:8b:9e:f4:b7:68:ce:9b:6d:
21:65:f0:2f:4c:89:7c:fa:cb:7a:91:f8:3e:10:5a:
10:62:5b:dc:37:ef:b2:a8:0a:f9:84:d3:14:38:a1:
f3:02:f1:ad:5b:cc:6b:49:d5:62:df:87:47:d1:02:
c4:54:bd:27:83:0a:76:c7:d4:2c:42:09:29:05:91:
3a:be:88:d3:6e:2f:a7:ab:7f:2d:0d:07:50:ec:60:
01:7d:5e:02:52:bc:c1:f8:d0:bf:cd:2b:6d:05:47:
43:3e:f9:51:c0:2a:8b:08:64:66:c2:85:6f:85:83:
de:c0:8f:1b:2f:5b:fa:4c:82:99:7a:e6:7d:a0:34:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:01:F0:B7:29:38:C0:BE:AE:A1:A9:02:7D:17:C0:8C:81:81:CA:0E
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5d:f3:7a:b1:e8:e4:f8:ab:82:e9:e6:e1:02:97:4b:f5:d2:
e2:83:41:ae:68:62:68:10:cf:1e:fd:5d:f3:d9:04:71:51:b4:
a2:21:17:b4:40:b4:a6:08:d8:8b:b6:f9:28:f0:3a:56:ef:8f:
53:94:22:c1:ae:ba:bf:6c:4e:0e:5a:05:e4:62:85:9b:f4:46:
ad:1d:65:76:d8:aa:f7:36:2b:05:a0:92:19:dc:6f:c7:c7:ce:
86:bb:12:c9:09:04:f2:f4:c6:e1:7f:1a:22:fe:84:0d:77:c4:
92:a0:1c:71:5c:38:71:55:88:9c:f8:71:ca:58:a5:48:3d:27:
96:5d:c4:37:33:57:80:8e:0b:2d:2b:33:b1:56:9d:18:19:ff:
91:7c:fc:81:2a:6d:66:f8:b3:5f:ac:5b:4c:db:06:a0:dc:18:
68:e3:94:f9:8f:7f:33:f3:b9:95:5c:ee:d9:aa:3f:19:ee:69:
5a:c7:45:f8:15:ae:00:5a:5f:51:e2:f9:f4:67:a9:68:d5:96:
c7:19:c9:b0:c9:2c:db:4a:68:40:7b:9a:c6:11:b5:18:de:12:
be:35:5d:e4:8e:d4:71:76:66:8d:d6:51:8b:c2:ea:14:48:96:
cc:fe:3f:bc:e1:af:31:0c:23:96:3f:00:13:b8:f8:9d:25:32:
49:0b:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:56:51 2025 by rpki-client