Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: BXfvP58sLWIkq8+RVoBXhcjdr/Fr69+WDg+vR1v4U5I=
Subject key identifier: E2:94:B7:44:86:AC:6F:FD:5F:16:C7:16:17:10:19:50:4B:0E:EF:DA
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 0199FCFD274805C361B2ACC297A2EF02BCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1531
Signing time: Sun 19 Oct 2025 15:01:13 +0000
Manifest this update: Sun 19 Oct 2025 15:01:13 +0000
Manifest next update: Mon 20 Oct 2025 15:01:13 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: CvtDfwfMxt4lbjwFtnnNq7Hjn9t1E5mUeMdAGfreG5k=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:27:48:05:c3:61:b2:ac:c2:97:a2:ef:02:bc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Oct 19 15:01:13 2025 GMT
Not After : Oct 20 15:01:13 2025 GMT
Subject: CN=e294b74486ac6ffd5f16c716171019504b0eefda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8b:bc:f6:06:9f:d3:03:90:c7:cd:2d:2d:3e:
aa:c7:7d:78:80:9e:f9:e4:f7:6b:40:94:a3:88:ec:
6c:8b:30:8f:23:e3:83:e3:9d:3b:ed:3e:49:03:78:
20:8e:76:48:5d:ca:bf:bf:84:33:eb:a4:61:ca:29:
1e:5c:07:bd:ee:ee:6b:aa:fe:08:0c:f2:7c:1f:75:
aa:ea:80:e2:52:8a:9b:bd:61:43:b0:25:89:09:9e:
f5:73:bb:d1:46:92:d3:84:38:70:7a:01:a6:2f:1a:
ae:89:40:29:11:5e:d6:b6:dc:a9:d9:18:9c:0e:b3:
26:5e:9c:fe:78:5d:b0:ed:57:4a:83:d9:f6:58:4c:
d9:79:f8:61:2b:18:a0:dd:83:ae:27:f6:e1:a3:64:
c3:f1:21:41:80:b0:67:6f:f9:bb:1e:28:e5:d6:b8:
6b:bb:59:4c:05:ad:36:6a:0a:5b:d2:9f:51:46:63:
19:a5:16:78:25:f2:f3:7b:32:bd:17:ac:1e:dd:f9:
ee:4e:eb:1f:60:26:dd:e0:6c:90:e0:51:2f:f1:f0:
36:b3:78:bd:9f:93:0d:4e:79:8c:6f:f4:dd:91:22:
91:bc:90:3b:f5:cb:1e:0b:fb:ef:c3:eb:cb:59:7f:
42:38:db:c4:05:31:f1:db:c0:7e:e7:10:91:7d:ea:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:B7:44:86:AC:6F:FD:5F:16:C7:16:17:10:19:50:4B:0E:EF:DA
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e4:ed:a1:7c:2a:b4:90:8d:8b:8d:80:f7:2d:11:ba:6b:8c:
49:9b:a6:8e:3a:bc:80:1a:8a:91:4d:c8:54:f1:c2:44:83:2d:
d7:55:90:cc:2c:09:63:9c:a0:69:83:39:64:93:ef:6c:22:97:
69:6c:c2:6b:d0:ed:08:aa:6b:67:9d:17:e8:15:f8:f9:45:57:
67:0e:bc:e8:5b:de:87:c4:9d:46:42:5e:9f:de:b9:b9:77:59:
11:86:c7:f8:66:24:b2:f7:4c:0d:fa:d0:4c:3e:94:ee:86:5d:
a9:93:01:1a:b1:e3:85:f5:8b:50:0f:42:f9:0f:81:07:2b:0f:
2a:e1:e5:aa:50:dd:2c:2a:ad:69:8b:18:02:51:82:0c:55:8b:
68:9f:3c:c6:35:e5:81:32:5e:ae:eb:9f:fd:b5:ac:5d:2d:e0:
40:af:c7:14:cb:78:b6:0b:83:40:6a:eb:6e:9c:b3:5c:b8:67:
e2:49:3f:07:2b:d5:d3:dd:cf:d7:78:80:57:d2:59:94:89:59:
63:99:84:0d:98:d7:e7:2d:bc:1c:90:e4:4b:30:2e:93:35:ef:
10:ed:c0:c5:bc:b2:c5:90:d1:69:b1:67:7f:35:80:46:90:c6:
e4:58:12:3c:48:6f:7a:26:18:99:e6:a5:a9:32:8a:c7:38:44:
e9:13:f9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:16 2025 by rpki-client