Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: FDM3OztU7EcmjewY1/bkQtg4hrceUqWY70kPpouMSVU=
Subject key identifier: 49:66:F6:EE:87:C8:FE:B8:76:B8:F1:28:9B:E4:2B:FE:04:AE:57:01
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 0199FDD9441FCF5D01808F02366851CB2425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:38 +0000
Manifest this update: Sun 19 Oct 2025 19:01:38 +0000
Manifest next update: Mon 20 Oct 2025 19:01:38 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: hI903S9Y9ct81+20LBCQGno29Z+lDrkt+hPA4dbz5ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:44:1f:cf:5d:01:80:8f:02:36:68:51:cb:24:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: Oct 19 19:01:38 2025 GMT
Not After : Oct 20 19:01:38 2025 GMT
Subject: CN=4966f6ee87c8feb876b8f1289be42bfe04ae5701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:6c:8e:82:90:b0:79:90:3e:e0:40:af:d6:
64:64:96:b1:4d:24:8b:9e:92:20:50:16:7d:f4:aa:
70:c1:36:7b:57:47:71:d0:17:ad:98:71:ad:57:3a:
95:ba:d3:d7:6a:9f:04:cf:a2:ec:b5:a9:3c:fe:b8:
77:63:12:cc:eb:5d:1b:38:af:40:bb:da:e1:04:17:
d3:51:c8:dd:51:b2:04:f3:92:dd:52:09:58:50:a3:
05:b5:7e:ec:21:9d:f9:5d:88:a2:d6:ec:f2:17:cf:
37:3d:dc:b1:56:25:05:1f:d6:8f:a8:0a:60:f3:68:
21:7a:fd:83:49:17:b3:20:09:02:2f:6e:1a:04:de:
74:7c:21:80:e2:19:cb:18:b6:86:e2:c8:a2:c9:b2:
9e:e1:f7:04:98:c5:6d:bc:48:0e:10:ec:31:2f:6f:
6b:cd:a6:1f:76:d6:53:c2:61:5a:fe:3f:2c:9d:28:
f1:db:e0:f9:e4:15:ec:f8:d7:e9:5d:a8:c4:e4:0a:
2a:e1:ba:a6:a8:e6:89:58:c1:c2:75:e6:95:2b:e3:
fe:9c:ca:27:76:33:aa:7c:41:27:2d:04:65:12:60:
a7:ed:a8:41:48:1e:c0:61:d8:17:f4:1c:86:ed:03:
fd:f1:11:03:b7:d1:34:c0:ba:2b:b4:32:1a:33:9b:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:66:F6:EE:87:C8:FE:B8:76:B8:F1:28:9B:E4:2B:FE:04:AE:57:01
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6f:0b:d7:53:fe:37:6f:3e:30:44:51:e4:3a:cf:d4:f1:67:
58:8c:56:a2:c6:b3:a9:0d:26:98:d3:96:16:3e:2d:cc:37:cb:
e3:25:14:87:17:1a:e8:c8:4e:a8:0e:d8:b1:60:8e:03:39:51:
26:71:15:9e:7e:9d:a0:d1:cf:bb:ee:23:ad:1c:2e:5e:cc:16:
f2:a6:05:37:5c:26:a0:2a:cc:a3:97:53:cc:c5:3b:d5:ba:03:
5c:04:2d:27:c8:24:de:dc:68:98:fd:1b:d3:c2:e0:8b:4a:f3:
be:73:a6:82:1a:2e:05:84:bb:0c:97:77:06:57:8e:81:19:cd:
ae:c2:02:24:fc:ac:11:03:8e:89:b8:10:1c:b5:1f:d3:6b:11:
ad:12:f3:a9:68:13:da:1f:f4:15:81:07:86:37:ec:2e:d4:e3:
13:9b:27:6c:78:e1:38:0c:9d:90:c2:dc:6c:b4:9e:ab:03:8f:
31:46:58:c8:d0:25:cb:04:d8:e5:e0:4a:25:d7:9f:fb:1c:ef:
34:ce:39:65:c7:4b:c9:4b:70:4c:73:c2:30:ee:e0:b1:02:bf:
d4:5b:2c:64:68:94:28:72:b0:b3:16:53:45:59:68:02:df:a5:
19:da:d6:a3:4b:0b:9e:02:74:b8:d8:60:f2:27:64:0e:d0:28:
4f:b8:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:05 2025 by rpki-client