Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: 3E1X2rchTkAI3mGWx9T/6Gy9YypcvVeP671rLGI+w7k=
Subject key identifier: F2:7E:9C:21:05:CC:E6:23:5D:5B:58:FA:60:46:FB:F0:4B:79:67:4C
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 019A02235564190129623618E5758ADFFB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 15:01:01 +0000
Manifest this update: Mon 20 Oct 2025 15:01:01 +0000
Manifest next update: Tue 21 Oct 2025 15:01:01 +0000
Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: 9vcl98j53OePnygPghXTM76+j+PjLIsrlWzoWYjhxQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:55:64:19:01:29:62:36:18:e5:75:8a:df:fb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Oct 20 15:01:01 2025 GMT
Not After : Oct 21 15:01:01 2025 GMT
Subject: CN=f27e9c2105cce6235d5b58fa6046fbf04b79674c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b2:36:aa:2a:ec:7f:a3:0a:00:e7:76:6a:70:
7b:c4:68:1b:f9:b4:13:7e:f8:2a:c8:e3:d3:55:31:
c5:5d:79:3e:97:35:7d:77:fa:d4:12:6b:ec:e9:26:
35:0d:32:5d:fa:0c:4e:33:ab:f9:64:27:6f:1e:68:
77:8a:0f:19:ce:52:65:94:19:e4:43:cb:d8:93:bb:
81:e6:34:36:81:89:7a:5d:7f:88:88:38:a8:5c:22:
72:d9:d9:77:ac:84:cb:a3:64:e4:63:8a:c2:90:c5:
55:ba:24:38:be:2f:34:ed:11:c9:25:f9:1d:0e:c8:
fc:35:b1:d4:b9:65:7a:bb:b8:b3:e8:59:cf:44:aa:
8d:a1:7d:3d:af:97:18:15:ff:35:58:18:5b:57:a9:
2e:73:57:4e:bb:2b:e2:31:8e:b5:61:99:59:c6:7d:
6e:e1:91:37:ad:d7:5c:8b:6e:3d:cd:7a:e3:4e:f7:
6b:63:69:99:75:9a:88:9c:82:82:c3:9d:72:d5:68:
ad:98:e5:f6:bc:47:5a:e1:60:10:aa:a3:87:b2:70:
5d:66:fb:50:80:98:d9:32:6d:a1:e7:c1:b8:61:7f:
ab:cd:78:43:f7:cc:94:44:7d:e9:f1:5b:15:d9:d4:
34:a5:e2:a9:4a:73:99:fa:28:e0:3c:90:8e:4e:df:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:9C:21:05:CC:E6:23:5D:5B:58:FA:60:46:FB:F0:4B:79:67:4C
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4f:88:ad:b1:0a:56:ec:cf:b0:42:a5:ab:aa:05:a9:c2:e5:
18:6e:21:72:b5:b7:ed:63:77:2e:f7:72:03:08:70:83:93:1f:
1a:2c:8c:dd:f3:f2:b9:72:d2:5a:4a:63:b5:00:2c:b6:3c:1d:
bc:50:ee:b9:c7:da:2d:59:a2:e6:60:03:3f:83:9f:0a:8a:b4:
fb:dc:27:c9:a1:00:97:f0:9c:16:6e:69:4f:52:08:f3:17:01:
c4:16:89:b6:15:48:9f:14:0a:ec:35:aa:ce:30:8d:61:06:07:
ba:d8:20:5e:88:ea:78:64:70:42:ee:34:c9:c9:36:60:4e:3e:
34:80:19:76:ef:82:8c:c9:78:3f:d7:db:65:78:54:39:e3:e5:
e4:7e:5b:b7:04:2f:c4:b0:86:31:66:1f:b6:d0:23:8c:8a:e4:
93:37:82:0d:53:9a:4c:19:77:96:ec:44:37:05:35:7e:13:07:
d7:6f:3f:f1:2f:f9:6e:fa:70:99:bd:54:7e:7f:99:a0:3b:76:
c8:04:c3:bd:87:6c:72:99:fb:84:b8:5f:0e:ce:86:95:7a:17:
f4:c7:25:e8:65:e0:54:6e:89:6d:ec:c8:ac:b7:94:9d:7d:e1:
0a:17:1c:4f:21:28:b4:4d:f7:9c:e5:dd:c1:4f:8e:f7:40:fd:
ad:52:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:17 2025 by rpki-client