Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier: vrYzLZ1G2ElNy/Z2RQfb5ScmC1mjXM00IqrrbADWt5Y=
Subject key identifier: A1:49:9F:C5:31:92:66:E3:EB:31:B3:C8:03:1E:AB:AD:BE:5F:D8:BC
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 0199FBEAB8E94C9CD6AFB08E88DA76F3CEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number: 05CD
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: SmRs0Hy/OLMKeQBd0ClKqNwqkRhW6M/HaRRF9P84oPE=)
2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b8:e9:4c:9c:d6:af:b0:8e:88:da:76:f3:ce:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=a1499fc5319266e3eb31b3c8031eabadbe5fd8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:47:47:e9:7b:73:ae:2f:b5:0a:98:db:c7:
83:1f:ee:b3:e3:7a:ba:1a:82:fb:85:29:51:86:47:
e7:03:aa:5f:9c:30:3c:5c:46:dc:28:48:8f:0f:ac:
aa:7c:fb:46:5f:f9:24:09:28:6b:e5:a0:f8:9b:6c:
df:55:34:07:b6:2a:84:b6:e5:4b:94:f1:59:92:8b:
d6:5c:de:e1:c4:7c:43:16:d5:85:84:1d:ec:9b:53:
48:94:e6:21:80:84:70:a7:8d:73:95:01:b3:02:bf:
3f:a4:db:c8:65:0d:c8:c8:a7:da:6c:37:4b:34:05:
6f:1f:5f:c1:06:8a:58:16:3f:3e:1b:45:ab:73:2f:
68:a1:6a:6b:fa:b3:10:ec:72:7c:81:c4:fb:38:58:
68:dc:fb:b0:b4:b6:25:03:62:80:7f:6b:74:7a:a5:
55:43:07:f4:fd:f5:d2:96:e0:d2:0a:7d:88:23:bf:
2e:e6:f0:3f:62:a4:0e:ad:bb:af:dd:39:47:1a:31:
e3:a2:b2:24:6b:05:33:70:93:04:f2:9e:05:61:87:
36:a7:12:9b:d9:fe:f9:ae:1f:04:be:ce:d0:36:30:
00:48:e0:16:1b:10:c7:4e:c7:70:af:94:2a:63:b4:
e8:58:0d:58:8e:b0:0c:ed:ac:c8:3b:92:db:9f:c5:
05:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:49:9F:C5:31:92:66:E3:EB:31:B3:C8:03:1E:AB:AD:BE:5F:D8:BC
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:55:83:19:93:0d:9b:12:ba:6e:8a:e8:47:f0:17:4f:ec:97:
e3:26:ad:28:8d:c0:33:28:93:99:28:df:62:8f:d2:09:1a:c2:
d3:e6:03:a2:73:54:8d:2e:7a:d4:04:2a:a8:18:ea:8e:0a:8d:
04:74:dd:07:26:52:61:e9:04:c6:72:65:52:ad:75:e5:49:6c:
43:d2:38:4f:06:48:42:f7:cf:3e:f0:a8:dc:16:13:c9:55:4b:
69:03:32:97:0e:b7:19:e6:48:f5:7f:54:b4:89:b3:ff:6a:f8:
56:7a:07:0f:5c:4a:63:21:b1:9c:ce:70:3e:59:ea:38:d3:57:
36:bc:bd:a8:a8:66:bc:46:3c:af:40:51:4e:d1:87:34:9e:6c:
fc:b0:b0:07:3a:14:13:fa:bc:12:6c:9d:98:3c:f4:6d:d3:1f:
a0:73:6d:92:98:a2:03:26:d8:15:7a:0a:09:fb:09:4d:58:e8:
d7:db:46:05:ae:68:d6:22:7e:2b:47:ca:25:6e:64:df:67:4b:
83:34:ed:71:4a:ed:65:63:2f:b2:ed:6b:44:29:4d:7c:2b:e6:
34:dc:94:0d:e4:62:2d:c1:8f:a2:ca:ba:9b:09:ef:91:2b:32:
99:b6:e9:a4:2c:23:1f:39:26:b2:fe:3d:88:e4:25:a6:83:aa:
c5:09:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:39 2025 by rpki-client