Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: X1ISMY4SkSqev+qyhw4QIuw/ZztFh/4RCh9GVCqM2dE=
Subject key identifier: DF:EC:10:96:A5:A5:0D:66:F9:1B:80:D6:99:8A:A3:C3:A5:2C:59:64
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 0199FD341AEB45C00BB3CD5036271BC08047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: m+tKumN2TKhHyRrk1CbWQe6MzOVvGPv2qrgSi+NmeOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1a:eb:45:c0:0b:b3:cd:50:36:27:1b:c0:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=dfec1096a5a50d66f91b80d6998aa3c3a52c5964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:1f:75:4c:f1:4b:69:72:1a:38:14:ef:96:
9c:ff:24:17:96:c3:60:2b:ec:23:01:2d:07:23:87:
a3:c0:7a:41:b3:08:7f:9b:f3:63:36:23:9f:99:06:
3a:af:c5:3a:24:94:4c:dc:45:5f:30:e3:b1:98:f5:
f2:f7:5f:a7:cd:c2:46:70:9b:a4:00:11:aa:79:e2:
29:a0:29:3d:be:e4:a2:78:96:39:3d:bb:42:ef:ca:
3e:f8:d8:a3:8e:63:ab:f7:f4:5a:0d:27:15:22:4f:
c5:4b:a0:89:79:ce:f7:4c:f5:be:fb:8f:0a:cd:3e:
ca:03:68:47:f9:a9:4e:e0:f4:b3:78:76:4d:3f:9d:
c9:2e:b1:a8:bb:97:15:e2:7e:7b:d7:25:c9:75:4f:
b7:e9:96:cf:ec:07:26:09:94:6a:3f:3b:a4:9d:f7:
a9:ec:3c:c9:f1:02:b9:1c:c4:2a:7d:ad:a8:99:4a:
82:07:44:11:8e:c6:cb:ae:a4:2a:af:ba:c3:a5:20:
6a:6b:9f:1a:e6:15:a6:af:eb:a7:25:02:05:30:05:
f7:02:68:bf:7e:b6:7c:94:44:56:ec:47:ee:76:8c:
e1:aa:be:5c:12:2c:5a:15:86:0f:3a:a7:fd:89:74:
c7:61:1a:82:15:15:58:68:4c:e0:d2:cf:b4:8b:4d:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:10:96:A5:A5:0D:66:F9:1B:80:D6:99:8A:A3:C3:A5:2C:59:64
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:32:18:f4:8a:e7:ad:a2:45:b8:db:a7:62:db:36:e3:c3:1a:
a0:8c:f3:c1:55:e7:3d:5b:75:b0:1d:1a:fd:5a:b6:06:f6:68:
fc:99:1b:c4:5d:26:1d:3d:7e:56:3b:27:0b:6a:ec:ab:23:c9:
9e:82:8e:ba:e9:ec:04:76:00:d0:c0:ec:4a:35:a7:f0:22:cb:
dd:ee:ac:bc:e0:e3:dc:24:b4:fa:c8:30:1f:dc:fc:a6:46:93:
e1:78:82:c9:a4:8a:49:85:54:cb:e9:db:b8:84:96:2a:52:9f:
d5:94:22:b1:51:a5:63:ce:09:21:83:bf:d6:8d:58:78:c1:1c:
71:7d:32:e6:d2:fa:a3:39:de:d3:36:98:28:ee:85:fc:e0:2d:
22:0b:3c:d9:fc:8e:26:7a:f7:f9:e3:ae:56:5b:3c:7f:16:68:
77:9a:89:8e:24:d7:b2:39:9a:d9:87:bd:06:03:25:28:65:00:
39:99:c6:24:06:8f:35:4b:b2:a6:99:4e:64:d6:a3:4b:e7:64:
db:20:de:2f:96:b3:f0:a8:40:a9:69:d6:16:f6:97:95:3f:5f:
ef:d2:6d:13:63:06:a9:44:55:da:6e:5f:f7:95:fd:30:97:7d:
f3:c5:f0:42:6f:53:87:c4:f8:11:03:af:8d:79:b3:2f:77:bd:
5f:22:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:36 2025 by rpki-client