Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
File: QdELiOsk9iYtkxU2il0B4eCGDE4.mft (raw, json)
Hash identifier: 5+6uEnUqFaN7MDaexAraev2mg1icJWI1t3ob9QTjPAo=
Subject key identifier: 04:C8:2D:8D:B3:88:0B:8E:F1:CB:50:66:EF:05:41:39:30:AF:FC:E2
Authority key identifier: 41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
Certificate issuer: /CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Certificate serial: 0199FD6B12B5D0E64B2F796DC8E83101F4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
Manifest number: 0CB9
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: MxIW_z7Ebidq95zbkkCpozAg-qo.roa (hash: Ne9BRTxSbvyD3v1mKUKjrJIdCst7ww6cgLtpKgmPXO4=)
2: QdELiOsk9iYtkxU2il0B4eCGDE4.crl (hash: UCPjHhX3vPpprfHoSo+4s9lRr7z+LWKgKNSgstF7KlI=)
3: iF0hWqV8nyrtwGMxvXkpeZV-Ad0.roa (hash: NsX4Tk5b/sJjbOHt4Xm/gMH0eUzDRvHxvl47C618GF4=)
4: pK_RWKvtbpfARxQqcIN51CNOVR4.roa (hash: gYB8+JoJ6UyQv4AugtpSBUDhjHrwgsXQ9hiZfsU43O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:12:b5:d0:e6:4b:2f:79:6d:c8:e8:31:01:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d10b88eb24f6262d9315368a5d01e1e0860c4e
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=04c82d8db3880b8ef1cb5066ef05413930affce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:b3:3e:46:8e:1d:fd:ce:04:fc:a9:42:f6:
f5:5d:a1:b9:4d:29:9b:c2:c9:40:c8:b3:20:8d:60:
62:de:76:c4:f5:b1:fc:32:bd:49:f2:a0:ab:e5:3e:
05:f6:3d:a1:1f:93:f3:59:7d:80:1a:0b:4b:71:ce:
06:f2:c8:31:87:55:23:a0:e7:aa:31:73:71:d4:b8:
86:d8:90:4e:8c:cd:46:d9:1f:fa:f3:72:d7:52:23:
fd:ee:7d:92:2a:80:b9:f9:28:a1:55:3e:52:c0:f8:
c9:da:58:b8:6a:b9:62:f8:61:c4:65:33:4a:0b:2a:
bd:be:94:4f:9c:d5:f0:6b:14:a7:02:f2:97:eb:fe:
5b:bf:eb:a5:38:51:07:7e:f6:00:91:5c:a6:46:8d:
d1:d2:e2:89:d4:ef:39:d9:c7:9a:0e:3f:20:ae:18:
d9:b5:98:68:1a:98:1a:4e:60:ed:3d:34:fb:27:6f:
f9:ce:80:2f:8a:20:b3:6e:bd:19:c2:99:a4:89:11:
93:37:c9:0a:7a:6a:ac:d2:b2:21:8f:e9:70:73:04:
5d:02:a2:a0:16:c7:1f:79:fa:0b:04:50:36:94:1b:
d6:dc:61:27:ed:71:c8:ff:89:e3:c7:82:5a:6c:1d:
1d:c7:90:c8:92:e7:50:b8:87:1e:66:fe:01:32:94:
7c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C8:2D:8D:B3:88:0B:8E:F1:CB:50:66:EF:05:41:39:30:AF:FC:E2
X509v3 Authority Key Identifier:
keyid:41:D1:0B:88:EB:24:F6:26:2D:93:15:36:8A:5D:01:E1:E0:86:0C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdELiOsk9iYtkxU2il0B4eCGDE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/998786-8719-4d8e-9500-ef97006c450b/1/QdELiOsk9iYtkxU2il0B4eCGDE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e9:35:5d:89:b7:10:1b:a6:05:19:60:f5:00:b0:bf:96:b7:
7a:95:a0:c7:70:93:2d:56:ed:4b:3d:32:5f:85:76:f0:1e:fe:
6f:1a:f0:ee:d9:9e:27:fb:fa:ce:3d:dd:ef:90:4a:1a:ce:aa:
9b:22:4c:15:ab:77:57:17:fe:53:8d:e1:af:e5:63:35:c2:5b:
e4:10:00:72:db:63:3a:fc:16:45:1f:70:55:e1:d7:7f:cc:8c:
53:e3:95:3a:64:cf:37:0e:99:7d:6f:63:cb:dc:d7:60:43:e0:
bf:08:6e:68:b5:b1:bf:bd:95:70:b3:d4:f6:f2:34:0d:38:47:
bc:3e:8e:8b:06:e2:bd:56:8f:65:e8:07:1e:af:26:d2:bd:aa:
c4:88:20:31:51:fd:8f:f6:ff:16:3c:88:f4:18:21:05:15:9b:
0f:bf:d7:62:cb:f9:2a:0c:27:e1:41:5a:f2:82:29:ab:bc:2d:
0c:f1:db:74:29:00:84:f9:b7:e6:86:ea:52:15:95:8c:56:4c:
67:bf:a4:8e:af:ef:8f:db:88:70:1e:8c:c2:ce:6d:8f:43:c6:
db:c1:06:a2:b4:18:1a:5f:81:ac:dc:1c:aa:8d:b4:89:38:f7:
b4:0f:0d:c3:2d:06:12:a3:39:1f:49:1b:dd:f3:9d:92:b7:e0:
fe:89:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:42:21 2025 by rpki-client