Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: 5B0MGd0W3PaVibrJ5ovUNA4htqeKIAaJeRt87Sqbe2k=
Subject key identifier: 74:64:E0:3B:05:0F:FD:3E:70:FC:AE:BC:F3:AB:9A:4A:57:A3:6A:CE
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 0199FDD928C360063577CAF7AE4A7173E0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:31 +0000
Manifest this update: Sun 19 Oct 2025 19:01:31 +0000
Manifest next update: Mon 20 Oct 2025 19:01:31 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: kqZxi/vtfeL9PU/yNL4TR0Q/DZmzvfRi3f0HtJyMvPY=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:28:c3:60:06:35:77:ca:f7:ae:4a:71:73:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Oct 19 19:01:31 2025 GMT
Not After : Oct 20 19:01:31 2025 GMT
Subject: CN=7464e03b050ffd3e70fcaebcf3ab9a4a57a36ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:07:16:25:79:40:6b:59:11:79:22:72:00:
89:cd:6e:c5:43:38:32:32:44:47:6b:a2:6f:ce:8f:
b9:a2:65:68:ee:33:7e:c2:80:b3:9c:17:6e:46:d2:
96:ed:5f:2a:f6:7e:2e:30:ea:b7:65:8a:d2:30:ab:
75:14:e2:87:bf:71:37:9f:76:9a:a2:47:6e:2a:7d:
e7:a7:96:ad:50:71:b2:11:6a:c5:a7:6a:02:7c:76:
c6:6f:c1:8f:f0:d8:97:77:1f:fe:3d:1f:96:e3:0b:
4e:91:bd:41:db:fe:09:4b:8c:aa:1c:55:75:79:bf:
e7:9e:77:ce:83:88:e8:e9:52:22:5f:b9:78:c3:d9:
6c:26:b5:39:25:27:6e:82:ac:8e:0c:22:3a:76:ce:
50:3e:08:df:03:64:aa:4e:e1:db:bf:2a:a1:87:74:
52:11:17:7a:99:e7:28:84:9f:a4:34:b0:55:3c:ad:
e1:58:89:b3:fa:d2:47:05:27:c0:60:6a:87:c0:86:
26:1f:45:61:10:03:98:ac:4b:ae:78:52:4d:31:1d:
1c:d7:d3:75:12:d9:cc:dc:e8:47:02:10:7e:5f:4d:
8b:29:72:40:ca:84:88:13:a0:a7:27:15:60:9a:45:
19:c0:30:83:8c:f7:bb:16:ef:5a:02:c9:37:df:60:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:64:E0:3B:05:0F:FD:3E:70:FC:AE:BC:F3:AB:9A:4A:57:A3:6A:CE
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fb:c3:5f:56:4b:d2:9d:7b:ce:5a:bd:6c:92:d2:c1:50:b3:
8f:a3:50:ed:97:be:04:c9:f1:59:c2:c3:14:55:ab:cf:02:1d:
a5:7e:9c:be:69:93:f5:ff:b5:d4:91:01:7c:04:73:8b:34:9f:
c6:be:8e:85:2b:27:91:a2:1f:02:27:8e:28:f5:37:ba:56:da:
4a:4b:22:18:94:5a:41:e6:1b:07:25:da:0b:4f:8d:d5:d5:a7:
8e:41:74:44:65:e5:2c:ca:b6:1b:18:e7:79:9f:85:d2:2e:0d:
36:08:57:ea:91:c4:cf:c5:51:4c:05:df:c1:9f:2d:6b:4b:99:
70:bf:be:fb:db:99:6a:c4:fc:7f:5a:b8:79:d6:a8:89:f9:63:
4e:c3:ce:28:5d:fe:51:2e:62:b1:c2:d5:89:a9:ef:13:21:d3:
53:66:49:38:e2:77:8b:82:5f:52:61:9d:ce:94:e2:fc:9a:eb:
69:c5:0f:4a:eb:bb:91:ba:1c:74:67:f1:83:20:db:b5:49:fe:
fe:4a:29:38:16:64:68:a9:67:b9:f3:d6:99:6b:1b:f9:cc:13:
fe:2c:3a:96:37:80:1b:bf:24:0e:a4:a4:da:15:13:c6:5d:8d:
5b:be:1a:b4:ee:03:81:74:b8:f8:09:7d:a8:ad:63:07:e2:61:
f1:cc:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:33 2025 by rpki-client