Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: dnM01RO4h/sIO8iguxED1JBI6p9m/nYTJry0wattyOg=
Subject key identifier: 19:57:60:97:58:53:56:85:61:4B:60:45:55:3E:EE:5D:E0:11:14:26
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 0199FB0EEA042CA493FF7C7FBF58981F0560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0E72
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: cWkKv3IKP4GB0vWqpQYWne3GA5Mbv5UG6Ob6KwgOwFk=)
3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ea:04:2c:a4:93:ff:7c:7f:bf:58:98:1f:05:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=1957609758535685614b6045553eee5de0111426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:39:e1:45:09:27:0a:22:2f:17:8b:33:8c:
f9:6f:f8:ff:04:fd:a6:c1:9f:21:6e:e6:ef:b8:33:
25:bb:38:1d:a4:57:73:28:24:68:29:97:c3:1d:44:
fb:9a:cf:e1:ef:14:83:34:1a:82:aa:a9:1c:50:29:
e3:76:57:36:14:a4:fa:b3:13:e0:b0:68:6c:8c:56:
e7:30:c1:a3:48:b7:41:06:ed:cd:42:08:c2:30:42:
0b:56:3a:1f:fb:5e:cc:82:b2:31:36:cd:c7:41:09:
e6:7f:d5:dc:46:94:3e:f1:2c:3e:be:21:b9:25:48:
3f:cd:5e:bf:15:74:7b:40:a2:9b:f9:d0:13:2e:a4:
db:bf:39:4f:29:99:24:11:48:3a:2e:73:86:c3:53:
de:08:3e:12:75:d2:d3:c8:dc:72:e2:40:44:e0:6c:
e0:30:2f:14:8c:a6:f1:a7:e3:b2:a4:97:ac:dc:6d:
5f:1b:3b:7a:a7:16:83:e6:88:ad:d1:25:40:bc:25:
a5:e0:f1:6a:d2:2b:af:21:d5:cf:9f:ff:79:79:e4:
7e:3d:9b:74:9e:8a:07:be:b3:f6:f3:99:71:cf:54:
82:3a:7c:60:ab:96:1c:37:db:ee:e3:1c:78:60:b3:
bd:aa:98:48:cf:29:77:98:71:c7:a0:67:9d:3e:0c:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:57:60:97:58:53:56:85:61:4B:60:45:55:3E:EE:5D:E0:11:14:26
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:e6:f8:21:36:0c:4c:e5:45:54:b6:3d:d6:98:cb:cb:80:
ad:9a:42:9d:31:cf:9d:63:4e:8b:83:8c:24:c5:73:d9:ab:01:
df:80:56:b5:20:b2:99:9f:6e:05:ca:84:ae:51:ca:90:6a:ab:
97:7f:22:99:3b:97:96:05:64:13:2b:bb:a1:17:9f:e3:d4:db:
40:90:d5:18:1c:fe:30:2b:a1:dd:2b:18:9a:81:d6:d9:4d:51:
dd:b5:fe:01:e1:fe:63:bb:d0:f4:ff:17:d9:0f:03:c8:44:a9:
fc:de:6c:c8:cc:ec:4a:ff:2a:89:3a:be:b4:40:fd:ea:b9:1f:
40:0b:44:61:34:e2:16:21:e1:b1:ea:9c:32:b3:12:e0:39:3f:
46:58:86:4b:4b:99:47:9b:1c:22:ac:f3:04:6e:8b:1f:40:10:
37:00:af:e2:17:8b:3a:01:87:bd:76:85:42:4e:97:64:f4:0d:
7d:a4:3d:63:26:81:6f:b8:73:9a:b1:ed:b1:8a:c5:d7:a5:97:
2b:f5:3f:52:c3:20:dd:8d:f0:46:3d:97:06:f9:6f:69:42:4e:
ed:70:c8:b5:6e:d7:f5:8c:4b:66:38:a4:1a:58:74:af:93:64:
c4:2f:c6:ec:20:85:1d:85:23:99:5b:e4:9f:6f:f3:28:1c:a6:
90:02:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:11 2025 by rpki-client