Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: Owszfk+nffAva35gx3cMTZrWD2/ADQn8s42eyVLYqwU=
Subject key identifier: CC:03:66:08:C9:7C:7F:33:3E:35:C8:9B:05:15:FC:6A:5D:24:04:F6
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 0199FD3413F036FF93B1DC4377CA3058A143
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 100B
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: 82Z+pmL1S2zsXNgheBgSa3/G2ak22s+6c/qZhxBh8/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:13:f0:36:ff:93:b1:dc:43:77:ca:30:58:a1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=cc036608c97c7f333e35c89b0515fc6a5d2404f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:f7:a1:8c:e8:9f:de:52:02:08:e2:5e:c4:
0e:1e:87:22:9b:07:57:68:ab:82:6f:07:70:db:13:
8d:0a:8e:81:f1:a7:64:97:e5:76:a8:c1:c1:c5:4b:
bd:4f:3b:aa:39:6b:96:2a:97:1f:42:46:59:6a:6f:
fa:2c:b9:46:c9:78:c1:10:cc:14:81:ab:1b:18:73:
0c:43:c3:f8:48:73:ba:89:da:1c:83:56:3b:47:29:
c6:23:39:98:e2:1c:c9:93:e9:99:48:11:3d:9e:46:
8e:d1:74:09:7d:b7:24:a3:6c:88:b9:27:df:0d:37:
4a:ef:f1:5d:99:3d:26:8f:09:0e:a8:2e:a3:64:eb:
0a:57:0f:d5:63:93:87:c6:5a:28:7e:84:ee:d7:97:
98:ba:5f:2f:23:16:e5:cc:79:de:c2:1b:42:64:85:
e0:30:c1:41:c2:8a:76:18:cf:6a:c2:14:06:1d:2b:
84:38:12:e7:dd:48:9f:3c:64:3f:c7:29:f8:9d:3a:
b8:0e:35:54:2b:9b:5a:c3:8f:d7:88:16:b9:0e:8d:
8c:8a:81:a0:b2:06:9a:c0:33:66:66:34:0f:a4:91:
c8:4b:8a:79:f4:54:bd:ec:be:a0:12:ad:49:7f:b9:
0a:b3:4b:2d:a6:39:85:df:53:7b:6c:f4:e7:f3:fb:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:66:08:C9:7C:7F:33:3E:35:C8:9B:05:15:FC:6A:5D:24:04:F6
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:10:a2:60:2c:7f:94:55:3d:d2:d8:ff:4e:6c:76:d7:a6:3f:
84:93:59:11:68:53:15:e6:ab:f4:66:39:04:d8:86:71:a2:b6:
bd:ca:49:07:b8:dc:c9:b9:f9:29:4c:99:85:01:09:64:31:19:
ef:cd:ef:e0:9a:f0:2b:76:c1:fd:d8:53:2c:84:05:34:31:8d:
15:38:64:cc:31:3d:4a:d1:fe:2e:50:ab:47:a5:da:6b:af:4b:
69:1c:57:e6:7e:a1:9c:f6:ab:cb:fd:61:42:be:29:a9:cb:67:
b0:0f:b8:1d:4b:aa:19:f4:b1:94:51:d1:27:3c:38:fb:f7:48:
22:a8:63:c8:ac:42:d0:ee:50:e9:e7:1d:33:19:0d:57:ac:1f:
c1:e4:3e:4f:03:a5:11:4c:de:1d:6e:f7:be:30:87:c8:08:df:
89:59:30:f3:52:ac:f5:49:7a:ae:5b:e9:e7:b2:7d:88:54:14:
e4:c3:20:42:91:54:90:01:93:85:38:ec:db:9a:43:41:ea:b1:
cd:a5:9a:b4:e1:74:d8:66:ae:3a:95:65:78:df:4a:90:bd:ea:
ae:d6:f6:d7:b4:2e:e3:e9:c3:ec:ea:1c:68:d5:7e:55:ef:a7:
dd:cc:7c:a6:8d:5a:58:00:d8:ee:0e:2a:4b:78:15:30:dc:5a:
8d:bf:ef:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:48 2025 by rpki-client