Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: GnwpjySz84gEh+pEw94srMzNurGVgS39sg9l/fKrEYQ=
Subject key identifier: 58:57:42:71:EE:DA:EA:5E:98:81:7A:00:17:7C:90:71:BD:1E:10:29
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 0199FBEB7FBC383366B29A6D05EFBDFB0751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: 61/OAEVhtk9yjeErsvDT7JfdN7RB7x7+FbPg468q46g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7f:bc:38:33:66:b2:9a:6d:05:ef:bd:fb:07:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=58574271eedaea5e98817a00177c9071bd1e1029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:e2:ad:55:11:02:16:10:a1:76:df:5a:9d:
63:87:51:b2:d3:5c:4a:1e:04:8d:72:55:cb:b9:87:
2c:62:3d:18:55:1a:b6:2c:63:45:e9:db:1c:23:a3:
f0:ff:9a:e9:07:20:c0:a5:6f:31:87:d9:24:2d:11:
30:fd:1a:08:47:03:a0:21:3c:c4:4f:43:a9:0f:9f:
80:ab:e5:81:1c:4d:bd:bb:63:aa:b5:3e:19:ab:86:
a5:01:01:ba:19:0c:e7:64:96:b0:f4:44:1b:73:4a:
de:ab:5d:ae:60:99:7e:2f:73:e8:de:84:88:3f:19:
e4:2c:13:80:8a:94:31:38:5d:54:a4:47:e3:1d:e2:
a0:84:a0:d3:35:08:ec:85:15:9f:9a:a2:c0:b5:07:
19:ec:0f:6c:d0:c6:6c:3f:24:29:41:58:7d:0d:50:
0c:97:aa:bc:12:85:36:b2:1d:e5:b9:b1:cc:17:1d:
8e:7f:49:b8:16:d2:e9:e0:ae:2b:4d:e4:f0:2a:39:
71:c6:9a:38:cf:a0:81:05:a5:76:ff:43:0d:1a:bc:
bd:87:fd:9d:64:65:eb:d7:1e:b0:89:73:6b:1a:82:
c0:8a:01:92:16:4b:66:8b:87:ab:06:cd:9e:bc:9a:
85:80:09:fa:10:44:50:84:b7:16:79:03:f1:1c:cb:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:57:42:71:EE:DA:EA:5E:98:81:7A:00:17:7C:90:71:BD:1E:10:29
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:36:db:62:b5:62:f9:88:dc:28:5f:2e:76:77:40:90:a0:62:
e0:66:f0:09:4b:6a:36:57:72:84:b6:e8:6f:19:fd:06:00:7a:
ba:9d:8e:d9:fa:85:0d:6b:34:83:a9:1c:5a:b6:aa:a9:fb:20:
06:10:b4:bd:3f:66:62:6f:36:b8:e5:5d:77:62:75:53:83:b3:
52:00:c4:ca:bb:03:f0:78:b5:37:ff:c2:ef:e1:92:a8:73:51:
10:46:fb:3e:a4:7e:e7:b0:57:0d:aa:31:e5:be:8e:36:35:44:
ed:6b:36:2e:7c:41:cf:95:4d:9e:a0:5a:c6:ce:6d:cf:da:33:
2c:fd:74:2b:0d:df:48:2f:4b:73:c9:c5:5b:b3:24:4f:f8:86:
c1:98:14:ef:9d:69:40:38:41:09:e4:cb:1a:54:dd:88:05:40:
e0:d2:0c:20:83:1c:04:6e:67:f0:ca:1a:63:17:3b:3f:21:f2:
bb:87:bc:c1:56:d1:98:23:c3:5b:c4:75:ee:1a:51:73:66:33:
25:14:38:91:7f:e0:c2:c1:6d:c3:fa:c0:27:91:f8:90:5b:b5:
41:a9:27:77:77:d6:cf:c2:07:9f:57:e5:a6:12:14:7a:06:46:
58:d0:7f:4d:22:e5:c6:f3:bf:a8:91:43:70:20:58:c1:60:17:
89:a9:5d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:57 2025 by rpki-client