Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: WFLgwoX4z9OwntE3+IT//YfBuQGXJmtqgj/lY28uP2w=
Subject key identifier: 8C:D9:C3:00:9C:53:8F:16:78:55:33:3F:49:A2:EA:00:EA:98:3F:D9
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 0199FC21805BFD7BF43E6DE565AE67881760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 095D
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: Eax-YG047Te5n0m45RUjhbrR1oI.roa (hash: iDlk1T+vVuMTMOmIBdx2Kl0rk1EldiQCxibfcQYd5i0=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: Zc7B/vVyq8XRMcN+mQdv7AYupWR6yoN6gfLnBPoc3vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:80:5b:fd:7b:f4:3e:6d:e5:65:ae:67:88:17:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=8cd9c3009c538f167855333f49a2ea00ea983fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:5a:db:54:87:a4:0a:36:63:cf:d4:95:a8:
05:ae:cf:cd:57:2b:00:1d:c8:a9:5c:ee:32:2d:2f:
0e:ce:56:6b:1a:f0:96:b6:6d:1f:64:ed:ed:98:c4:
8b:1f:cd:65:eb:71:61:9b:24:23:a8:9b:1a:1a:81:
a4:62:8d:50:66:7b:f7:3c:e6:c7:38:72:60:11:2a:
6a:2c:7c:01:8f:0d:cd:ec:b1:0d:8c:4c:5b:4d:db:
b2:fb:f2:70:b7:c8:e2:00:06:71:71:ef:a6:8b:ea:
ea:c7:d1:43:52:0c:4d:09:b8:22:f8:7c:12:d2:3d:
a7:30:cc:92:e6:59:92:1a:e2:50:b1:7f:df:0c:d5:
04:c2:47:e7:a6:62:86:db:d1:6f:30:4a:c4:79:a2:
37:bb:e4:0a:72:8c:8d:8a:ec:0d:f8:c8:e9:d5:87:
2a:83:ff:54:09:48:83:42:2e:63:04:54:3a:25:81:
b4:6e:55:10:6e:37:c5:54:1b:cc:b5:96:ce:3a:31:
58:44:c1:c8:e2:22:3d:26:d4:3a:58:9c:2e:79:42:
1a:bc:f9:e2:5c:a4:91:57:e0:65:11:9e:8c:26:e7:
8b:13:85:18:8c:ee:67:68:00:6c:12:5c:8b:88:35:
bb:46:2a:bb:64:55:a8:88:42:70:6f:ec:0d:18:0c:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D9:C3:00:9C:53:8F:16:78:55:33:3F:49:A2:EA:00:EA:98:3F:D9
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f0:37:56:bd:2c:25:cc:5e:49:20:c8:92:f3:8d:ea:7d:1e:
b1:90:67:f7:ed:71:d0:72:f2:ad:6a:fd:37:aa:c3:5c:a0:39:
f6:1b:8f:b0:0a:50:71:0b:34:c1:45:c7:7e:a0:de:fd:82:e5:
46:43:bf:2e:3b:26:37:f0:5c:57:23:8b:53:f3:69:7b:94:de:
56:0c:c7:7f:40:0d:25:04:3c:6b:34:81:2c:68:fa:af:f3:e1:
54:ea:a4:90:f6:53:ef:02:af:e9:21:98:78:c3:f7:04:35:31:
45:67:14:16:3a:af:1e:f7:5b:80:a0:72:71:d3:52:b4:9b:7d:
89:ef:df:fc:82:6c:b2:b4:28:ee:81:83:79:01:fe:11:5f:e4:
49:15:e5:7f:19:8a:bd:7c:c2:63:dd:d9:7d:7b:1b:32:a4:1b:
ac:e7:17:6a:dd:c2:a6:0d:18:34:fe:5e:78:45:7b:81:28:5d:
32:72:a4:2e:12:37:2d:e3:c4:32:65:88:79:28:59:9f:64:ed:
f6:67:0a:92:eb:e6:92:21:73:25:a8:e3:73:c2:6e:f5:7c:dc:
6f:7d:4a:d1:26:b7:cb:ba:1e:55:6a:7b:b7:1f:02:e9:56:23:
d2:8b:a9:85:48:cb:1a:98:6d:0f:03:68:48:f5:d8:07:be:05:
39:2d:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:45 2025 by rpki-client