Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: f9NSS6iqH64fHXd82j7nvkhZgMFYbP0TxJ9s28zZ7qg=
Subject key identifier: E3:84:9F:C7:EE:87:32:94:86:CE:FC:53:8A:39:3C:CA:18:32:1A:16
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 0199FC215747058CBAC7EDDA46DCA09D329E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: RQg/VE2yFMBZ5/OyjGrZ0tcv19hl7GNcoqvxuBbcPGE=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:57:47:05:8c:ba:c7:ed:da:46:dc:a0:9d:32:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=e3849fc7ee87329486cefc538a393cca18321a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:52:eb:68:bd:01:b0:49:50:e3:c4:93:0e:
df:57:d8:d5:a2:92:b3:57:55:44:70:98:49:e1:de:
da:4e:f1:d4:bf:5b:e0:d0:e1:1d:4b:20:e6:ec:4a:
23:50:6e:b2:e5:2f:b9:e8:d0:ad:45:1d:46:4a:bb:
2f:b6:32:35:d9:cf:05:d4:93:3d:13:76:70:b4:47:
a3:be:cc:da:9f:50:b5:2e:93:db:10:95:b5:f4:4c:
39:43:3e:47:d2:4f:6b:92:2a:a5:5f:f2:8f:54:18:
d3:23:a0:20:fa:3a:d2:83:18:49:b7:75:2b:60:83:
00:ae:37:a1:54:a3:96:89:ef:9e:56:4f:fc:43:8b:
71:15:23:cc:cd:c2:eb:e0:9c:ce:64:7d:4a:0d:5e:
67:7b:95:35:fa:2c:55:ea:d5:55:09:7d:57:6d:d4:
62:d1:95:bd:d5:89:e4:97:85:06:b5:92:2d:aa:59:
1b:b7:fd:86:ec:ac:67:ff:0f:9d:2d:8b:25:d5:00:
9e:96:99:d2:a6:ac:40:7c:56:96:04:fc:08:2a:f6:
0b:1c:16:ab:ee:40:9a:c3:db:81:49:6e:45:25:a2:
a1:7b:bd:62:0d:6d:a7:cf:e0:9d:e8:5d:07:88:c4:
38:e3:e0:b2:1d:94:a9:26:7f:b5:e0:38:78:48:8f:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:84:9F:C7:EE:87:32:94:86:CE:FC:53:8A:39:3C:CA:18:32:1A:16
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:58:51:b2:4c:b8:a0:41:90:58:6a:70:ed:10:eb:e0:d3:e4:
86:4f:37:b1:2b:15:75:a1:01:14:f7:a4:a5:86:db:13:c7:93:
16:be:f6:7c:1d:cd:42:07:52:dd:e0:30:12:fb:88:9f:25:f8:
9b:dc:90:01:06:dc:e6:dc:e7:12:52:06:74:3d:c6:7c:91:77:
d0:28:52:d8:e0:be:1a:ab:d8:95:be:a6:4c:92:e9:89:e3:ef:
3f:55:ed:a5:a2:90:6f:3e:d0:9d:f8:fd:b6:c5:a0:e5:6d:44:
d6:21:5f:7a:30:88:d8:bb:78:54:7d:1f:66:81:15:70:04:8f:
fa:2a:b3:ee:ab:e3:d8:0e:46:16:c3:6e:6f:ca:32:b3:be:28:
a4:a3:6a:d4:12:eb:c2:45:30:66:51:33:6c:ad:eb:14:8c:51:
f8:57:a9:76:6f:98:b3:54:10:39:17:7c:b3:85:52:b2:30:8f:
09:4b:a5:a4:61:8b:44:fd:8f:17:4e:ba:e1:e3:77:7f:5b:5c:
cb:5d:0d:ce:ac:1c:c5:4f:8a:59:00:f8:95:98:00:85:5f:c0:
0f:5c:8f:0a:10:3a:ff:70:0e:c9:1c:69:9a:fc:98:3d:7f:00:
c6:2b:72:04:30:ee:d6:a0:75:97:f9:eb:ba:d5:62:52:23:07:
ac:70:2b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:29 2025 by rpki-client