Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
File: QqbmQBmAE94SolHwhgMM14xzJRY.mft (raw, json)
Hash identifier: Zh83OJOgt305zfbj1B6Y7ub4mR/kuj1QCn9BzvebkUU=
Subject key identifier: 70:42:96:7B:D9:48:84:D7:8A:11:9D:C2:B6:1F:02:F6:C7:C0:36:DC
Authority key identifier: 42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
Certificate issuer: /CN=42a6e640198013de12a251f086030cd78c732516
Certificate serial: 0199FEB51A285E5C4F5A5EB783D94843B677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 23:01:45 +0000
Manifest this update: Sun 19 Oct 2025 23:01:45 +0000
Manifest next update: Mon 20 Oct 2025 23:01:45 +0000
Files and hashes: 1: QqbmQBmAE94SolHwhgMM14xzJRY.crl (hash: nOh1eoHgenMtsntzj+wmIFW9YZlmVhfbTptcr8RNEas=)
2: j37XoMC3UG0E_oUwTDht88JJrh8.roa (hash: cqy63HfmTCUoUdF/JZjPLrFzuSfjpRSNk0rinu9lqNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:1a:28:5e:5c:4f:5a:5e:b7:83:d9:48:43:b6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a6e640198013de12a251f086030cd78c732516
Validity
Not Before: Oct 19 23:01:45 2025 GMT
Not After : Oct 20 23:01:45 2025 GMT
Subject: CN=7042967bd94884d78a119dc2b61f02f6c7c036dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:77:6b:92:cd:93:4f:ca:a1:52:75:d6:b5:da:
9d:42:a5:4e:07:37:b4:1c:dd:b6:c9:f7:63:cf:00:
83:b3:6f:b5:7c:03:3b:af:ba:9b:ed:9f:75:2f:d9:
b9:f6:fb:4a:71:bf:47:55:bf:bf:bc:2f:78:41:cd:
53:44:76:e1:57:6d:c7:f3:7d:22:46:76:5a:c9:ce:
27:2c:3d:a9:5d:b1:48:85:fb:ef:2f:2c:2f:64:a5:
46:e4:77:71:90:35:41:b0:98:bb:42:36:36:d9:60:
af:0a:27:67:78:95:c5:11:40:54:82:c7:1d:5a:c3:
1b:43:1d:26:71:2e:96:70:04:f5:e3:ab:a1:f8:6b:
b5:05:cf:d5:ae:ef:74:7f:3e:f1:ce:0a:d3:50:03:
90:f4:18:89:57:e6:af:65:81:ae:16:d1:07:29:e7:
3c:3f:a4:e3:d4:a3:55:30:f3:3c:d6:66:6a:d9:97:
8e:5f:a4:88:cf:a3:ee:2b:e3:a7:a8:59:a4:96:86:
47:a9:7a:0a:63:be:35:5a:56:67:f4:c5:dc:d5:37:
0a:4d:8d:18:c8:e7:06:41:fd:ad:15:81:4f:44:df:
9a:08:7c:b3:f5:9f:35:be:a1:c2:98:c8:b2:5f:5e:
5e:e7:af:6a:f2:9a:01:e5:79:ea:cd:23:5c:77:fc:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:42:96:7B:D9:48:84:D7:8A:11:9D:C2:B6:1F:02:F6:C7:C0:36:DC
X509v3 Authority Key Identifier:
keyid:42:A6:E6:40:19:80:13:DE:12:A2:51:F0:86:03:0C:D7:8C:73:25:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqbmQBmAE94SolHwhgMM14xzJRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ba2f3d-6bd2-4f32-81af-c287670cce51/1/QqbmQBmAE94SolHwhgMM14xzJRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:da:70:0b:6e:19:a7:23:6d:48:c0:e1:66:c2:a3:5d:c3:b0:
30:54:04:78:f8:3d:04:98:b2:9f:2c:f4:37:19:6e:a8:88:b9:
d5:0e:3e:99:74:49:d8:2f:89:20:e7:e3:52:22:28:73:15:12:
5a:79:ec:16:be:d5:09:28:f0:2f:38:81:d6:9b:b9:a1:1e:81:
dc:c2:ef:f6:3f:2b:1e:4a:5f:0d:99:40:e0:02:e6:43:ca:f1:
b2:1d:6e:b2:0c:f0:39:a7:e2:5f:98:29:0e:c6:93:5f:49:18:
04:0c:79:1a:5c:77:92:67:07:35:65:48:17:ce:9f:5d:57:e0:
2d:53:ee:c8:c6:ea:b0:92:a7:2b:6d:3b:04:4f:10:79:bc:e4:
4d:00:89:d5:5a:e9:bf:db:0e:75:f8:3f:95:b5:ea:3b:15:4e:
25:f9:9f:e5:2a:aa:86:95:e2:a8:82:2b:c6:8b:5c:44:76:d3:
45:54:36:f2:5c:94:8a:04:83:86:c5:8c:e5:45:b7:5a:1f:85:
a9:ab:3a:04:36:a2:9c:fc:15:d9:5e:b8:7f:ca:3c:d6:fa:13:
d5:7a:6e:d1:c4:d2:83:4b:df:fe:19:92:2b:a3:f6:5d:bb:c4:
06:7c:b9:49:5d:51:70:85:49:22:6f:4d:69:3e:bc:ce:f8:07:
1d:46:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:33 2025 by rpki-client