Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: QhPag3f+uj3m8TZxkkvKfhAsZmzXuq22C8xuBwzQ3Nw=
Subject key identifier: 35:9A:F2:A1:13:7E:21:C0:08:16:F8:AB:D4:BF:58:94:30:30:1E:A3
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 0199FBEBC4B0560FAC1C7C4709373163382E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: VqA4xjx8RU6vRYb/OS3MogtqBPJIf2hHpgCTuZ9lzmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c4:b0:56:0f:ac:1c:7c:47:09:37:31:63:38:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=359af2a1137e21c00816f8abd4bf589430301ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:a0:69:59:63:04:62:92:93:75:ec:69:dd:
4d:eb:a8:bd:b2:f1:12:15:c3:a6:23:1f:7b:84:1d:
e6:6e:80:cb:34:9f:be:c5:a9:46:e7:8d:96:ca:90:
8b:52:3e:e4:84:61:7d:02:b5:28:7f:bc:64:a8:0c:
af:22:21:53:91:df:ad:f6:e8:d8:34:35:3a:07:a0:
a2:6a:10:9e:9e:9d:3b:33:0e:3a:a5:91:e5:57:e4:
b5:0d:97:98:75:d3:08:62:87:d2:30:c4:01:c8:99:
95:44:e6:e8:ce:ce:6d:d4:8f:c1:60:37:89:93:06:
4c:d3:75:ef:ee:3f:6b:66:51:f2:2f:96:eb:f4:3c:
9d:3d:7d:bc:43:6a:fa:b5:42:06:12:b9:44:fc:a5:
02:31:3f:2d:c8:74:cb:5f:99:65:c1:30:b1:cb:61:
e3:b2:2d:21:79:99:59:3a:60:92:20:71:e5:c9:8c:
2a:6e:46:c3:27:ac:04:93:52:a1:34:c1:96:df:38:
bc:12:1e:30:81:41:d1:40:68:85:2e:3b:3a:7b:57:
4c:a6:e4:ce:33:c0:a4:da:11:39:8f:a1:26:a7:d6:
4d:3e:8f:73:60:7c:ff:c7:df:72:13:da:9c:79:aa:
17:18:7d:76:03:67:89:39:08:a6:69:86:fc:6c:b4:
e9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:F2:A1:13:7E:21:C0:08:16:F8:AB:D4:BF:58:94:30:30:1E:A3
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9f:ef:e2:77:c2:4d:ab:89:9f:2c:8c:27:f5:cc:36:6a:f1:
c7:a3:b7:bb:84:97:f1:4f:71:f2:19:10:a9:f7:33:2c:01:ca:
e1:13:24:f8:67:ac:49:78:e8:2f:cc:b4:14:f1:ed:dd:d3:ee:
ba:21:88:08:fc:a8:41:79:8f:e8:43:e2:20:16:69:53:9e:61:
3f:57:a1:9d:fa:90:01:8c:0d:72:b8:6f:0e:48:a4:77:f8:a4:
ce:34:29:c8:6f:f7:56:cd:a4:63:18:c0:66:23:93:e3:d6:4f:
39:34:b0:dd:af:c5:2b:40:95:ae:c8:9c:62:c1:93:b4:61:cd:
50:a7:77:ee:31:ac:dd:bf:ad:e0:62:c7:6b:20:90:0e:59:bb:
e8:63:9e:00:87:ac:52:9b:db:a4:f6:15:d3:47:4d:7d:b3:f2:
ff:4d:d3:e8:62:fd:2c:ea:be:3f:77:71:e7:6d:46:7c:65:93:
d4:f7:65:04:9f:16:52:5f:03:8d:a0:8c:df:f8:ee:65:7b:0d:
d0:97:5c:da:5d:e6:a8:aa:3e:e7:3f:b3:bb:74:62:40:d9:dd:
88:8f:fd:74:93:62:38:0e:e9:c6:ac:29:35:7b:c5:19:2e:82:
d3:bf:be:bb:12:ba:43:cc:3d:72:10:80:d8:6f:fb:a2:a5:90:
76:38:a3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:50 2025 by rpki-client