Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: l+C8dUAjcHTze2xO3avyzQMuzqpSF0UeA2B9myuFWwM=
Subject key identifier: D0:18:B6:A5:39:E4:51:B7:E8:CE:8B:68:9F:F0:8B:7D:08:E7:95:87
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 0199FC21CB1D36AC2C5D7C4C8F313E57D85A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 0B74
Signing time: Sun 19 Oct 2025 11:01:36 +0000
Manifest this update: Sun 19 Oct 2025 11:01:36 +0000
Manifest next update: Mon 20 Oct 2025 11:01:36 +0000
Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: b3lBOGiOh43UHm9p+mvsbabgz50fRBBgbk8T7vWFLv4=)
2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:cb:1d:36:ac:2c:5d:7c:4c:8f:31:3e:57:d8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Oct 19 11:01:36 2025 GMT
Not After : Oct 20 11:01:36 2025 GMT
Subject: CN=d018b6a539e451b7e8ce8b689ff08b7d08e79587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:9e:9f:9f:12:43:bd:59:ba:9d:aa:0b:98:
d7:26:77:87:e3:6c:58:46:ca:94:f0:9d:89:b8:02:
f6:d7:f2:c2:37:4b:53:54:22:97:af:21:74:50:c9:
42:b2:7f:11:13:ae:08:c6:59:6a:5e:79:cc:25:f9:
dd:e5:5c:9f:38:dd:b7:e4:4c:76:1a:ff:a1:64:fb:
52:12:b4:44:8e:99:d3:49:9a:08:db:73:f0:74:48:
11:54:49:ad:06:f5:d0:58:f7:bc:bb:dc:a2:26:27:
f2:26:16:54:2b:ea:6d:7f:9d:c9:f5:1d:d6:50:66:
0d:d7:64:28:e4:2c:20:94:0a:d1:80:f7:0e:0c:9c:
56:f1:b4:f6:38:89:58:b5:56:14:62:c7:d6:b8:36:
41:90:7f:20:36:ad:d7:10:53:37:65:da:1b:e1:7e:
56:bf:8a:7b:c8:6d:b5:c4:94:4a:7d:7d:66:50:53:
82:bb:f8:47:dc:17:a2:53:7a:c6:bc:cf:a2:ce:1d:
d1:a9:d9:16:29:c0:87:47:29:68:53:cb:ee:34:60:
c6:7b:3c:99:1d:68:9f:a5:04:46:8a:7e:55:db:c3:
09:bb:6d:50:85:de:36:3f:11:77:df:e9:97:6b:cf:
88:64:51:78:71:4f:6a:53:b8:2f:82:22:cc:8d:48:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:B6:A5:39:E4:51:B7:E8:CE:8B:68:9F:F0:8B:7D:08:E7:95:87
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:0d:92:1f:97:0a:7e:3c:3f:02:42:5f:e3:fc:80:ad:39:
a7:52:22:dc:f9:c7:93:c5:ba:2d:a0:11:e4:8a:e7:86:8a:04:
17:d2:17:2d:cd:8f:be:6d:21:07:f1:d6:1f:2c:3c:62:08:a5:
dc:1c:88:67:b1:4b:30:3d:5b:af:e4:21:4c:ab:eb:c4:d3:3a:
7b:81:88:07:67:50:ca:d0:84:b7:1e:12:38:c7:46:6a:ec:28:
cd:5d:7a:fa:55:c7:51:fb:dd:31:68:ff:1f:8f:c6:9e:97:f9:
df:f6:32:35:e3:0c:86:f7:01:86:80:2a:15:c4:aa:89:c9:9e:
24:44:4d:36:dd:a2:01:bb:54:b2:77:0b:c8:d4:5f:7e:ce:57:
d7:d5:e5:db:03:71:8e:b1:c8:01:f1:b2:62:14:48:8a:15:5a:
98:5e:f3:28:5a:9e:ae:02:47:ea:72:85:c6:34:fb:42:87:68:
4a:4b:03:74:91:64:2d:34:4f:cd:b6:bc:0a:ec:83:91:e7:73:
7e:c9:42:5f:71:71:9b:3a:0d:99:d5:d1:c0:7a:df:52:de:52:
d7:c5:0b:76:7a:39:64:fb:2e:5d:57:1d:8a:49:32:c8:7c:bd:
27:b8:a6:04:44:f7:1c:28:ab:99:55:2c:a1:21:9b:90:8e:82:
d6:bc:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:53 2025 by rpki-client