Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
File: QCc8FepF3zcZPjRbae3YP4xvIgI.mft (raw, json)
Hash identifier: nTQ0a4fjvHH8yBC0tM+0anHi+MvzZ8jcQiyz0nLLVB4=
Subject key identifier: A4:75:DA:7E:F7:88:66:BA:AC:B2:03:A7:22:0E:16:E7:8C:71:51:EB
Authority key identifier: 40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
Certificate issuer: /CN=40273c15ea45df37193e345b69edd83f8c6f2202
Certificate serial: 0199FFFE62F0A4C802C26955EBBCDB578FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
Manifest number: 022A
Signing time: Mon 20 Oct 2025 05:01:25 +0000
Manifest this update: Mon 20 Oct 2025 05:01:25 +0000
Manifest next update: Tue 21 Oct 2025 05:01:25 +0000
Files and hashes: 1: QCc8FepF3zcZPjRbae3YP4xvIgI.crl (hash: n4ePJAF9E48Eu4/LgN2SlZK5c9dEGgrGJ7WZTX+eXhI=)
2: rg92faZanaYES8NBj5pg8WmI5nI.roa (hash: 8R4hL47sFCLdHAmoIZE8IPnGm4ZN8Yi2FpnpcDwoEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:62:f0:a4:c8:02:c2:69:55:eb:bc:db:57:8f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40273c15ea45df37193e345b69edd83f8c6f2202
Validity
Not Before: Oct 20 05:01:25 2025 GMT
Not After : Oct 21 05:01:25 2025 GMT
Subject: CN=a475da7ef78866baacb203a7220e16e78c7151eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:ca:63:2d:66:1e:53:97:f9:ea:91:a4:65:
8d:4d:50:ad:c3:b7:54:b6:69:4f:3e:84:5a:d0:c7:
5c:95:b6:76:e6:f8:81:25:40:25:c1:e7:84:56:db:
de:e6:76:f7:69:ae:a0:b8:89:5b:8e:8c:8d:75:e8:
99:1f:f0:c1:3d:fa:74:7f:51:ff:2d:d4:58:e9:6b:
5c:66:06:a3:2b:40:7f:8e:36:b2:21:9a:63:3c:a4:
5b:4c:14:b9:1e:03:e5:ff:b1:14:ad:2c:43:21:72:
04:fc:d5:b0:d8:56:30:f4:22:5a:c8:e0:a3:55:3c:
6c:02:ed:56:a3:94:44:ce:b5:56:fd:be:6a:2e:40:
37:01:38:34:56:cc:17:c2:7d:a4:af:f3:9d:60:8b:
47:da:0b:a6:ce:a2:04:81:8e:00:3f:bb:d1:2d:87:
f0:c4:3f:0a:ec:40:a9:f1:da:f3:f5:3c:6f:08:c2:
be:35:1b:a6:1c:9a:27:37:62:6a:4c:84:6b:ce:5d:
e0:d0:38:a4:23:14:e9:3c:5a:6e:9f:e5:6a:eb:b0:
7a:03:c1:89:6b:ef:4f:c2:30:0b:69:4f:18:72:86:
84:ad:53:72:a3:d3:d5:8b:57:aa:df:94:16:c1:d0:
13:1e:ef:ff:46:e7:1f:8b:9f:82:53:d9:01:a6:70:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:75:DA:7E:F7:88:66:BA:AC:B2:03:A7:22:0E:16:E7:8C:71:51:EB
X509v3 Authority Key Identifier:
keyid:40:27:3C:15:EA:45:DF:37:19:3E:34:5B:69:ED:D8:3F:8C:6F:22:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCc8FepF3zcZPjRbae3YP4xvIgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6a1153-c3bb-43dd-97be-303c9a11886b/1/QCc8FepF3zcZPjRbae3YP4xvIgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:7e:5f:a7:91:31:dd:44:26:79:e1:b1:c4:8b:c7:ca:c6:
9f:78:d2:03:c8:94:c4:10:01:11:62:f2:fc:70:88:04:12:b7:
79:f9:69:68:5f:c7:11:58:21:f9:7e:34:ab:cd:cb:56:c0:af:
46:01:99:96:bb:64:d0:0f:62:2a:c7:fd:a6:a3:80:08:89:bb:
f0:6b:b9:fd:3b:7c:78:ae:01:59:33:88:fc:cf:86:2b:b6:22:
5a:7b:e5:2a:b5:51:b1:9b:59:b3:5a:99:d5:0d:50:b6:c6:12:
ad:9e:bf:cf:16:bf:39:49:fa:73:b8:a7:59:f5:1a:d2:e0:12:
36:71:fc:03:ce:30:d7:c7:7b:bb:ef:c1:6c:39:fb:ae:3b:2c:
42:c1:8a:a4:d3:e4:18:a5:57:3a:c5:88:4c:a4:1c:7f:4a:46:
d9:01:cf:bf:d8:32:aa:eb:7c:25:f6:84:fc:36:67:0d:54:6a:
b8:6b:88:32:e8:88:8e:b9:80:b2:c2:16:b6:f3:07:ec:e6:f7:
03:ca:73:8e:88:40:34:3a:41:0a:b0:c4:43:66:95:b0:17:a6:
f9:af:3e:73:aa:db:10:0c:11:2d:5f:3f:8c:e6:81:bd:04:fa:
c2:37:26:cd:2f:8b:bf:5b:ab:2d:9c:b3:c7:d4:f6:5a:e2:73:
bc:f9:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:22 2025 by rpki-client