Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: JNnSlOuy+Bj+rLKQFu5SnEXVKWqhs3OHLnasoYVVLxw=
Subject key identifier: A4:0A:3D:C4:3F:2B:F8:A6:5A:83:B7:84:10:F2:B5:1F:73:0E:B9:C1
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 0199FCFD6C5E94AB5A2E3D5E954655BB93D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1686
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: KfsOdPpjuyXAxKCLZN+4dII0ExA26rgIl+wUBpVT8lU=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:6c:5e:94:ab:5a:2e:3d:5e:95:46:55:bb:93:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=a40a3dc43f2bf8a65a83b78410f2b51f730eb9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:71:93:ab:d8:c3:b0:d5:bc:d8:6b:6e:5f:69:
3b:38:2c:1d:b6:73:c9:44:e0:b0:9f:fb:94:9b:18:
b7:ad:64:d8:8d:ca:d8:4c:b4:4d:9c:20:6c:61:07:
09:d1:89:05:e9:33:23:0e:11:e2:88:58:74:ca:68:
1f:09:fc:e4:9d:0d:0d:2f:53:57:71:36:d6:9b:05:
2d:51:fb:42:79:b9:80:87:e0:c3:b0:50:6f:d3:bd:
7f:64:1d:8b:bf:5b:f5:63:e2:1b:35:d4:ba:01:ca:
db:c9:f3:00:d2:0e:6e:ff:5c:86:6e:55:f9:87:35:
97:0e:17:94:24:64:36:a7:b0:ef:99:a9:af:8a:5a:
fd:73:ee:f7:61:fd:87:2b:36:b8:8e:25:2a:d9:0f:
fb:4e:8a:af:20:a7:2a:24:5e:99:9e:7e:87:58:ca:
12:0b:84:ef:4b:f0:56:36:c7:3a:3d:4a:b5:ee:97:
d8:62:f1:40:bc:11:09:bf:4d:b8:13:9a:b3:68:2f:
3f:e0:7b:e9:74:84:22:e5:0e:aa:9d:39:d7:41:cf:
f1:93:6e:c4:5b:bb:77:da:1d:df:ae:ac:97:82:24:
eb:33:07:f5:17:cc:82:63:65:62:98:1d:cc:56:4c:
06:66:e0:2b:91:57:64:cd:6b:65:09:28:13:26:39:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0A:3D:C4:3F:2B:F8:A6:5A:83:B7:84:10:F2:B5:1F:73:0E:B9:C1
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:15:c8:fa:64:78:f6:0d:b1:3b:8c:0c:aa:cb:c7:bb:9c:ae:
dd:6b:59:06:55:b7:34:a8:6d:b2:3c:cd:b3:3f:fa:79:a8:e1:
4a:2d:81:8a:e1:1a:79:8e:a3:70:15:c1:07:0f:6f:a0:d2:c5:
99:91:88:72:d7:ed:7b:c0:8f:e7:58:40:11:f6:e2:5e:ed:19:
10:9a:1a:5c:6c:44:ea:4e:51:b8:ec:90:ef:21:26:91:93:b4:
80:21:c8:5a:7b:b2:95:6e:ab:26:b7:93:b9:e4:6b:02:69:ce:
b7:f2:fd:a1:ef:1d:87:53:d5:0a:40:cd:cb:67:fb:23:26:dd:
05:5a:fd:7d:e7:a8:29:38:a4:09:c2:33:4b:0e:b4:bc:ee:0a:
52:d8:5f:97:da:3d:a0:58:1e:c1:02:95:48:bf:5d:8a:af:59:
66:ce:f2:75:9b:2c:a6:63:e3:46:75:d0:6c:df:d9:cc:4b:65:
be:15:bf:c5:77:58:12:5b:31:bb:b1:12:6a:a8:69:8a:15:26:
f0:b4:70:dc:7d:48:55:97:f9:32:ad:7d:f1:02:ed:6b:ea:d7:
3d:01:21:4c:68:17:6e:6c:2a:1a:0f:17:6a:93:4f:c2:1c:a6:
3c:9d:ad:d2:18:b3:5b:bf:cd:8a:8c:2f:1d:2a:3d:f7:2c:77:
85:d8:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:54 2025 by rpki-client