Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: LvJlo1g/Gkcf/bFHGDZ0KBfT3EiJJoElvNMGgzTKusU=
Subject key identifier: 9B:EB:B4:74:5E:DB:95:0B:0D:17:82:1F:46:DD:FF:84:01:30:BE:6C
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 0199FCFD1E90A7DCF02BA435B7CDDF5C4E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: eYjQHwnoFXVnaR38AVBOK96ORDjn6YDl2AC0E4YwXkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1e:90:a7:dc:f0:2b:a4:35:b7:cd:df:5c:4e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=9bebb4745edb950b0d17821f46ddff840130be6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:44:af:8e:f3:b5:b2:84:7c:83:21:64:bc:
cd:cf:00:7a:a1:a0:c5:34:89:07:39:28:fa:39:a3:
c6:e0:ae:1a:75:56:5c:82:50:34:ac:fc:c5:f1:72:
9d:4f:6e:cb:47:db:14:58:53:e8:5a:1f:9b:d9:e6:
9b:16:ae:63:4c:23:23:61:33:37:71:57:09:88:0d:
58:09:a1:27:33:e7:12:ef:7f:df:47:42:81:5c:31:
ff:82:e9:ad:cb:89:83:5a:71:84:86:b1:a1:5e:b2:
ef:35:d4:7d:70:cb:cf:e7:36:5a:e8:c7:1b:95:54:
53:6e:5f:d3:fa:8b:6a:89:d9:c4:4e:db:8a:2a:03:
b5:c4:22:c8:51:41:fc:cc:13:65:64:de:c2:fb:28:
56:c6:55:d0:52:52:95:17:7c:23:45:09:b8:b5:9b:
26:7c:a1:83:31:7a:bf:04:7d:2f:ee:63:8c:6f:6a:
08:c8:8a:84:3f:3d:15:88:34:b6:54:33:2c:63:3e:
48:5f:a6:cb:c0:10:d9:68:65:3d:f8:70:fd:60:c6:
ba:07:8b:99:ad:84:92:d7:cb:28:37:7a:88:a9:49:
2f:85:ad:50:f3:56:aa:0b:ce:97:d7:b2:41:18:53:
76:06:ac:24:bd:c1:f4:4c:df:d5:88:59:ce:48:fc:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:B4:74:5E:DB:95:0B:0D:17:82:1F:46:DD:FF:84:01:30:BE:6C
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:de:81:22:2a:75:52:2e:4d:e7:e2:94:30:78:53:02:a1:84:
ab:90:25:f3:4b:df:67:cf:af:fa:90:d2:3a:0a:5e:da:c1:e7:
88:57:54:c7:9f:d8:d6:60:49:6f:ce:4f:c4:f6:43:50:23:59:
ae:b1:57:9a:32:43:5a:fd:1f:38:02:48:23:97:2e:62:4d:4b:
a4:f9:6f:f4:bb:78:08:2d:d2:bf:e1:9a:cd:26:30:1a:c2:5f:
bf:fe:f1:03:59:5f:df:04:07:2c:76:7e:b0:55:91:95:31:22:
55:30:05:d5:ce:e9:90:6c:09:a7:e9:13:a0:1c:94:ed:a5:e8:
fb:c1:e3:98:b8:73:84:c7:e8:47:55:b5:3a:76:9e:b4:ae:7f:
4a:ed:f0:1d:4d:4f:de:c9:1e:fe:89:14:2c:a1:3e:8b:62:a4:
30:fc:6e:7d:1e:8c:40:b4:6a:b7:2a:27:a4:c9:d0:14:4e:02:
88:0b:0a:9f:65:5c:c3:08:5c:0d:57:b1:c6:ec:83:fa:ac:ba:
13:04:29:b6:b3:6e:c9:20:9f:b9:f2:2d:a3:46:57:93:e8:28:
54:77:1c:8a:a8:6f:70:c0:b2:fc:c7:11:18:c7:c6:c7:a7:a3:
b6:17:83:40:d8:ef:39:59:1d:f4:d2:81:1c:4d:c3:05:63:a5:
95:40:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:40 2025 by rpki-client