Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
File: QKJJ6t6yqSj-DC51yRgki1oaKLk.mft (raw, json)
Hash identifier: DL7rgOFsuLFwM0TXviuIZHQFa1nwf07Bym7Qz5QUZx4=
Subject key identifier: 79:9E:E7:6C:60:DE:E2:84:02:0C:F1:1D:45:61:AD:D6:DF:4E:61:25
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 0199FC584E8F8744F4A443DDAF9819AC1659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:09 +0000
Manifest this update: Sun 19 Oct 2025 12:01:09 +0000
Manifest next update: Mon 20 Oct 2025 12:01:09 +0000
Files and hashes: 1: 944hLyq4lZEVAFInZE509HNE3dY.roa (hash: u1nybjv+YghCeLuvRCrpHUYvYfZKGq/DNrzwKmuq+cA=)
2: QKJJ6t6yqSj-DC51yRgki1oaKLk.crl (hash: pb8O2AsTc6CqR4GokGROlt0GigO9ZZzcFT7kYP4L5g0=)
3: sxEbMVXxezgFHIuSSYFInfXpizE.roa (hash: ZwybRY1zu9AemOu7O2YllM3HQ5PSxj94bjs9pLEXpyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:4e:8f:87:44:f4:a4:43:dd:af:98:19:ac:16:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Oct 19 12:01:09 2025 GMT
Not After : Oct 20 12:01:09 2025 GMT
Subject: CN=799ee76c60dee284020cf11d4561add6df4e6125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:3f:52:00:b3:14:d8:de:94:64:82:4d:cc:
20:ce:16:1d:f1:6d:08:d1:b3:59:fa:2c:30:24:ab:
20:d7:b8:2a:26:5e:fe:8b:54:76:0c:ac:32:b4:20:
2a:4a:69:a4:ce:c3:b6:09:49:e5:bf:e8:77:37:e8:
b9:02:c4:f7:58:ce:7c:4f:05:d2:41:5f:bc:fb:8b:
50:c1:ca:05:3f:62:22:9b:56:64:fa:f4:a1:48:68:
56:2c:56:98:8a:bc:dd:90:5c:8b:67:95:90:99:3d:
f0:5d:91:67:8a:23:ea:91:ef:f4:3d:96:93:f2:69:
dd:2b:b2:bf:05:0c:e1:da:9d:5e:6c:bd:dd:43:fe:
65:1f:c6:78:09:d2:81:46:e2:73:21:38:4a:b0:76:
79:92:9f:da:ad:94:24:06:4d:d0:04:d7:11:83:85:
91:cd:31:8c:0d:4b:30:3d:e3:4e:3f:2e:9c:2c:b1:
3d:db:28:a4:19:0d:02:84:0e:1f:c6:c3:6e:14:29:
2c:cf:19:10:bd:86:65:7b:aa:e8:3b:a0:f6:31:d8:
6d:96:7c:6e:57:80:6d:c0:72:cd:72:1e:fd:49:3a:
3d:57:76:1f:a3:49:40:0c:70:5c:fa:43:47:83:87:
20:81:3a:fa:05:8b:6e:b5:81:a5:74:47:33:38:51:
65:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9E:E7:6C:60:DE:E2:84:02:0C:F1:1D:45:61:AD:D6:DF:4E:61:25
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c1:04:21:4b:09:a1:8c:6b:50:76:35:b9:72:fc:3c:05:e0:
0c:ab:4b:50:4f:c7:ab:d5:23:24:6b:36:70:e5:0c:48:02:18:
88:41:78:17:23:5b:cb:40:0c:97:0c:ee:b7:11:1c:3c:90:c1:
db:6e:1a:a0:f6:37:63:30:21:d3:14:dc:9f:b5:6f:ab:8f:fe:
b9:99:6b:0c:da:c9:25:06:a8:7a:e4:fc:c0:cd:a3:e9:2c:7e:
86:ec:1f:a4:1d:33:78:bf:78:eb:cd:e9:37:10:5e:6f:0b:78:
96:a0:79:7e:0d:d1:e8:e0:88:8b:10:55:31:08:09:2c:3b:89:
20:7c:14:40:0e:0e:35:19:db:a9:37:73:13:1d:b8:df:25:58:
bb:84:5c:6f:d6:a5:d5:d4:a0:91:8c:cb:34:54:9d:17:85:39:
4c:c9:32:dc:97:b7:f5:8d:7d:4d:3b:13:4d:a1:10:ec:ab:ed:
f8:35:6f:b4:7e:44:3c:52:a7:71:af:5d:29:eb:82:79:be:e8:
07:9a:01:84:f4:0e:97:e3:e4:19:36:71:9c:97:aa:59:72:33:
e6:a1:08:fd:60:b6:06:ff:74:e6:aa:89:15:5e:ed:a8:f2:ce:
ff:aa:5f:25:8c:3d:97:32:c3:73:b1:c5:fa:8e:24:25:14:67:
bd:a6:a0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:33 2025 by rpki-client