
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
File: QdD5FclU2DtKG_GEz7wTjEftpR4.mft (raw, json)
Hash identifier: wc8xwC020ftbvsZe3FvISzjWhCSrToeb4KJqMuRsiDI=
Subject key identifier: 9C:73:24:00:0F:40:00:67:AE:AF:DD:BB:4B:7F:82:41:6D:53:8E:3F
Authority key identifier: 41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
Certificate issuer: /CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Certificate serial: 0199FDDA255AFF689FB6FCE5A9EA7D6EE089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
Manifest number: 1375
Signing time: Sun 19 Oct 2025 19:02:35 +0000
Manifest this update: Sun 19 Oct 2025 19:02:35 +0000
Manifest next update: Mon 20 Oct 2025 19:02:35 +0000
Files and hashes: 1: QdD5FclU2DtKG_GEz7wTjEftpR4.crl (hash: M9EkYtu4OPVzwBCGTR6dLIwVtG0nfSl+WYPiVzmBCM8=)
2: f6uKeUIzMA-uVptKc1ueYhFBFxM.roa (hash: yRxjbOfn/yIPjsEZSwuKIczmA3RcTEjtjojH+74JQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:25:5a:ff:68:9f:b6:fc:e5:a9:ea:7d:6e:e0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d0f915c954d83b4a1bf184cfbc138c47eda51e
Validity
Not Before: Oct 19 19:02:35 2025 GMT
Not After : Oct 20 19:02:35 2025 GMT
Subject: CN=9c7324000f400067aeafddbb4b7f82416d538e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:55:c1:79:bc:33:50:d6:2a:83:33:84:bc:
e1:a9:ba:8b:f7:00:75:67:61:19:e3:4e:58:52:a8:
e3:e3:33:24:57:39:cd:09:38:f6:9f:d6:59:63:58:
a0:ef:52:0b:0b:4f:83:56:e2:3c:b6:08:e9:34:3f:
b2:d1:07:d9:1e:34:e7:5c:32:26:2b:32:ec:f1:21:
02:79:e9:0a:7d:45:2f:9c:4c:be:e5:02:70:59:bf:
c8:70:60:2c:8f:1e:40:4d:7a:be:41:9d:62:33:b6:
53:28:4a:e0:79:2f:f6:2b:df:41:44:b3:38:ff:15:
0b:d0:9e:d9:c2:1a:58:4c:22:70:d5:29:a3:28:91:
7a:08:ef:30:34:ea:75:fc:f4:c4:69:fb:1f:12:cd:
c3:f4:ec:41:3f:b8:5a:ec:64:7e:57:24:0d:5b:c4:
d5:86:1e:97:66:e1:dc:fa:e6:61:e3:67:6e:2c:16:
a0:b2:f8:19:d9:55:81:b8:04:47:8c:c8:47:a3:5d:
8e:9d:a1:b9:27:4d:13:7f:53:7d:f7:7a:86:13:79:
97:c3:ce:be:22:68:67:93:9d:ed:b8:9e:be:0d:df:
ca:72:39:ce:c8:6c:18:87:1c:7d:8b:04:c0:c4:20:
e2:55:0c:dc:1e:c4:05:47:00:46:63:80:a3:4e:2b:
8d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:73:24:00:0F:40:00:67:AE:AF:DD:BB:4B:7F:82:41:6D:53:8E:3F
X509v3 Authority Key Identifier:
keyid:41:D0:F9:15:C9:54:D8:3B:4A:1B:F1:84:CF:BC:13:8C:47:ED:A5:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdD5FclU2DtKG_GEz7wTjEftpR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/66603d-3cb4-4730-b89c-ee500c3eb819/1/QdD5FclU2DtKG_GEz7wTjEftpR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:99:72:ec:9b:3b:dd:88:01:74:03:66:f2:a4:c1:7b:36:55:
13:9e:7a:a7:15:f3:32:19:4b:cc:54:56:90:0d:95:f2:96:f6:
7e:05:c3:73:0f:b7:a4:86:4c:36:63:44:f1:d0:8d:4a:5e:c6:
40:b2:da:fd:b5:66:b7:aa:ab:d5:b9:64:66:0c:51:1d:91:e4:
1e:ff:3d:1c:4c:d4:8d:15:92:5c:da:69:22:67:1d:d5:98:3f:
de:f3:92:ee:d9:81:65:7f:97:76:93:91:de:88:c2:07:55:41:
04:87:6d:ab:0e:6e:b4:d1:1b:28:e1:b5:1e:7f:bd:60:e9:9f:
6c:90:78:0d:4d:d2:61:66:e3:f0:08:52:ea:77:e4:c1:9a:59:
53:ee:79:48:31:1b:a6:9a:6d:bd:08:99:aa:e6:90:5a:63:bf:
b7:c2:6d:32:c0:09:38:52:d6:9d:d9:fa:32:ae:d1:06:3c:08:
77:f2:9c:37:9c:76:16:5e:fd:86:56:0f:90:b9:be:d8:52:6a:
44:e2:d7:33:4d:63:44:7c:fa:20:c8:f6:96:59:15:7c:2f:ee:
eb:61:d9:de:91:f1:7f:17:9c:28:31:fd:12:52:f4:b9:4e:8f:
c7:b1:8c:ac:cd:b4:d0:17:97:90:40:f7:5a:57:a3:d4:0d:6f:
da:2b:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:28 2025 by rpki-client