Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
File: QXc-Xx1p3qDAHzE5eWLn10tD17o.mft (raw, json)
Hash identifier: x/sgV5gz2GnYjLYAsRpY/lNdj5GuqaC7jSlIIkQfypg=
Subject key identifier: 1E:CA:07:D8:8C:E2:77:4B:52:D8:2B:1A:9A:A1:7B:88:1F:02:41:46
Authority key identifier: 41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
Certificate issuer: /CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Certificate serial: 0199FC8F48EF5E75D561C9EA371F5C82B08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: NQOLfJVX_vVpBv1f8Gp913T9yy0.roa (hash: stjbo1zNgVaXdBLW+9MS1MMZaoclllk3ul73C9N6vmM=)
2: QXc-Xx1p3qDAHzE5eWLn10tD17o.crl (hash: 65QPP61Vn48qhCZYxO36MqPhFDMyBXOYTdMb7igdCoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:48:ef:5e:75:d5:61:c9:ea:37:1f:5c:82:b0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41773e5f1d69dea0c01f31397962e7d74b43d7ba
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=1eca07d88ce2774b52d82b1a9aa17b881f024146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:5d:be:e7:7c:18:80:4a:99:be:bf:c2:6c:
c3:c0:20:30:d3:da:7b:57:18:89:72:79:47:68:f3:
fb:6c:6f:23:1c:6a:0a:a6:35:1e:74:a4:fc:a7:cd:
ea:2e:75:d7:6b:8e:47:19:df:47:f7:a2:08:54:c8:
cd:b8:68:cc:bc:c7:03:ca:39:a3:df:22:e0:aa:5e:
cc:de:24:b5:6f:14:5a:3f:c2:09:6f:27:4e:9d:d1:
87:9b:3d:42:55:b8:9a:64:36:85:b8:2b:c5:d4:70:
2c:43:1a:bb:b3:25:b6:b4:46:1b:5f:49:a7:89:1c:
b9:df:27:f8:56:1a:41:9c:2f:b2:63:f2:4d:e3:ce:
af:a2:84:c5:f2:e2:3f:66:3a:09:f8:f4:7c:92:b6:
5d:b6:85:8f:c2:71:bc:2a:88:e4:33:cb:87:e5:27:
56:e1:8e:70:67:90:50:82:98:4e:06:d1:ba:c1:eb:
60:68:39:c1:c6:f8:f9:75:a5:ed:83:ad:a0:2d:34:
89:c8:97:94:4e:67:4d:d9:eb:5a:c2:4a:cc:88:b0:
4e:65:cb:fc:e5:d3:9c:26:c5:f2:02:96:88:9e:23:
86:c5:47:4e:6c:d8:95:4f:16:33:d4:85:c4:ad:26:
b8:24:f6:2b:1c:6a:59:90:fe:50:13:2a:37:23:ef:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:07:D8:8C:E2:77:4B:52:D8:2B:1A:9A:A1:7B:88:1F:02:41:46
X509v3 Authority Key Identifier:
keyid:41:77:3E:5F:1D:69:DE:A0:C0:1F:31:39:79:62:E7:D7:4B:43:D7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXc-Xx1p3qDAHzE5eWLn10tD17o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cccc48-5781-4d64-a2b2-1bf6c509d0c5/1/QXc-Xx1p3qDAHzE5eWLn10tD17o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2f:48:1c:4a:5f:a2:f2:c3:4a:e6:94:fa:09:5a:ec:d9:10:
3b:5f:50:81:7d:9d:fd:91:69:53:8b:b9:92:a1:80:66:04:b8:
70:0c:dd:44:44:c3:d3:72:84:44:3f:33:63:a7:09:90:e4:0e:
ef:52:54:f1:fe:05:25:d4:81:aa:cf:3a:18:03:1e:e7:30:66:
43:82:7c:70:41:06:99:a9:7a:52:34:a7:1f:b1:ed:9b:c9:26:
3c:a8:98:e6:04:79:13:7b:0d:c9:a6:f1:fb:06:23:5e:5e:ea:
8a:56:7f:6e:37:af:03:c8:21:28:ce:be:91:a6:f8:3b:6f:d8:
f1:1e:0c:50:3c:fb:ab:5f:fd:03:3f:48:16:ef:41:0c:d1:06:
51:79:01:00:c3:81:c6:71:c8:4b:25:91:3a:02:16:24:b6:6e:
87:f2:43:6c:f1:37:3b:9c:1d:75:ac:91:ba:6d:9c:e4:d7:9c:
4c:04:f5:ac:bf:00:98:ce:b1:d5:84:07:ca:7b:04:d3:ea:4e:
f3:ba:38:6b:90:fd:dc:30:42:52:a9:00:72:f2:e9:6c:11:07:
77:6d:5a:d6:ad:96:f6:8b:e4:be:b4:e3:fa:57:5c:bd:8f:6b:
71:06:5c:16:03:f7:f4:30:36:66:7f:11:e8:50:29:e9:4a:ee:
ec:0f:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:11 2025 by rpki-client