Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: b+/EFiINt6tIFkD3s0H3/XhgAumyrPyyPvMVZlea704=
Subject key identifier: 1A:3B:B2:24:99:80:7F:77:00:6A:F1:20:BC:35:1B:CF:61:93:C4:F8
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 0199FCC65F69ED779C31D5EBE7FE8868D85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 11FE
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: sFcP/XQ0bQHWVMUpTAOYezdBrNm+pnXp7P1bGj9k3o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5f:69:ed:77:9c:31:d5:eb:e7:fe:88:68:d8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=1a3bb22499807f77006af120bc351bcf6193c4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:27:dc:6a:7f:a8:60:50:95:36:21:9b:1e:
2d:66:24:68:69:4c:41:5e:8d:c9:4d:c9:99:57:85:
a5:e0:8f:eb:71:d4:28:99:3d:8f:44:15:34:5d:2e:
c1:05:dc:8c:8b:00:dc:87:3d:6e:ae:bc:63:6c:20:
e9:d7:df:97:7b:54:72:95:e0:a8:35:f6:15:c3:33:
ac:78:65:51:e8:7d:67:66:05:81:ef:fd:e1:bb:92:
7e:38:a4:75:be:5c:f6:f8:c0:34:d9:bb:3f:66:20:
18:2f:5f:ab:4a:81:a9:51:0f:74:23:44:44:31:0b:
5f:2e:7e:65:ee:fb:be:f9:ac:a2:50:cc:e1:ee:6f:
db:51:39:27:c7:44:ca:8d:59:c3:8c:83:ef:3d:9b:
c6:f1:85:9c:ec:75:56:ad:5c:5f:5b:6b:d8:e6:75:
96:74:12:a9:70:1d:e4:9a:8d:ef:b7:c1:b6:fd:14:
c7:8a:7c:9c:32:3f:34:2b:ec:6b:cc:2f:86:a0:02:
a4:3f:2b:81:ad:da:4a:44:7a:b5:35:a9:7e:c1:77:
70:ec:de:b0:ab:3f:44:d6:83:fc:a7:33:dd:44:91:
fd:b9:1a:cb:b3:9b:12:1a:ca:d6:72:e0:41:97:56:
a2:47:3f:06:46:a2:f7:07:61:b5:5a:28:ad:c0:87:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:B2:24:99:80:7F:77:00:6A:F1:20:BC:35:1B:CF:61:93:C4:F8
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:87:0b:38:f0:ff:1c:43:dd:65:b9:fc:c6:29:8e:6a:43:ee:
79:f6:37:81:30:47:83:58:74:86:56:49:ed:6d:b8:57:c2:d0:
21:55:8e:35:03:e9:d4:f7:56:e7:d9:a2:7f:36:d1:5c:23:51:
d0:70:0b:ac:86:ea:d5:00:39:60:15:5e:97:fe:b9:4a:20:47:
c1:09:f6:b9:eb:3f:ec:b4:41:fe:1b:39:e8:e6:a6:57:8f:25:
c3:d0:4a:c5:18:d1:be:b8:40:83:56:63:5e:3a:9b:e7:5e:b1:
d8:09:83:82:00:58:20:80:11:da:3a:70:90:25:dd:e0:42:25:
94:16:47:00:92:6e:38:f9:9a:97:cc:b2:88:75:97:b7:0d:f7:
86:d5:ad:54:8c:61:e1:16:f0:4c:7a:f3:34:ea:19:fd:d3:57:
8f:51:74:0a:11:5d:8b:a4:1e:a8:0a:f6:39:92:1f:6b:b7:d1:
95:a9:ea:94:25:08:34:95:c3:40:f8:6d:39:58:2d:47:de:a3:
c6:c0:4b:ce:2c:e5:e0:7a:e2:c1:15:d0:63:f7:1a:9f:ef:18:
03:72:f1:21:fd:60:e1:74:4a:e6:96:2e:58:12:ce:63:23:ee:
0f:89:b1:dd:c2:14:7c:71:d3:ce:19:8c:a6:78:5e:d2:d6:8b:
18:af:33:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:27 2025 by rpki-client