Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: k/cflmVEqDs1UXkPzYAN787P54HesOyhbqk3bdE4FbQ=
Subject key identifier: 20:99:C8:23:90:DB:3C:B3:83:1B:AB:F6:9A:93:9F:2E:24:E3:86:EE
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 0199FDD95BE6F53F133BD03909ABA18832C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: HdWKMjcCzSaEDWX53rhZIhPvSIl3TZvce+WafV93vu4=)
2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5b:e6:f5:3f:13:3b:d0:39:09:ab:a1:88:32:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=2099c82390db3cb3831babf69a939f2e24e386ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:1a:24:c4:4a:68:bc:92:dd:1d:3b:87:84:
81:31:db:c0:a1:2e:95:99:c7:e5:60:a0:cf:3c:17:
b9:93:2a:b9:72:1f:5a:97:c3:d9:5e:1f:5d:21:60:
bf:90:78:e7:b9:7b:24:f2:94:d2:3d:89:8b:3d:35:
e1:05:fc:98:11:7f:73:07:fe:fe:02:0f:cd:21:bd:
71:69:51:99:d2:9b:25:ae:9f:af:08:ef:cf:bc:91:
d5:ec:fa:94:60:69:a0:7a:62:75:d8:9f:60:c0:4f:
3e:bc:ce:1c:0d:1b:d8:e2:87:36:20:00:24:c0:57:
dc:3a:7f:dd:7d:9a:f7:75:7e:8b:15:ba:40:f3:f8:
cd:0e:0e:a0:cc:d7:4d:92:3f:64:5f:96:15:df:2f:
21:58:fe:c9:03:c2:8a:d7:44:44:27:10:69:67:c1:
25:87:ba:53:5b:f8:03:ba:9a:25:26:e7:75:be:03:
34:60:2b:9c:ab:63:34:3f:fc:f4:35:6c:9b:bc:e1:
28:0e:2b:b7:c1:fc:92:1d:33:94:9c:e8:3c:ea:8a:
90:12:f2:9d:92:6f:6e:4e:ce:53:46:5c:30:74:2d:
eb:9b:b7:48:85:46:13:4d:82:c0:e8:38:79:94:ce:
6a:df:47:99:68:67:5a:07:7f:e1:a3:81:0e:19:e5:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:99:C8:23:90:DB:3C:B3:83:1B:AB:F6:9A:93:9F:2E:24:E3:86:EE
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:06:b3:5a:fd:64:32:01:2b:c2:44:49:9c:b1:9c:64:6c:05:
b2:89:5c:60:e3:23:41:47:3d:26:f7:d9:e7:8a:e8:55:d1:06:
f8:11:82:0f:84:9d:37:eb:b3:6c:51:c6:29:f6:a5:60:ce:57:
ee:38:e9:b6:f9:e8:f6:e1:a6:fd:75:82:a9:d4:07:47:29:c7:
b6:56:0c:c4:c8:70:d5:cc:0e:57:1c:5a:0b:06:f8:32:97:f0:
55:04:b9:47:98:d1:66:7a:98:9a:69:27:ca:da:fa:87:88:e5:
e4:9c:b1:e0:11:f4:4a:cb:39:fa:23:9c:f9:39:63:47:5d:80:
bd:22:b2:ef:26:47:fa:72:c7:ba:61:21:1b:8c:ae:c0:b9:4a:
01:f4:f2:de:71:6f:0e:d4:9a:0b:74:95:f4:88:d6:53:8c:4d:
fe:6c:49:f5:70:2f:77:db:59:33:db:cc:2e:71:ca:6e:96:c3:
fe:e2:54:b7:80:6e:f1:96:72:43:14:20:04:fc:13:c8:c7:a5:
1c:9b:1b:63:59:5b:dd:53:20:ee:45:e7:66:3f:ec:9c:60:6a:
16:42:f7:75:19:53:69:71:c2:94:31:f1:36:6e:46:5b:01:95:
c9:39:a1:97:bb:09:b3:a6:38:4e:4b:2b:c1:5a:38:fe:1c:7c:
5b:5b:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:18 2025 by rpki-client