Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.mft (raw, json)
Hash identifier: eqYbfjIrxZNjS6Ob1Uqiz3E+kUXx7LgeESgmXrtG4eY=
Subject key identifier: A7:EB:FF:D2:59:98:AC:78:12:78:E0:26:BB:CC:99:70:4F:30:84:4F
Authority key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Certificate issuer: /CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Certificate serial: 0199FB7C822E7A3AF099CF98E3CAA4D237CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: 7sL1UBW9oIL-S5vfH1jOO3eYhUk.roa (hash: WnpcdVTaXzH616PZ8mN25gQu/poO33PVXu+tGiulqjA=)
2: QONYGt3WuZ3YdEueKIb7sCrpGOM.crl (hash: iMOTc0WBbzNeHt+HZM5uywORTw6aWHoD4ywD6zpvo9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:82:2e:7a:3a:f0:99:cf:98:e3:ca:a4:d2:37:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=a7ebffd25998ac781278e026bbcc99704f30844f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:cf:cb:79:0f:c2:e5:d9:c9:aa:5a:89:82:
5c:1e:57:a8:d1:c2:23:c4:34:04:ad:00:e0:25:de:
f8:4b:41:4b:47:fc:84:73:5a:87:1b:6d:4b:bb:7b:
25:2c:74:53:f3:6c:d9:7d:c5:1a:6a:3a:08:0b:f4:
cf:c5:8d:d0:db:8b:ca:7b:61:da:d0:e2:50:ee:cb:
d7:d7:c0:c8:1c:4b:2f:cb:09:c2:e5:63:fe:c4:4a:
06:80:98:19:88:fe:c4:6b:e0:44:92:78:44:4f:49:
31:c1:42:58:a7:6c:f9:ad:67:75:c4:b3:72:8b:dd:
33:eb:68:c7:79:47:db:e2:7f:50:93:04:8c:1a:11:
ac:f8:cd:88:21:d1:0a:7b:8d:a9:7a:dd:06:2e:1b:
39:8e:17:10:db:51:d3:c3:d4:42:5f:16:1e:a0:0f:
49:0c:1d:93:5b:5b:5a:19:61:9f:f2:6e:d7:53:01:
2d:8d:f1:ef:08:e1:c4:c8:2b:c7:a9:66:c9:bd:3c:
99:a1:61:f6:54:13:ae:e9:64:e2:b6:2b:32:81:27:
38:c2:d7:5f:5e:50:ce:54:1c:ea:1e:b7:35:c0:88:
25:5a:e0:ff:ce:82:23:19:2c:79:7f:8f:6b:a4:f3:
bb:8b:a5:fe:e4:6f:24:20:4c:fe:79:8e:d1:35:e7:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EB:FF:D2:59:98:AC:78:12:78:E0:26:BB:CC:99:70:4F:30:84:4F
X509v3 Authority Key Identifier:
keyid:40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:79:2b:08:ee:f1:8e:5f:22:8f:4d:70:82:05:83:c9:ca:d1:
73:a7:08:6d:e0:7a:c4:e1:19:00:4f:62:d0:84:1f:e4:e5:e9:
59:0d:44:d7:01:6f:38:42:13:e0:e3:e5:5c:44:b4:d8:59:78:
48:7c:c5:0c:3b:b1:be:95:c7:30:c3:4f:f9:f5:1a:2a:ee:fe:
51:f0:b0:c9:5a:d4:f9:08:8d:a8:7f:20:ae:d8:08:07:4c:84:
8e:13:fe:22:b9:8b:35:13:d9:c8:a1:2c:03:a3:6b:42:94:06:
99:2b:b5:8b:ec:e3:47:74:bd:83:c2:f6:0c:d9:6c:cf:8a:72:
df:ff:d5:6a:40:38:ff:74:4f:1f:cc:f4:df:f3:50:c4:bb:93:
22:19:fa:e7:23:3e:ed:34:2a:2d:f4:5d:e1:f0:ed:fc:51:a6:
74:f5:0e:39:e0:73:26:3e:50:65:3a:56:45:d8:be:d8:d1:bb:
41:1e:3c:05:a7:37:39:b5:7c:6b:3b:13:ea:c3:ce:bd:0d:9f:
ca:5c:fd:78:b7:e4:9b:d3:00:df:9b:7f:27:7b:10:0f:97:20:
92:ca:58:38:14:e0:a0:14:72:e7:9d:97:e4:78:89:2c:04:45:
3f:d9:34:8c:6f:ab:d2:88:0d:bd:d1:ab:aa:25:37:ec:50:61:
ce:b2:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:23 2025 by rpki-client