Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: /AxCl59Rem4SztkHbNYBMGJv3VNUGZL34LjMcSBtp+0=
Subject key identifier: 9F:69:58:7C:97:D8:91:99:B0:F7:07:73:F0:23:C3:74:75:8C:7F:B9
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 0199FC8F59773EE90FDFB4F70B93A2A4848A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: bYvhxhKBinJoMyEykYo9LIqORBnx6IVkoaD+ICSKL5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:59:77:3e:e9:0f:df:b4:f7:0b:93:a2:a4:84:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=9f69587c97d89199b0f70773f023c374758c7fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:c7:be:e7:5b:1d:d2:a5:d7:df:f8:88:89:c3:
a7:a3:8f:c6:1e:3b:55:a8:ff:90:b0:23:e8:2b:ce:
74:6b:a6:67:82:b8:a9:b8:7e:e2:d4:f2:d0:ba:85:
2a:eb:ab:a2:4f:1e:95:fd:96:dc:5e:cc:3b:33:20:
13:f9:df:9d:db:2e:a6:d6:29:8e:df:bb:01:65:d6:
97:27:8d:5d:2b:03:ba:8a:a8:0a:cd:ea:25:36:db:
72:73:1c:91:cc:d7:ba:6b:20:76:a9:31:55:64:84:
bc:ae:18:21:b9:c5:02:67:85:b3:7d:70:d3:b6:dd:
af:45:6b:19:a2:2d:fd:ca:9a:0c:cb:fd:91:5e:c6:
79:6b:7e:d4:43:15:f0:7e:81:d8:6c:5b:f9:eb:96:
08:e3:88:07:fb:b4:42:59:be:4c:3b:d5:bc:f3:3b:
d0:88:4b:60:ef:61:c5:04:86:d8:7f:15:46:fc:83:
a0:6f:ae:3a:70:d7:c9:c9:91:db:88:a5:cc:7e:e9:
64:7a:86:c1:73:9f:db:34:1c:86:d3:18:a9:a5:2f:
32:68:38:fd:eb:6a:f6:ba:2b:68:ce:86:c6:42:78:
ef:a4:94:6b:dc:09:02:a9:c8:e9:ec:63:1a:bb:93:
aa:0b:a1:c5:d8:d4:33:94:65:00:d0:43:8f:9c:53:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:69:58:7C:97:D8:91:99:B0:F7:07:73:F0:23:C3:74:75:8C:7F:B9
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:30:bf:0e:fe:3b:75:12:cf:cf:84:30:84:03:6f:cf:21:dd:
e6:a2:5f:21:b9:69:5e:bf:bf:75:83:a2:8e:de:5a:08:bc:05:
ca:a9:6c:33:a6:34:53:e2:c7:1c:7f:fd:21:a5:a6:98:85:d0:
9f:c4:62:0e:a1:3c:84:49:ed:9f:2f:49:87:2c:27:6b:ef:e6:
b7:fc:5d:b2:3f:2b:f1:9b:55:5c:b1:75:af:68:d0:a7:cb:fd:
02:50:64:d7:81:e7:b1:65:37:f8:07:f2:9a:d1:79:9a:43:be:
99:1b:fa:81:d5:6f:03:9e:50:28:48:17:f7:14:05:ae:40:dd:
81:46:89:52:d9:e9:e4:42:df:36:f0:3d:6c:ed:77:60:d6:6f:
78:36:24:11:7e:44:e3:05:3b:d1:f9:0f:25:d4:f7:77:7b:a7:
3c:99:ac:8a:ab:eb:1d:79:d4:45:11:0f:c7:de:2e:9e:42:46:
2e:fc:eb:89:8e:af:2a:50:7c:72:4b:66:b0:81:64:10:32:ec:
f0:8b:f4:a5:8a:69:35:23:6a:2f:4f:18:97:ce:7b:8b:be:0a:
f3:b1:13:ef:ee:6e:6b:bb:d0:ea:ff:ff:c6:ce:88:ac:cc:17:
19:02:30:c3:5b:f0:29:22:c1:8b:1c:74:42:24:9a:47:d7:f0:
c0:a6:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:47 2025 by rpki-client