Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier: uTAWk4fxQCrkRINgWjTpr3Q6DI5fGMfDlICt5EWvWb0=
Subject key identifier: 40:21:D2:63:4A:23:E5:1E:5F:0D:89:DE:CF:FD:90:4D:DA:C3:8D:85
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial: 0199FBEB978BC6CE86DB2573930137027B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number: 0DB8
Signing time: Sun 19 Oct 2025 10:02:24 +0000
Manifest this update: Sun 19 Oct 2025 10:02:24 +0000
Manifest next update: Mon 20 Oct 2025 10:02:24 +0000
Files and hashes: 1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: kHZniULslmZjQd7YwQ5UoITolhVq+XMfvEeJNAO2s20=)
2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:97:8b:c6:ce:86:db:25:73:93:01:37:02:7b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Validity
Not Before: Oct 19 10:02:24 2025 GMT
Not After : Oct 20 10:02:24 2025 GMT
Subject: CN=4021d2634a23e51e5f0d89decffd904ddac38d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:f1:ca:2a:1d:70:13:3f:8a:f9:79:2b:d2:
9d:50:d2:42:64:63:ad:a1:06:77:7f:3b:3e:aa:2b:
46:46:c1:79:de:1b:7e:76:5d:ed:16:45:b5:b5:53:
c7:67:ab:17:88:ef:ef:44:cd:ea:b6:0e:da:e8:7b:
8d:da:4a:41:6b:83:be:44:40:66:4e:3e:10:11:87:
5c:7d:1c:58:66:fb:79:d6:5b:32:ea:56:df:26:81:
be:75:7a:60:26:f5:5c:13:11:3a:0e:1c:64:df:2b:
3f:b2:38:31:d4:00:bb:49:eb:21:2a:d2:dd:a5:1b:
87:2c:3f:9e:07:15:8a:c1:8b:54:8c:32:34:6d:22:
f3:53:78:c1:e1:79:28:3b:63:e4:a7:74:4f:de:ef:
0f:f1:ad:42:ef:9d:47:44:c9:1b:d9:88:37:94:c0:
58:c9:7b:ce:6a:a5:fd:ed:3d:57:09:f5:d3:ad:2f:
3d:e6:4c:ea:76:3d:28:d5:f3:a3:b4:74:8b:25:5d:
1e:b4:c7:bd:b5:f6:28:71:5e:9b:2a:d7:81:a7:79:
4e:1f:42:e5:32:8b:47:00:d3:e2:31:bd:fc:34:71:
e7:e4:0e:2c:c4:8b:0f:21:6b:7f:c6:4c:fd:90:92:
38:c3:0c:1d:a7:88:a2:ba:7d:95:7c:72:88:13:b7:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:21:D2:63:4A:23:E5:1E:5F:0D:89:DE:CF:FD:90:4D:DA:C3:8D:85
X509v3 Authority Key Identifier:
keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:86:70:be:6b:cd:57:05:56:3e:63:e3:95:b0:e5:7e:e0:4e:
de:05:50:03:1f:16:11:b2:f9:46:56:f0:57:4c:ec:ce:2c:5c:
ac:bc:cd:db:df:c7:3b:bc:ea:52:bc:fe:ed:8d:fa:e0:02:58:
3d:f5:d4:3a:a6:c5:bc:32:e6:ed:11:47:2b:15:7c:69:eb:74:
ff:23:62:6a:8d:f2:da:57:f7:40:3c:39:2e:f1:6a:4b:9b:5a:
ce:fc:58:67:b8:2d:e6:f7:df:2f:e0:00:3e:8e:5a:fb:3a:27:
17:71:e5:bb:fc:91:92:0b:4c:d7:53:e9:a7:61:24:e9:4c:fd:
6a:cd:94:da:f6:aa:54:d0:b3:04:f2:ff:d1:54:17:8e:04:03:
a9:91:ae:a0:0a:4a:3b:8c:56:69:ff:bd:42:ad:5b:bb:8a:08:
b6:97:dd:12:ed:0c:3c:ee:c3:97:de:b3:64:ac:e6:d4:07:d5:
44:91:52:99:42:67:7f:7c:3f:08:d6:e5:19:9f:b6:88:69:1d:
4c:6d:2f:1c:68:82:8f:1f:92:64:fe:ba:33:13:95:0c:73:a8:
c8:32:98:47:ca:b9:a6:a1:8d:c8:8f:61:42:07:67:70:e0:63:
4d:e5:e2:0d:00:fd:7a:c2:63:e3:36:fd:c7:c9:24:f9:60:10:
e5:34:30:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:59 2025 by rpki-client