Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
File: QlbgyzjNYSXO4U5Jcii4SQodQOk.mft (raw, json)
Hash identifier: D1zRjl9Xa9Kq1x28GnNagbxa8zXmRgqoTiqV7cK/ja4=
Subject key identifier: 55:E6:14:A6:8F:69:D4:0B:A8:D2:9E:88:1E:0F:3C:C8:89:71:DE:ED
Authority key identifier: 42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
Certificate issuer: /CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Certificate serial: 019A00A317DE2B110435D40F428C3A381A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
Manifest number: 0640
Signing time: Mon 20 Oct 2025 08:01:19 +0000
Manifest this update: Mon 20 Oct 2025 08:01:19 +0000
Manifest next update: Tue 21 Oct 2025 08:01:19 +0000
Files and hashes: 1: QlbgyzjNYSXO4U5Jcii4SQodQOk.crl (hash: xApqi2F5ytS+77exw/7Y4SXYTQhQqPcqzE4qsmdhwhA=)
2: ekPIeumjzc0aQ-0qnlrmTiVhDJI.roa (hash: MI/BYhVlkTAuExjmOk0h+DG2/B/CqzwrvfdzA0OS10s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:17:de:2b:11:04:35:d4:0f:42:8c:3a:38:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4256e0cb38cd6125cee14e497228b8490a1d40e9
Validity
Not Before: Oct 20 08:01:19 2025 GMT
Not After : Oct 21 08:01:19 2025 GMT
Subject: CN=55e614a68f69d40ba8d29e881e0f3cc88971deed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:16:51:7f:af:37:d4:cd:fd:fe:07:70:7a:
55:4b:15:c2:21:56:3f:e5:e8:1d:d4:3c:7d:5a:e5:
70:6a:fa:3c:bc:88:ce:13:25:69:12:d9:e2:cc:08:
7b:6c:86:34:1e:14:15:4f:d7:ce:06:83:39:79:89:
cb:7a:b7:d4:50:77:8a:fd:d6:ae:a5:85:a7:73:ef:
d0:29:54:dd:8e:e4:e8:8c:4f:c9:0b:93:0b:fc:70:
ff:77:dd:15:29:7f:a2:15:70:bd:87:cd:b3:35:06:
d8:3d:e8:96:fe:3c:b6:68:e9:29:2c:f5:c4:2c:fa:
b0:9a:59:61:75:ef:a5:a1:86:0f:4f:98:2b:88:48:
c2:62:53:43:eb:8a:59:c0:1f:63:c6:99:d6:59:4f:
b0:cd:f4:21:56:40:91:c7:36:1e:dd:8c:e6:72:95:
09:e5:84:c1:0d:95:7b:42:23:e3:cc:fd:29:6b:49:
31:69:70:1e:7a:8a:7f:ec:df:24:cd:7f:f5:f8:aa:
ea:be:ec:9e:7d:56:a5:74:43:f3:ec:8c:66:19:e6:
c7:71:8f:70:45:3b:b7:b3:91:0e:27:eb:fe:cf:ed:
c5:ce:28:61:58:45:b4:2e:38:16:f9:1d:19:02:23:
20:cd:9c:d3:86:c7:a1:d9:f0:47:3b:f9:ae:a4:38:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:14:A6:8F:69:D4:0B:A8:D2:9E:88:1E:0F:3C:C8:89:71:DE:ED
X509v3 Authority Key Identifier:
keyid:42:56:E0:CB:38:CD:61:25:CE:E1:4E:49:72:28:B8:49:0A:1D:40:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlbgyzjNYSXO4U5Jcii4SQodQOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c314f4-b1ac-426f-8f21-a5e850b6a1bc/1/QlbgyzjNYSXO4U5Jcii4SQodQOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:2c:5c:f6:36:9b:f6:fa:01:00:ba:b1:c7:3c:dc:49:3a:8c:
c0:55:34:46:8e:5f:1a:48:dd:22:47:c8:c2:1c:bd:39:17:ee:
5e:49:dc:3c:96:e8:e1:16:b5:be:36:cd:ca:98:be:95:17:23:
9b:af:f1:96:c0:6a:ae:dd:66:37:ab:0d:60:58:c2:b7:d5:7d:
84:d2:eb:d4:38:9a:11:80:af:03:fc:b9:f3:ba:ff:11:1c:1d:
c9:40:53:2c:fe:50:28:cf:c1:e4:9b:86:c1:50:21:37:4d:a9:
54:93:ce:5c:9a:86:30:b3:39:60:ae:a5:8f:4b:9b:2c:aa:08:
93:96:28:d0:36:3f:eb:cc:f7:e6:8d:36:4a:2c:29:b6:3a:af:
05:1e:06:ab:39:e9:6e:4a:49:bb:ac:e2:4b:3f:a4:2c:fc:57:
79:b6:6e:de:f9:a4:64:c1:db:79:38:fb:0e:9b:37:4c:f7:1e:
f3:d6:4b:4f:05:82:8b:bf:00:fd:62:29:a5:6b:ed:a5:f3:2c:
a1:96:c8:c5:79:1f:8b:49:50:0a:34:29:8d:8d:ce:d4:95:41:
d8:fe:be:23:72:fa:f2:5f:07:44:74:cc:ec:70:fc:b2:47:d9:
a3:9e:6d:bd:fc:de:b9:f8:b3:3b:fc:9e:6b:70:21:c7:de:4e:
6e:92:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:33 2025 by rpki-client