Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: 9izsgUzGoJl0FmJC2GroH8bNYVgykSlPkBnhu8pWvOE=
Subject key identifier: 13:13:67:6A:3E:25:66:CA:DE:19:D5:2E:36:F7:38:AB:A7:BF:44:31
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 0199FB7C7C6CD039A7C725A9DF34CC9D7F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa (hash: P+0tfOZ2RaLt/nUPuFjZ/CAtJcAtybwXEXHcIsSIUm4=)
2: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: jg2WrRP8N8LfK3IojWUbQSLrf2IFAIIPFLD3Rrd+xSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7c:6c:d0:39:a7:c7:25:a9:df:34:cc:9d:7f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=1313676a3e2566cade19d52e36f738aba7bf4431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:46:2a:76:42:79:bf:b6:78:3d:00:90:23:
16:91:14:bb:52:10:e8:48:3a:dd:fc:55:06:c8:91:
3a:44:3b:d6:7f:39:1f:67:14:98:ae:95:30:34:7f:
46:c9:56:9b:da:1b:11:24:33:ec:1c:c3:4f:62:65:
6f:27:69:57:08:4a:25:b6:da:ad:c0:52:ae:b8:06:
64:84:d9:c1:87:a0:67:87:66:b9:4e:47:92:8a:ae:
a8:a4:93:97:a7:0a:4d:7c:fb:2e:73:24:04:80:4d:
83:de:56:97:c4:8b:2a:81:36:80:a5:30:22:39:a8:
3f:60:ef:01:1b:19:4c:00:98:2c:20:9f:c9:6f:7a:
23:e6:a3:57:48:96:6c:99:5f:bf:ae:42:e6:e0:d6:
32:bc:0d:55:d0:2d:90:d2:5a:1c:84:dd:c1:5f:27:
e2:ad:b4:bb:7f:23:d0:e8:1c:57:23:89:80:3f:6b:
ac:e2:6a:94:64:2e:85:30:fb:37:87:58:be:d7:bf:
36:07:7c:e3:41:6c:06:c3:51:29:ee:9e:6e:8e:36:
e3:25:6e:3c:83:d1:04:dc:c4:83:f6:d0:f3:97:69:
4f:20:b3:67:cf:14:22:a5:72:67:d7:10:1b:5e:a9:
f8:69:07:e3:7f:3e:94:ff:fe:73:5a:23:8c:d3:7b:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:13:67:6A:3E:25:66:CA:DE:19:D5:2E:36:F7:38:AB:A7:BF:44:31
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:87:3b:bc:d7:00:cd:71:fd:a3:d4:a2:01:d3:78:ee:9f:34:
73:80:22:34:59:d1:9d:a7:2c:5d:5c:95:d1:d2:7f:e0:ac:c8:
5c:12:9e:e6:ed:68:c1:62:85:75:a7:eb:6f:77:69:ba:7f:10:
e7:f1:59:75:43:05:c5:3c:5f:ae:96:ca:a8:00:68:51:67:9e:
28:65:91:97:2c:ea:07:af:67:82:d2:d9:d1:eb:63:43:dd:6a:
a0:51:30:55:bc:af:c7:28:04:8b:f7:ad:b5:11:19:51:84:c9:
a5:72:1f:86:8c:b9:28:59:bc:12:80:c9:e4:fe:2e:3e:0b:2f:
94:a6:90:5b:d0:2a:7f:1b:63:ab:22:35:26:19:a3:18:dd:30:
ed:b1:23:84:d7:62:cc:70:af:54:b9:9c:b5:a4:68:74:74:91:
bd:2d:48:8c:95:d4:10:16:bc:28:72:53:4f:c6:94:99:07:2b:
c3:2c:c3:b5:70:ef:62:9f:ae:a6:1c:f5:60:a1:d0:64:d0:2b:
03:23:8e:b8:c0:d8:5b:95:64:e7:59:c8:74:4f:c5:3b:a8:3e:
ee:ea:15:c9:a0:9b:4a:fe:ab:63:47:b4:42:61:af:c0:65:a2:
43:2b:f9:14:55:24:2d:7e:e9:38:bf:29:1e:3a:63:2e:68:c3:
fa:71:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:57 2025 by rpki-client