Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: NSXJnE/cDDyZMYS5+fHyBC1YAISZMndbCZJgfELCbI0=
Subject key identifier: 16:47:FD:57:A0:FD:29:8A:A3:87:BF:61:D8:6A:77:AE:7A:C2:9F:7D
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 019A00350952AEE977731236A4D554D490EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0F77
Signing time: Mon 20 Oct 2025 06:01:06 +0000
Manifest this update: Mon 20 Oct 2025 06:01:06 +0000
Manifest next update: Tue 21 Oct 2025 06:01:06 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: VB8X6zdJG3kieT++Ro3A9A+6I9x9O3CYhEy5m4ZxHbs=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:09:52:ae:e9:77:73:12:36:a4:d5:54:d4:90:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Oct 20 06:01:06 2025 GMT
Not After : Oct 21 06:01:06 2025 GMT
Subject: CN=1647fd57a0fd298aa387bf61d86a77ae7ac29f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:10:70:40:9b:58:de:39:0b:f0:89:78:20:
98:21:76:8a:27:5d:19:1d:2d:92:a2:4b:6f:e4:ec:
6d:92:b6:ba:68:24:dc:5d:63:c9:4d:9a:0c:c8:6a:
13:77:14:2a:40:0d:fa:3c:c1:ab:b9:9a:c4:24:72:
e8:c2:7e:47:fc:d4:b3:02:c2:e7:22:7d:4a:8e:dc:
92:93:c5:28:9a:b7:f9:03:9c:88:71:e6:30:3b:b1:
2a:2b:ee:26:7e:89:3f:6f:e1:60:a6:8e:32:36:6a:
b4:14:c8:de:e3:d9:99:df:2e:75:1f:27:1a:0f:49:
db:78:f6:b5:47:4e:74:ed:fe:d2:2b:6a:54:86:58:
81:59:d6:29:fc:98:eb:cd:0a:8f:b6:11:c8:8d:5a:
ab:c0:ae:55:0f:85:32:87:44:f7:40:53:59:18:9a:
c9:70:61:85:0c:bf:ed:c8:3c:aa:e8:72:f4:2a:bf:
a4:02:d3:6c:e8:ca:20:7d:78:a4:51:74:f6:59:f7:
04:cd:4b:1d:3c:62:25:ca:43:d6:80:ba:3f:c2:4b:
85:67:df:bc:ab:7b:a5:52:4f:ef:9a:05:67:58:40:
6d:8f:18:da:ac:a1:15:3f:27:b0:4e:06:98:ef:e0:
46:60:1e:44:d3:4f:04:85:12:73:dc:b1:61:57:ab:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:FD:57:A0:FD:29:8A:A3:87:BF:61:D8:6A:77:AE:7A:C2:9F:7D
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:ef:ef:43:ae:b5:9c:91:a3:8c:87:3b:a3:11:f2:7b:27:6a:
e8:86:e7:89:dd:a7:58:26:01:f9:5c:71:6c:5c:bb:b3:19:4a:
7a:64:82:7b:5d:60:62:c9:89:06:85:99:a3:e4:92:98:32:e6:
a3:11:9e:2e:a5:93:9e:2e:81:0a:fb:af:03:46:d8:87:3d:1e:
91:52:54:ba:ea:c3:d1:63:9c:2d:e8:3e:dc:4f:65:f0:b2:b8:
e5:02:53:fd:24:c9:6f:59:78:8a:3a:55:38:30:de:80:c5:96:
cd:3d:a0:84:7e:a9:b9:35:b6:ca:fb:27:32:8d:77:36:e0:fd:
4c:cb:18:ae:d0:d4:a7:89:c1:bb:74:85:48:06:71:1b:e4:91:
02:dd:20:bc:8d:51:44:b3:b9:67:8e:2f:3d:f7:07:ad:c4:6e:
d8:fa:93:a0:fa:00:66:72:fc:6b:57:db:b3:7e:5b:e7:4c:2d:
a1:fa:f9:52:d5:46:f3:d1:25:58:fa:29:4e:0a:95:52:88:12:
95:2e:51:ac:26:a5:af:4b:9a:e4:f3:97:5f:ce:f3:09:82:68:
4c:5c:44:00:0c:c7:92:22:8c:bf:8d:05:c1:28:80:2d:d8:90:
7d:c6:c8:40:01:f7:74:4c:4c:ab:98:53:54:a9:6c:38:7e:ee:
e1:a0:f9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:42 2025 by rpki-client