Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
File: QGHbehW9JPvKFGzRLMcNQTnIW58.mft (raw, json)
Hash identifier: Uh6SKwwoS9kMEOLUayo4oCaIV1S30X453RGP3VXnuv4=
Subject key identifier: E4:7F:80:18:67:05:41:9C:A5:F0:4F:20:38:FD:8C:A8:6D:0A:57:76
Authority key identifier: 40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
Certificate issuer: /CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Certificate serial: 0199FEEBBDA1727D6F279E8F0B961DC87A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
Manifest number: 16B0
Signing time: Mon 20 Oct 2025 00:01:26 +0000
Manifest this update: Mon 20 Oct 2025 00:01:26 +0000
Manifest next update: Tue 21 Oct 2025 00:01:26 +0000
Files and hashes: 1: QGHbehW9JPvKFGzRLMcNQTnIW58.crl (hash: 30keUH/LDFDyHzgua+JZKVYu2BprpD8tY3lPz8CoT4Q=)
2: o-ZlaW1WgunU3TjJVwdOR6husz0.roa (hash: 4yZiG/NqXqcKJ1Bdf8yQPmHJloI/I/ZH5JktUOUh3mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:bd:a1:72:7d:6f:27:9e:8f:0b:96:1d:c8:7a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4061db7a15bd24fbca146cd12cc70d4139c85b9f
Validity
Not Before: Oct 20 00:01:26 2025 GMT
Not After : Oct 21 00:01:26 2025 GMT
Subject: CN=e47f80186705419ca5f04f2038fd8ca86d0a5776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:67:46:9e:03:42:71:0b:1a:eb:25:d7:99:
c6:19:8d:87:c0:71:03:ca:76:08:c2:ca:85:48:a4:
e9:2a:0d:c8:b0:17:f4:c6:55:99:73:8a:62:57:c7:
5d:df:dd:c3:8e:75:33:d8:ba:b5:70:8f:33:a5:7f:
76:d7:11:0d:9e:84:b4:fa:f8:58:fb:a6:0f:05:b3:
72:6a:43:a3:38:67:97:41:34:91:85:86:f4:46:f3:
31:a9:41:be:42:15:85:4e:40:55:e5:44:24:36:26:
21:39:55:d4:f0:dc:ce:1d:b8:44:5b:14:07:8c:7a:
99:77:42:25:c3:19:f9:2b:e2:02:4b:ab:16:16:62:
b5:5b:af:f2:d1:94:27:c9:c9:84:ee:59:4b:c6:ac:
fe:7d:22:f8:65:1f:cf:6b:49:eb:d2:00:1c:94:2d:
9f:c4:5e:76:d8:58:f7:02:98:d4:b3:3c:c2:88:9f:
9c:17:83:fc:61:88:63:12:f2:3e:f1:8e:49:09:4b:
98:f3:b1:79:2a:33:51:ee:83:b8:6e:10:9c:13:c2:
30:4f:29:7d:4f:46:95:7c:f9:f8:75:95:74:f1:cd:
49:80:de:93:06:c6:f7:d8:ff:14:0f:44:ad:2d:be:
24:95:89:75:d3:61:5b:60:2f:ff:2f:2f:1c:62:88:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:80:18:67:05:41:9C:A5:F0:4F:20:38:FD:8C:A8:6D:0A:57:76
X509v3 Authority Key Identifier:
keyid:40:61:DB:7A:15:BD:24:FB:CA:14:6C:D1:2C:C7:0D:41:39:C8:5B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGHbehW9JPvKFGzRLMcNQTnIW58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/004c3b-aa3f-4d8b-826f-199d14c06bcb/1/QGHbehW9JPvKFGzRLMcNQTnIW58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1d:bc:d6:e5:fe:64:1e:03:0d:75:6d:0d:4f:8d:39:14:7c:
fb:3e:35:dc:ce:9e:89:78:69:2b:9c:29:6b:46:cc:6a:e7:39:
2f:8e:8d:1c:1c:7a:a8:26:de:ec:27:e4:1c:00:e9:38:7a:9d:
1c:ba:75:57:fa:61:5d:99:47:4d:a6:a4:89:13:d5:64:8f:ba:
89:ab:f7:6b:c6:77:b1:f2:05:c3:c9:8a:06:7c:91:9f:79:4f:
96:01:c3:4c:fd:0c:97:04:3d:b3:8e:90:55:e8:ac:00:15:2a:
d2:8f:77:f7:0b:99:6d:1d:fa:97:13:32:7b:ac:83:f3:74:d6:
2b:00:71:70:07:0b:dd:c4:5a:7d:4c:68:fb:5c:19:61:a3:99:
df:18:db:47:02:0a:34:80:b2:eb:5f:9c:53:4c:ef:08:38:f5:
25:8b:12:7c:67:a6:46:94:70:08:5e:86:f7:77:df:e3:e4:65:
3c:60:8a:12:66:af:3b:fc:fb:63:0d:b4:bf:1c:1c:b8:4d:3b:
af:15:ea:ab:29:05:2e:e2:09:5c:7f:f9:78:87:11:09:55:40:
f4:55:75:9a:d4:69:54:1b:12:54:ca:c5:15:ad:85:ff:74:40:
07:c5:5f:7d:ca:4d:99:a7:fa:63:ca:c5:53:71:f2:a1:6b:b5:
30:16:c2:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+672hcn1vJ56PC5YdyHqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNjFkYjdhMTViZDI0ZmJjYTE0NmNkMTJjYzcwZDQxMzlj
ODViOWYwHhcNMjUxMDIwMDAwMTI2WhcNMjUxMDIxMDAwMTI2WjAzMTEwLwYDVQQD
EyhlNDdmODAxODY3MDU0MTljYTVmMDRmMjAzOGZkOGNhODZkMGE1Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn31nRp4DQnELGusl15nGGY2HwHED
ynYIwsqFSKTpKg3IsBf0xlWZc4piV8dd393DjnUz2Lq1cI8zpX921xENnoS0+vhY
+6YPBbNyakOjOGeXQTSRhYb0RvMxqUG+QhWFTkBV5UQkNiYhOVXU8NzOHbhEWxQH
jHqZd0Ilwxn5K+ICS6sWFmK1W6/y0ZQnycmE7llLxqz+fSL4ZR/Pa0nr0gAclC2f
xF522Fj3ApjUszzCiJ+cF4P8YYhjEvI+8Y5JCUuY87F5KjNR7oO4bhCcE8IwTyl9
T0aVfPn4dZV08c1JgN6TBsb32P8UD0StLb4klYl102FbYC//Ly8cYojyMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR/gBhnBUGcpfBPIDj9jKhtCld2MB8GA1UdIwQY
MBaAFEBh23oVvST7yhRs0SzHDUE5yFufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdIYmVoVzlKUHZLRkd6UkxNY05RVG5JVzU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wMDRjM2ItYWEzZi00ZDhiLTgyNmYt
MTk5ZDE0YzA2YmNiLzEvUUdIYmVoVzlKUHZLRkd6UkxNY05RVG5JVzU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wMDRjM2ItYWEzZi00ZDhiLTgyNmYtMTk5ZDE0YzA2YmNi
LzEvUUdIYmVoVzlKUHZLRkd6UkxNY05RVG5JVzU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJh281uX+
ZB4DDXVtDU+NORR8+z413M6eiXhpK5wpa0bMauc5L46NHBx6qCbe7CfkHADpOHqd
HLp1V/phXZlHTaakiRPVZI+6iav3a8Z3sfIFw8mKBnyRn3lPlgHDTP0MlwQ9s46Q
VeisABUq0o939wuZbR36lxMye6yD83TWKwBxcAcL3cRafUxo+1wZYaOZ3xjbRwIK
NICy61+cU0zvCDj1JYsSfGemRpRwCF6G93ff4+RlPGCKEmavO/z7Yw20vxwcuE07
rxXqqykFLuIJXH/5eIcRCVVA9FV1mtRpVBsSVMrFFa2F/3RAB8VffcpNmaf6Y8rF
U3HyoWu1MBbCRA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:05:18 2025 by rpki-client