Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: XbMDenkDnafj/BVtc4gn4LHvUPUUoUTlWS6RT1LvlBM=
Subject key identifier: D9:B0:D2:C4:B8:60:9E:53:58:B9:D3:BD:8A:F0:02:BD:FF:23:CF:DA
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 0199FEEC10C33ABBC0D7CC51B1F2549B0036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 0849
Signing time: Mon 20 Oct 2025 00:01:47 +0000
Manifest this update: Mon 20 Oct 2025 00:01:47 +0000
Manifest next update: Tue 21 Oct 2025 00:01:47 +0000
Files and hashes: 1: DRGQu6VcNUxgbC-i_8UH42qgDUM.roa (hash: Tkt8CjSKbVkubPBErWJwsPegnkm3xx4+YfHW6WMiPHA=)
2: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: YYXw9aUfGrScsYe4iwTpQKK5EYt6tU2Z5Q8XsOKBlto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:10:c3:3a:bb:c0:d7:cc:51:b1:f2:54:9b:00:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Oct 20 00:01:47 2025 GMT
Not After : Oct 21 00:01:47 2025 GMT
Subject: CN=d9b0d2c4b8609e5358b9d3bd8af002bdff23cfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c9:e3:af:32:da:d1:7d:49:5f:08:bd:cc:28:
ac:79:52:2c:ee:07:b1:e6:d2:17:48:7b:1e:17:4a:
29:f5:1c:d6:32:7b:be:04:0a:d5:15:1a:30:d8:a3:
55:4b:83:e2:e3:b3:d0:e3:26:e1:b8:5e:b4:e1:98:
22:cc:b9:62:24:bc:53:bc:2b:1d:66:88:9c:05:c5:
cf:a9:86:22:38:11:4a:96:8c:3f:ba:bc:ce:6c:6c:
be:27:36:70:16:b0:df:24:04:89:51:09:a2:6b:14:
be:e2:a7:12:4c:9e:35:d6:f0:2f:8e:1c:12:20:11:
a2:2e:7e:4f:b4:0a:c5:e0:ce:af:51:b0:d3:1b:35:
6e:fe:80:39:c8:ed:38:8e:26:67:98:4a:29:65:7d:
a9:97:87:46:18:82:91:82:4a:8d:cf:c6:56:0f:3e:
68:94:9f:60:96:b4:27:07:28:3b:0e:b4:ef:d0:55:
b5:a1:33:cf:7c:74:3d:f0:1d:e4:89:e9:64:19:25:
16:10:2d:32:f9:00:9d:07:aa:f2:2c:74:f2:93:53:
fc:72:b8:8f:a4:61:51:ff:e7:a2:58:ee:57:36:fe:
30:95:c1:1b:97:43:7e:8e:a1:13:70:bb:d1:fb:63:
37:da:86:23:2f:ac:4c:3b:0c:8c:fb:63:f1:52:a4:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B0:D2:C4:B8:60:9E:53:58:B9:D3:BD:8A:F0:02:BD:FF:23:CF:DA
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3e:89:91:14:29:58:ca:3e:8b:d0:04:fc:a6:dc:1b:40:82:
23:2c:c6:ce:17:31:59:68:55:28:e9:e2:08:4b:e0:89:41:ed:
e3:93:11:16:b0:1a:5f:b2:a0:49:b8:c8:b1:02:ec:b1:cb:f2:
8f:8d:16:a6:49:8b:fe:5d:37:81:ba:15:2a:dc:a3:58:a7:82:
c2:ce:e6:4e:bf:82:34:75:c7:01:e1:50:da:ec:f9:d6:93:2a:
52:92:9a:37:7e:ab:c0:0d:69:91:72:47:b9:32:77:04:56:99:
91:4e:dc:b9:ed:e4:57:df:b7:79:cf:3a:01:a0:d5:42:df:e1:
fe:d5:70:13:e4:7c:75:f5:a0:68:35:1d:2c:79:51:17:84:e1:
8e:2c:14:e0:e2:f6:4c:9a:93:57:53:58:cf:ff:af:c4:43:7f:
cd:ed:47:e7:e4:aa:ab:4a:82:24:87:b3:2b:fc:11:bf:e0:f7:
9e:c4:1d:7f:6e:69:94:72:7d:69:93:2d:e6:03:9b:59:bd:e1:
d2:48:a6:cc:d5:ad:fe:29:cb:95:34:2b:6e:3a:35:5e:91:c1:
dc:4f:96:c7:d7:ae:84:b9:de:a5:5b:15:c8:72:0e:98:aa:ac:
a3:25:4b:33:c2:70:35:c9:86:b9:db:7c:fe:02:4f:8e:5f:7d:
86:4c:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:30 2025 by rpki-client