Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: d3izYc5ZstIsOhPXmzHQS0Yg9YLJk3K2HN2Bf7tiP/M=
Subject key identifier: C9:CC:C2:AD:B3:E9:91:26:56:91:C1:37:31:09:C4:58:73:7F:AA:E9
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 0199FCFD5D72274A99F9B4C3F2B1ABB2A5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1613
Signing time: Sun 19 Oct 2025 15:01:26 +0000
Manifest this update: Sun 19 Oct 2025 15:01:26 +0000
Manifest next update: Mon 20 Oct 2025 15:01:26 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: QnXqnUnnF/to4i+wwnUk9frpTU+vde0+kcP/Y4Ej4Hc=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5d:72:27:4a:99:f9:b4:c3:f2:b1:ab:b2:a5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Oct 19 15:01:26 2025 GMT
Not After : Oct 20 15:01:26 2025 GMT
Subject: CN=c9ccc2adb3e991265691c1373109c458737faae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:49:0f:e6:4a:57:1a:a8:d1:d6:15:52:41:
d4:9c:88:e2:73:8e:e6:7a:28:11:ab:18:c4:9e:7a:
b0:f2:b6:cd:94:0c:30:93:d1:63:0b:33:30:08:d4:
ea:9d:22:9f:48:df:27:3a:61:ef:d4:6e:c7:7c:8d:
3f:45:af:b1:93:fc:5f:e3:74:ff:6f:d8:15:08:3c:
d6:cc:0a:14:cf:c2:5f:39:69:ea:dd:a6:d7:c8:f9:
c9:55:71:ba:18:54:70:be:a8:4a:37:aa:21:ef:d4:
f7:a0:ed:09:cd:38:b1:ab:7e:ef:c4:27:e5:fa:f3:
08:de:c8:58:f8:9a:04:15:c6:65:7a:11:57:f8:eb:
68:2f:78:00:59:51:38:46:de:94:ee:e8:4d:1d:91:
9d:af:34:b5:58:e4:55:a3:c9:1b:16:13:f7:bb:92:
fb:f3:f5:be:2f:5d:3a:6e:e7:f4:fe:41:b2:35:ba:
ae:08:9f:b7:fc:13:e9:34:47:b6:ad:e7:2d:2d:85:
3f:08:64:52:f2:75:d5:19:58:1e:45:c5:af:1a:9e:
1d:75:fd:2b:df:81:75:c7:81:53:ee:6e:49:74:41:
0e:a8:73:71:21:4c:7d:14:22:ca:80:0e:4e:82:77:
2f:15:ea:61:ce:88:5d:f4:c1:9f:24:4b:93:0c:b5:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CC:C2:AD:B3:E9:91:26:56:91:C1:37:31:09:C4:58:73:7F:AA:E9
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:9b:40:ef:a2:5f:93:90:6f:44:e7:97:03:7d:96:b3:98:a3:
ed:e6:3a:81:29:4b:4f:f3:fd:dd:c2:fc:e1:96:14:50:24:73:
97:a6:05:5f:27:c7:0c:7b:cf:1b:b6:f0:18:56:2e:17:7a:f1:
ed:46:b7:9d:f3:a0:d6:b8:3e:d5:4c:f5:fd:cd:81:4b:a8:e0:
45:b4:c3:92:fe:b2:ab:ff:3f:b1:4b:c3:1d:71:38:83:a2:88:
0e:41:d1:a1:c6:2d:f1:91:c3:86:73:76:06:6f:72:81:b5:d7:
2e:b3:87:c8:94:62:2a:b9:e5:0c:b4:b6:71:7d:34:97:2d:df:
6f:f5:57:25:84:58:f1:41:37:b5:9a:da:fc:3a:df:7d:ca:42:
60:9b:b3:eb:a8:bb:f0:67:09:02:a9:bf:ea:78:fe:ef:49:5e:
2a:e7:1e:1b:07:70:d3:5b:96:b6:6a:a2:e8:91:09:26:b9:ed:
f8:22:42:a2:dd:e5:6f:ce:a6:6d:a3:56:62:9b:1c:d0:ea:7d:
ce:39:43:9e:81:1c:9b:32:fc:4c:87:c5:f3:e3:e2:a9:ea:12:
a3:36:3d:22:16:d4:b9:34:32:3a:db:26:9c:fc:50:59:cb:e4:
9b:04:fd:fb:03:ab:c4:db:64:8c:df:0d:24:f3:a3:54:06:68:
af:a9:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:52 2025 by rpki-client