Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: MksZuPYxIEhbVD1fF2nLGA+GAKZc3wVSqlM00hFVVMo=
Subject key identifier: FB:68:C6:B0:93:0C:C4:11:78:BB:03:60:F8:E0:94:50:3D:58:FC:AB
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 0199FFFEB760525F35DF9978F3FC690673D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 13BF
Signing time: Mon 20 Oct 2025 05:01:47 +0000
Manifest this update: Mon 20 Oct 2025 05:01:47 +0000
Manifest next update: Tue 21 Oct 2025 05:01:47 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: 2OC6gX3+O/FPV/Y5TSO6+eA82H+cKTgyww8MVgzaE9E=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:b7:60:52:5f:35:df:99:78:f3:fc:69:06:73:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Oct 20 05:01:47 2025 GMT
Not After : Oct 21 05:01:47 2025 GMT
Subject: CN=fb68c6b0930cc41178bb0360f8e094503d58fcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:b9:5c:b6:fb:f7:b8:8c:4a:89:70:1a:b6:
eb:12:fe:46:36:35:4c:5b:18:7d:09:78:2d:23:7f:
b0:ee:22:9e:9f:dd:43:5c:af:ba:78:2a:bc:28:e9:
4b:82:14:1f:64:a2:8b:38:57:8a:41:6c:a0:50:92:
5b:42:87:ec:a3:48:3f:a0:01:c8:41:8e:68:7c:b5:
fe:e0:7a:43:ea:02:bb:3b:54:6e:f0:68:db:be:96:
42:25:85:ae:39:bf:3f:af:92:10:a3:f2:78:41:9e:
6a:5d:95:90:42:a4:57:e3:89:f6:dc:b5:df:88:21:
41:74:c3:4f:ef:0d:38:5c:4a:43:34:1f:65:89:fc:
e5:48:9b:56:24:57:29:a4:67:97:ee:4c:6c:a9:6e:
f2:42:fa:6c:6b:bc:2b:cf:13:fe:36:51:57:64:c1:
68:b4:48:fa:d0:04:8e:22:cb:88:02:57:50:7a:bf:
a3:19:79:f5:7d:48:d5:4e:c8:3c:25:8b:5e:86:ee:
04:71:16:bb:c7:1e:06:65:49:fd:e5:cb:19:6a:88:
38:25:22:b3:15:ff:bf:ad:e9:7a:e6:5a:b5:2b:9e:
0c:a3:b5:aa:94:50:8d:fb:03:63:ef:11:11:00:29:
99:64:12:7f:6f:64:79:cd:83:9f:8e:2c:7c:28:63:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:68:C6:B0:93:0C:C4:11:78:BB:03:60:F8:E0:94:50:3D:58:FC:AB
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:12:73:72:d8:29:10:b4:62:dd:be:64:df:e6:90:9e:42:
4a:9a:5e:4a:0b:dc:e0:50:1e:46:f9:bf:4d:ee:10:5e:03:0e:
c5:10:c7:81:0a:0b:a6:4e:1b:9a:28:dc:83:17:fc:18:92:0e:
9e:38:1e:07:7c:06:93:c5:1e:d7:f5:54:d9:c5:bb:45:3e:69:
7f:9f:d9:ec:d4:91:e8:e3:c8:f8:46:c8:24:70:ca:c1:a5:93:
b3:c8:4b:6e:77:20:bb:15:a7:01:55:61:bc:23:57:41:f9:be:
2e:f6:16:21:58:ef:2c:2e:7b:73:c0:a1:a1:95:7c:e8:78:61:
f8:ab:2f:70:28:ed:73:05:5b:d7:5e:1b:35:3d:1a:f8:f9:9b:
59:8a:f2:49:28:dd:10:eb:61:1d:2e:bc:ac:d9:75:90:82:9e:
9a:b1:6d:86:63:37:48:ca:8a:0a:84:46:8b:bd:28:5a:95:e9:
a8:13:af:87:4b:e8:28:ef:e5:77:04:50:94:59:07:e9:d1:65:
86:4c:b9:d8:10:f7:62:c9:51:22:22:1e:3f:2f:bc:2b:22:03:
7d:83:b5:18:36:2b:d9:5a:3c:fc:93:e3:3d:fc:7d:fc:c4:ec:
17:03:96:65:02:c3:dc:ba:3d:b1:7a:b6:59:83:db:f2:93:24:
cb:47:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:47:12 2025 by rpki-client