Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: t5lyH07CTwa9KkUVq7mae8yRapsFEPf6nBtDOcd82nU=
Subject key identifier: B5:7C:08:44:EA:5D:5C:D6:B5:AC:1D:E1:67:B4:7C:A0:EF:D6:7D:DB
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 0199FC21B63A027178BF403D06F9FEA66148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 139B
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: N4BFu+f7LsSFYiDo2bi67/47urCK3LW/mMJe31NF6Dk=)
2: TH3iTyQHdiPtwrxen-ik0aBRXKI.roa (hash: 9e3J8Nl+Dc6K9RH7KE3BYQUYhRYoAJ/tNPR6z9IBOhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b6:3a:02:71:78:bf:40:3d:06:f9:fe:a6:61:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=b57c0844ea5d5cd6b5ac1de167b47ca0efd67ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:87:1e:78:c8:ea:df:01:a0:21:08:f3:ad:30:
8a:7a:f2:74:e8:61:bb:43:14:68:6e:f7:ee:84:e2:
41:3a:56:46:66:e7:11:72:c0:01:9c:1d:e6:31:b1:
a3:bb:4d:88:b6:db:6e:b1:e5:d0:15:34:0e:b3:f4:
0d:ec:25:80:19:bf:a7:24:77:c0:d6:19:37:46:60:
fa:8e:96:c7:e2:1a:e1:c9:0c:f2:d3:2a:91:80:bc:
0a:fb:20:8e:d6:11:23:40:8e:8b:f5:c7:56:84:41:
6f:f9:dc:d2:7b:81:2f:05:b7:01:0c:39:c4:a5:1b:
1b:09:b3:bb:c6:8d:7a:62:39:f7:a9:3d:93:c0:27:
8c:9c:c4:72:68:5e:00:63:fe:c2:07:ef:5a:9d:70:
2f:74:53:3f:12:0e:6a:27:84:3d:96:63:e0:e5:73:
39:c2:bd:4d:fe:8f:b1:22:90:ff:fd:a8:01:9d:25:
9e:58:6a:43:43:be:2e:92:b4:31:fb:91:84:dc:1a:
4d:9e:35:cf:1b:4b:7a:ef:0c:cc:7f:48:d7:09:e5:
d2:03:73:6e:51:76:71:32:cd:52:dc:67:db:0e:c9:
af:ac:03:f9:53:e3:6b:68:24:fc:91:83:56:9e:18:
3f:f6:8b:71:8b:43:56:1e:c3:80:2c:40:d1:e7:c6:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:08:44:EA:5D:5C:D6:B5:AC:1D:E1:67:B4:7C:A0:EF:D6:7D:DB
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:91:85:26:73:f4:0c:c1:d6:0f:53:11:23:ec:7d:4c:8d:91:
0e:01:8b:89:7f:8b:db:d7:72:9e:91:6b:04:bf:b0:f5:6a:61:
99:b8:58:b0:ff:91:11:87:07:4e:dd:98:02:c7:b6:66:10:c4:
e2:80:e8:ba:8f:63:23:46:ea:3b:c5:1b:fd:51:4d:14:53:3d:
0b:2c:f7:a4:ce:ac:32:2d:da:62:7f:25:12:1a:0f:1e:ca:55:
f7:57:70:39:bd:44:06:ef:62:11:cd:bb:57:74:f9:ea:24:63:
45:9f:3b:0e:62:2e:17:be:50:0f:cf:1c:dc:2c:12:39:f3:bb:
4e:d2:41:39:42:4d:83:d3:4e:01:15:2d:ad:2e:86:77:3b:4a:
c5:c4:09:f6:4f:fa:31:fe:76:61:89:9b:41:3c:cd:ee:e0:48:
a7:e8:f5:fe:3f:c0:77:c6:3d:48:a7:7d:bd:05:df:89:e0:44:
0e:16:bb:04:2e:9b:89:99:a8:bd:15:40:0c:13:2a:6e:d5:fe:
6d:75:55:53:e0:10:7e:1b:66:a6:10:5e:7d:3c:43:ee:a6:cb:
be:73:fe:48:40:1d:0f:de:c7:90:07:7d:6f:e3:24:3c:8e:c4:
73:92:78:2c:9d:40:1b:3b:64:fd:2d:8e:7b:3d:bb:ab:f9:8e:
68:4d:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:01 2025 by rpki-client