Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: yyfjZnPr9Q2/eNnXBK3gMKFF6TzEX7mjla/XI5iMafI=
Subject key identifier: 6A:05:61:DB:96:1E:63:74:66:54:CA:52:DC:D9:3D:E9:F8:82:FB:E7
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 0199FBEAF9641159C81A0FCEBEB2B1BD3990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0FB9
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: FVEAxvv3LsPk+osKxpbnalSeikIVpRLr96wc1hmpnIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f9:64:11:59:c8:1a:0f:ce:be:b2:b1:bd:39:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=6a0561db961e63746654ca52dcd93de9f882fbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:40:79:20:65:bb:b5:ec:1e:50:e8:86:cb:
f6:fc:a9:c3:90:1b:40:7c:09:8a:cb:67:2f:69:3b:
c6:0d:52:6f:ba:c4:65:8c:94:e2:d7:06:d1:45:85:
ed:72:8c:7d:3a:d3:fa:36:88:d9:8f:e0:e8:6a:e8:
32:6f:37:0f:bb:83:de:8b:29:7d:49:ea:7a:35:0a:
41:b5:aa:2b:8d:1a:83:24:17:ac:12:13:3d:6b:bf:
5b:a0:20:de:28:db:47:c6:ab:44:51:72:f9:03:b9:
a5:cf:25:fb:09:fd:19:81:bc:ec:60:48:9c:3c:72:
2f:02:68:24:eb:1a:44:96:3c:00:08:6c:73:6e:77:
01:cf:b2:cb:05:43:69:99:8a:63:af:00:3f:92:d3:
7c:f6:11:ab:03:57:60:6b:c8:99:3e:b5:b2:6e:d9:
f5:84:2e:65:10:7e:85:1d:85:fa:85:26:94:e8:4c:
1a:3f:16:fa:e8:17:59:ce:03:c5:c1:a0:44:da:c6:
5f:86:9e:ae:4d:75:39:ae:ba:24:2c:e7:dc:f5:16:
f6:f1:b7:53:67:0c:9a:dd:fa:6a:4f:cc:56:83:9b:
d8:82:66:56:a9:3e:92:cf:fd:dd:e0:dd:5b:b5:7b:
62:8b:25:61:4f:75:f0:db:79:bf:83:94:cc:b2:80:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:05:61:DB:96:1E:63:74:66:54:CA:52:DC:D9:3D:E9:F8:82:FB:E7
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:c1:b3:19:2c:ac:0a:cf:6b:e6:d9:1f:aa:3a:ea:ae:63:a1:
63:5b:8a:fe:1e:8a:26:2f:1f:e8:e8:93:66:a7:23:1d:f7:2f:
f9:bd:80:1f:c3:0c:79:0d:4c:94:d8:0f:87:d3:b8:b3:13:c7:
bf:01:5e:f2:c3:1b:dd:30:63:bc:e6:b6:a5:a7:51:ad:26:19:
0b:ad:93:8d:6a:6a:e0:ea:f1:bc:63:c0:48:1a:08:a9:f8:2e:
7f:ca:be:62:03:2c:f4:3d:a9:e9:c9:54:a0:25:77:48:e3:35:
29:99:07:e3:bd:4d:d4:39:51:57:e8:85:cf:56:3e:45:e6:bb:
79:49:aa:cc:bb:44:e5:d4:60:05:83:01:e4:0b:8a:65:b1:18:
84:84:66:87:15:5f:5b:f7:14:70:c7:d4:80:81:c3:a1:1d:4c:
02:e9:19:7b:04:bf:0b:35:72:0d:6c:7a:d6:30:29:fb:8b:4a:
9d:2e:9e:a7:7f:63:9d:26:89:b6:5c:a6:74:aa:8e:78:ae:b3:
88:7d:69:49:82:ee:8b:1d:de:3a:cb:26:57:4a:27:3a:ac:97:
c4:88:5c:40:7b:1c:cb:79:10:5f:74:82:27:88:72:e0:c6:8f:
93:db:50:e6:14:38:74:d9:fb:42:23:4d:8c:af:e8:37:b2:88:
57:e8:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:08 2025 by rpki-client