Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: ocmosRS6RpuiR9X/5bTwa7immTdSkxg0J0pMNb3UH9M=
Subject key identifier: 58:54:5E:C3:0A:C5:D4:BB:6E:4A:D4:67:ED:31:F0:4F:52:49:9C:86
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 0199FAD7BE2193FF21603741B45396453C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 0EE4
Signing time: Sun 19 Oct 2025 05:01:06 +0000
Manifest this update: Sun 19 Oct 2025 05:01:06 +0000
Manifest next update: Mon 20 Oct 2025 05:01:06 +0000
Files and hashes: 1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: eZT0IQdlAKKlMN/eVF4VzPGCou4992t6GALBFrK+EYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:be:21:93:ff:21:60:37:41:b4:53:96:45:3c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Oct 19 05:01:06 2025 GMT
Not After : Oct 20 05:01:06 2025 GMT
Subject: CN=58545ec30ac5d4bb6e4ad467ed31f04f52499c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6f:9a:78:c9:34:eb:b6:0c:6f:bb:ff:ac:d9:
a2:0e:63:6c:c7:56:c5:8b:5a:d1:df:7c:b3:6f:09:
8c:8f:ae:18:d9:21:b0:85:a0:66:56:5e:e4:09:6a:
26:59:2c:df:b0:6d:e4:0e:77:b9:42:14:d0:6b:00:
81:a1:d6:13:38:d6:1d:c6:90:d0:93:27:55:1a:c2:
12:f9:e8:6d:b5:59:f4:dc:45:72:c8:77:f1:34:2f:
1e:e3:1b:bb:19:da:12:5e:09:19:65:a0:d8:ef:dd:
ab:69:01:28:e0:e9:f9:28:d2:42:62:85:f6:2b:2d:
fa:14:70:b3:09:38:16:5c:dc:f3:33:b4:fd:21:c3:
44:17:0e:60:60:6d:d3:eb:f3:e7:44:3b:15:7a:c2:
2a:d7:5b:68:d9:a5:61:3f:5c:43:53:d0:90:fd:9a:
69:c1:86:60:bf:5b:df:b6:ad:83:31:5e:e9:e5:58:
b9:cb:2c:41:bf:b4:68:41:f6:69:71:61:bc:8c:72:
c6:9c:75:66:0e:a2:39:f8:47:d7:08:31:34:61:59:
f1:bd:03:e8:ff:89:2f:ba:4f:67:81:5d:39:28:9c:
20:3e:4c:95:19:27:88:9b:11:a7:d4:c7:a0:1f:b3:
bf:3f:54:3c:1e:ea:cd:5e:1f:ff:55:fc:86:b1:1a:
d2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:54:5E:C3:0A:C5:D4:BB:6E:4A:D4:67:ED:31:F0:4F:52:49:9C:86
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5d:30:06:1b:cd:6d:f1:42:37:e8:bc:10:e5:24:6e:40:a9:
43:4d:c9:5c:fd:2c:20:90:ca:63:ea:17:ba:0e:fe:6f:d4:a0:
2d:8d:5d:6e:f7:7c:4f:91:70:a0:6a:f7:38:fd:50:0c:c7:ff:
d9:e8:c2:eb:fd:35:66:ec:39:9e:09:6b:95:61:64:46:e1:44:
ff:a7:30:a5:cd:55:d3:0a:c2:ee:ca:1e:f1:9c:1f:66:91:cf:
05:4e:fd:ef:cd:c3:22:55:9f:17:d5:11:ba:59:07:a1:0b:93:
4c:f2:13:5b:de:7c:40:6b:16:22:95:3f:04:29:87:93:7a:bf:
5a:4e:c7:4b:49:85:4f:4e:08:ba:ac:bb:af:db:05:0a:e2:f8:
94:c3:da:77:b3:4f:92:77:fb:93:3d:74:76:8c:55:4d:b8:b0:
be:a8:bf:51:f9:48:ce:be:e2:4c:9f:f3:1e:22:d3:97:e9:c7:
b9:f9:b1:af:48:ea:7d:d7:b2:a7:fa:08:33:5f:09:31:ea:03:
40:4f:d9:bd:5a:22:ac:b6:f9:03:ec:a5:b3:14:fa:13:49:94:
0e:c8:e3:83:b5:21:fb:a1:49:a3:bc:18:3e:a8:93:54:ba:8c:
87:c3:b8:fd:d3:90:67:9a:71:0e:aa:02:67:ed:4f:9d:25:0f:
ee:b7:55:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:04 2025 by rpki-client