Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: b9LNaUsrPMbY/4ShrOZykB/+Y2CMGO+Ca8VOuoRDxNg=
Subject key identifier: D2:58:4C:EB:AA:F9:1E:0F:A5:43:DA:22:7E:F1:D2:E2:F3:DE:21:C4
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 0199FB0F53736E52BA0C4A3171A16A23E1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:49 +0000
Manifest this update: Sun 19 Oct 2025 06:01:49 +0000
Manifest next update: Mon 20 Oct 2025 06:01:49 +0000
Files and hashes: 1: 3wDf96BAjCwHPGLFXHfr6FPj5tk.roa (hash: n76aMPDVHHg0+waIaYLD5Tllb242OUUWngTT/Znka38=)
2: Crd7C8SVck2OIDtSkQeAyuMLu6I.roa (hash: wscKj8/Aoswv3PHZoE2nGYXdRz4QSyUb5GTz6Q8fmgM=)
3: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: W2Mx9N48WDV+vzE3DbvAoniOTlmrpOi8wjqnehHjNtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:53:73:6e:52:ba:0c:4a:31:71:a1:6a:23:e1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Oct 19 06:01:49 2025 GMT
Not After : Oct 20 06:01:49 2025 GMT
Subject: CN=d2584cebaaf91e0fa543da227ef1d2e2f3de21c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:b8:46:b2:d4:48:a2:21:60:ab:73:6a:4d:
fc:a5:7e:13:9b:5e:ff:34:6f:77:94:7c:b1:9c:0c:
e9:81:91:d5:46:e4:14:69:5f:41:ec:43:f8:c3:bf:
6f:00:c5:15:16:0c:42:0e:ce:e1:18:8b:51:f6:a0:
7e:81:f8:ef:08:1e:f8:6c:36:28:bc:5e:ea:7d:e0:
01:38:21:ba:39:b2:7a:92:1a:8b:c5:e6:79:3f:67:
24:7e:35:6d:6f:bb:26:60:ff:77:1a:12:ed:6b:09:
0e:cd:26:92:d0:3b:3a:bc:c0:81:fa:8e:8e:1e:61:
48:e1:51:d1:55:72:6f:33:d1:fa:22:8c:94:34:96:
76:03:f3:0b:bd:4f:8a:ef:60:89:06:ae:5f:2f:18:
a2:43:ed:01:25:cd:ad:f5:61:d5:92:36:18:32:05:
ec:a1:9a:f1:d2:6c:fb:c9:18:01:01:9e:1f:5a:b4:
63:38:f7:c2:13:ce:6d:8f:cf:29:89:ac:fc:6f:52:
cd:66:39:0b:85:71:95:f1:b3:4c:08:2e:f3:b6:cf:
f0:d6:e0:81:16:cd:8a:26:87:9e:91:08:a7:16:f0:
19:93:de:62:43:58:d2:60:ee:71:6a:39:4e:e5:73:
5c:a8:05:31:c0:d4:3d:61:50:18:2d:b5:c6:84:23:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:58:4C:EB:AA:F9:1E:0F:A5:43:DA:22:7E:F1:D2:E2:F3:DE:21:C4
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e9:19:36:6e:4a:c0:3c:ef:5c:b9:5f:94:b2:f0:4d:f3:3d:
d5:62:8c:df:83:92:dc:b2:d2:30:4a:d4:44:db:67:6c:e1:37:
a2:a8:93:76:e1:ca:2c:3f:e3:1d:05:c1:79:e7:b5:10:48:29:
e7:1c:43:d1:a3:ed:4f:e7:53:59:3c:1f:18:f3:12:6f:46:11:
aa:7d:0e:b2:5e:e6:b3:4c:b5:fb:01:fe:4f:24:9c:47:59:26:
ab:ee:7b:85:ea:c2:c7:d0:7e:b8:87:1a:c0:53:56:9b:e1:1b:
f5:50:ac:7b:71:c2:86:7d:1b:95:f1:b7:90:f1:8a:2c:89:a5:
20:18:6d:c6:ab:3a:56:47:0f:95:cc:62:1e:24:c8:14:4c:84:
6e:97:54:ad:72:28:36:4d:39:8f:95:04:f1:09:6a:6b:65:1b:
1c:06:0d:2f:c9:4c:ef:1b:12:8a:31:6e:05:c2:ef:8c:d9:d8:
74:c9:af:e7:67:77:bd:24:83:e0:2c:23:6d:1a:70:93:a1:57:
6d:5f:6b:e9:ba:1d:cb:e5:06:e2:15:16:af:70:46:a5:97:98:
30:0f:79:05:07:49:ad:db:da:2b:ec:30:93:30:fa:75:9c:ec:
9f:6b:0c:60:f8:b9:98:fd:ab:76:08:16:05:f9:a0:6d:6e:7a:
63:42:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:43 2025 by rpki-client