Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: U7Kncs1S04qzBAI5UrNXdHfra8x5dlf1S5IGdOjLNVE=
Subject key identifier: 98:79:08:01:74:CD:C1:37:C1:3F:40:FA:3E:93:9E:ED:DF:40:9F:1E
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 0199FB45C8914763296810CB38B915D83FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 07:01:18 +0000
Manifest this update: Sun 19 Oct 2025 07:01:18 +0000
Manifest next update: Mon 20 Oct 2025 07:01:18 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: jBYfgPbPIeSqnacXZ/qanUekBHjFRiKG2J0PFDGdLXc=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c8:91:47:63:29:68:10:cb:38:b9:15:d8:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Oct 19 07:01:18 2025 GMT
Not After : Oct 20 07:01:18 2025 GMT
Subject: CN=9879080174cdc137c13f40fa3e939eeddf409f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:ef:8e:11:96:ca:97:c2:b7:79:12:ac:62:
5c:30:b5:23:16:e5:40:b5:ff:2a:b7:c1:e6:cf:57:
61:4c:53:09:60:b3:b5:2c:b6:c1:eb:80:17:48:ce:
98:7a:df:d2:ba:20:f8:31:52:13:42:3e:83:d9:5a:
6b:18:80:af:7f:3e:59:0a:1a:1f:21:a5:67:f3:f9:
50:e5:be:0d:65:22:fd:27:af:4f:f7:88:c8:db:73:
cf:1f:86:a7:95:03:db:0d:07:09:32:01:05:96:71:
a1:ad:1c:91:9f:00:28:74:f5:78:ce:e2:00:8d:8c:
47:70:38:08:79:92:c7:6d:1b:62:55:1a:5c:ea:b7:
ef:44:0b:43:52:69:d6:ff:c3:2f:d4:45:7a:14:4b:
16:ce:d1:87:24:d2:ef:40:f8:38:22:8e:77:ac:e1:
3c:2b:cd:61:e9:b1:49:24:11:9b:91:35:bc:2c:f7:
62:62:5e:24:3f:c7:59:29:a2:08:49:0c:01:01:2b:
e4:c7:17:b6:35:54:e5:39:4c:c7:3e:6a:24:f7:23:
2f:fd:18:b3:85:6d:3f:e0:14:e6:cb:20:b7:53:36:
ef:2e:e0:10:f7:62:e3:a2:7e:3d:39:4c:6a:65:4b:
99:58:da:a6:9f:4f:b6:54:80:5b:ce:f8:20:64:fd:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:79:08:01:74:CD:C1:37:C1:3F:40:FA:3E:93:9E:ED:DF:40:9F:1E
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1b:f0:ee:59:aa:92:57:0c:12:d5:31:20:84:ee:92:69:f0:
fe:40:04:4b:c4:20:1a:6f:6b:bd:0b:46:21:0c:7c:31:0b:d4:
a9:3e:c0:39:75:b3:a9:4e:bb:9b:10:ad:b1:e8:03:62:87:57:
eb:1b:a3:44:bc:e7:ac:18:c1:63:4e:99:09:0d:2b:62:cc:44:
e8:44:5f:bb:3b:7a:9a:cc:ed:26:a1:91:44:40:13:03:8c:27:
a4:0d:00:94:9a:1a:90:aa:d3:13:4e:6e:da:b9:14:d8:84:4b:
2c:56:0b:34:94:ac:0b:f9:bc:65:f3:a5:e5:1e:e1:4d:fe:9a:
d5:76:48:e6:f9:65:ae:9e:ab:d7:21:1d:80:e8:93:a7:f0:f8:
84:af:65:be:56:14:91:ef:a2:34:ad:b8:c1:ec:81:e0:de:6d:
71:20:56:bd:28:7f:3d:5f:2a:74:39:3f:8e:12:e3:d8:77:aa:
f8:08:07:3b:06:b4:79:e6:87:11:fa:b1:4a:89:f0:aa:a1:52:
56:90:df:13:11:5e:f6:d4:4a:4f:d9:cb:f6:db:a2:52:7b:0f:
20:a2:6b:28:21:11:15:cd:63:0f:1d:4d:3a:4a:e2:ce:b7:88:
6a:61:b9:a3:ab:11:28:0c:93:a7:a3:0f:27:af:27:59:52:4b:
6c:e7:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:46 2025 by rpki-client