Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: qHWJ+sXMVWeI5dK9mMGUr7bPz5rYR14E05hbNXQlCIg=
Subject key identifier: 5D:8D:CC:C4:92:8E:AD:17:AF:E8:F8:FE:92:D0:FF:C7:23:75:A1:93
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 0199FDDA14095603DF3C0140E7FEFBE2976C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 19:02:31 +0000
Manifest this update: Sun 19 Oct 2025 19:02:31 +0000
Manifest next update: Mon 20 Oct 2025 19:02:31 +0000
Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: JX4Ziw8YaXo5RKUv/cf+faV2jdruTOViAJ4uKq42+QI=)
2: gbHDNVxhp631JF7kQGHN7jVCQUE.roa (hash: vJG2GjwA3KMSIr2ScTupuKanJzuxl2pcpBm74i5fk/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:14:09:56:03:df:3c:01:40:e7:fe:fb:e2:97:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Oct 19 19:02:31 2025 GMT
Not After : Oct 20 19:02:31 2025 GMT
Subject: CN=5d8dccc4928ead17afe8f8fe92d0ffc72375a193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1a:99:03:93:6d:ec:c7:4b:34:59:1b:6f:9a:
18:63:84:e4:db:48:4b:68:78:c8:23:19:7a:ce:6b:
7f:75:57:b7:bc:1d:eb:67:0f:c0:1e:ff:59:6e:cd:
aa:95:d0:54:7b:32:03:72:e4:44:a9:08:ae:95:51:
a4:61:bf:66:a2:52:d2:4a:e4:00:6a:d4:d6:96:39:
f3:d3:55:7b:e8:35:08:d9:62:8d:f2:33:15:ea:47:
44:2a:54:4c:33:90:f1:65:ca:b9:f8:b2:06:fc:ef:
6d:76:d9:dc:47:c9:cb:c0:45:41:90:8c:b5:b8:7c:
8c:e6:d3:1b:b2:7b:4a:69:14:70:08:04:7e:64:72:
e5:88:ab:ac:5b:ce:c9:ad:e9:ed:6d:eb:b3:b4:e8:
99:ba:d6:a4:a7:dc:4e:d5:24:3c:99:d1:82:7d:2f:
45:8c:60:27:c4:b7:53:c0:e0:99:e5:1b:28:ff:80:
82:b0:c9:a0:4b:82:07:4e:f6:7b:8f:f2:8b:db:fb:
7d:03:fd:bc:17:92:b6:44:41:7b:e5:48:53:8c:b9:
9a:35:29:96:02:53:e9:ad:25:a5:46:98:14:a9:c6:
e2:ff:67:a7:39:d5:1e:fd:60:21:8e:10:37:27:4c:
09:4e:79:56:53:cf:dc:10:da:a6:dc:7f:06:04:6e:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8D:CC:C4:92:8E:AD:17:AF:E8:F8:FE:92:D0:FF:C7:23:75:A1:93
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:cd:1c:bd:fb:98:64:df:69:bc:6f:98:b3:a2:c3:96:74:fb:
d6:56:d7:75:9e:d9:bb:0c:1c:83:ab:07:22:fd:c2:c6:87:c3:
f8:a3:d2:ef:62:b9:c2:11:83:67:0e:02:8f:11:b4:ce:64:27:
f8:82:21:e7:db:d6:f2:6d:52:2f:38:a8:12:b3:db:37:d5:1a:
0b:55:65:5e:0f:4e:ff:db:fe:4a:e0:3f:c8:e0:28:4d:16:2a:
56:ed:fd:7e:c7:52:96:a5:f5:88:ef:a0:f8:84:c9:1f:92:6b:
c8:7f:09:28:c3:c4:4c:86:61:87:eb:0b:97:1c:87:d7:2d:c6:
5e:3f:b1:70:89:4e:bf:11:e6:3e:d5:0e:6c:8b:56:35:1a:8b:
fb:f2:3d:7b:7c:e6:0b:e8:96:d7:30:24:03:d2:5f:99:d2:29:
89:f2:a5:dd:c9:08:34:15:64:bc:67:12:12:81:18:85:e9:5b:
0f:39:15:b8:c0:04:ba:91:22:08:1e:2c:e0:b8:e2:81:cc:34:
a2:03:8a:d7:a7:35:92:fb:7c:67:11:c3:bf:46:ad:fa:68:a0:
99:32:42:4b:cf:95:51:e0:2a:b6:01:de:0a:bd:a7:42:08:0c:
63:bc:73:cc:34:84:86:a1:42:13:cc:bc:55:7b:fb:d4:b3:a1:
3a:3a:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:20 2025 by rpki-client