Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: hadbHQQnnCDJJ0F5DKTP2u+yHlDlhfG1rd8qu13/i10=
Subject key identifier: 6E:5F:9D:27:F6:67:6A:05:16:6F:BA:FB:70:73:B5:72:DD:44:DF:4C
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 0199FCFDAA9975CE269F5B9B9778233804D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 15:01:46 +0000
Manifest this update: Sun 19 Oct 2025 15:01:46 +0000
Manifest next update: Mon 20 Oct 2025 15:01:46 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: 9smRLNPsqPdWJh+Tw9ywSonqaWmr+jm4Rt0yVv0Qfb4=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:aa:99:75:ce:26:9f:5b:9b:97:78:23:38:04:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Oct 19 15:01:46 2025 GMT
Not After : Oct 20 15:01:46 2025 GMT
Subject: CN=6e5f9d27f6676a05166fbafb7073b572dd44df4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d6:e8:e4:02:20:6e:f0:46:79:d5:07:ef:5d:
df:2b:f5:7e:26:d6:0e:c9:46:59:66:35:46:4e:90:
a6:68:c5:8c:37:80:26:00:ff:b4:d9:b5:39:92:69:
d1:1b:5e:2c:89:2c:70:dd:2d:8a:a3:8f:48:d5:6a:
27:be:58:5b:5b:f9:31:09:37:c5:98:45:ca:d3:2e:
e1:ee:26:70:6f:1c:5a:c8:de:b3:3c:f3:89:6f:0c:
4a:59:c0:f9:f1:fa:6b:1d:8e:58:1f:ab:8e:e7:f4:
4c:88:63:5c:06:10:4c:79:86:72:bc:d9:d4:7b:c3:
4e:10:84:77:78:4e:5c:bb:34:2b:fd:37:94:5f:fc:
97:55:71:d1:4a:f8:20:9e:17:fb:12:10:d9:8c:06:
5d:ad:a8:45:4e:c9:ab:94:b5:7f:92:58:3f:b6:90:
f4:57:e0:8f:c8:ae:54:49:03:70:20:33:1a:21:69:
95:f3:cf:f7:bb:c9:95:d5:af:33:cb:1d:9a:da:fe:
b5:e0:92:42:ef:76:32:1e:44:d3:8f:bd:56:a8:51:
23:67:7c:b5:8b:7e:92:9d:e1:99:4a:67:61:b6:28:
8d:9c:33:c8:bb:9d:41:28:44:40:e0:57:3c:a5:ac:
a5:54:a9:5b:bd:d4:03:39:10:14:a0:74:93:11:6a:
29:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5F:9D:27:F6:67:6A:05:16:6F:BA:FB:70:73:B5:72:DD:44:DF:4C
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a8:00:8b:cc:0c:de:b7:35:dc:67:af:db:db:c4:79:bb:2a:
ee:57:19:fc:16:d1:c2:e6:64:33:75:69:f8:ce:68:90:8a:14:
9d:dd:d3:23:ca:25:c7:bd:c6:f6:38:97:7d:18:47:47:ef:06:
4d:ae:6d:df:f8:99:2d:2f:5c:b1:8f:b7:df:e8:9a:98:d7:e3:
a4:97:47:53:84:37:d6:2b:c4:80:a9:55:1e:96:2a:7e:4d:7f:
b2:61:b5:be:71:78:2d:4a:db:0f:d4:f8:4c:82:2a:36:a5:8e:
de:44:82:63:1c:5d:40:c2:6f:dc:c2:0b:47:fa:b0:bb:5b:06:
0e:6a:d8:c4:62:c2:59:5d:62:04:29:5f:ba:58:63:b4:f0:46:
19:b0:29:94:7b:75:bc:af:0d:f1:a4:24:d1:06:c7:ed:be:1e:
a6:82:32:bb:08:79:0e:fa:9b:8b:dc:cf:ad:e3:10:43:f9:df:
90:4f:cd:d2:a6:dd:27:35:6c:b2:41:21:63:5d:ab:a3:3d:43:
30:24:03:ac:8b:08:42:0e:80:06:01:f3:a0:47:ed:e0:04:d7:
56:2a:d5:52:72:0d:ab:cc:6e:c1:55:75:54:80:3d:27:50:ea:
92:8c:16:67:c2:99:a4:a8:65:f3:1b:78:a6:32:44:e0:50:b0:
52:7f:59:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:07 2025 by rpki-client