Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: fUZzMKwTohv48zdIWbWOrtWmw8bVbEvLBJbbzwZqf/k=
Subject key identifier: 3E:68:63:9A:3B:8A:61:B1:0B:F2:C1:DF:9F:EE:64:00:BE:8E:09:54
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 0199FBEBFCABE753871AD2AADB3E3CA21C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 05D1
Signing time: Sun 19 Oct 2025 10:02:50 +0000
Manifest this update: Sun 19 Oct 2025 10:02:50 +0000
Manifest next update: Mon 20 Oct 2025 10:02:50 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: lm5khuVnw/vZtuF+M6nmqEabssJoTsYAWdVjULHP52c=)
2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:fc:ab:e7:53:87:1a:d2:aa:db:3e:3c:a2:1c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Oct 19 10:02:50 2025 GMT
Not After : Oct 20 10:02:50 2025 GMT
Subject: CN=3e68639a3b8a61b10bf2c1df9fee6400be8e0954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:ea:a7:e3:2a:0f:f7:a6:2e:bf:1f:42:f5:
a6:60:50:6f:b9:af:32:4f:70:0a:12:f0:3f:c8:37:
d7:22:58:a0:97:5e:4a:b6:07:7c:08:f6:b8:6b:0b:
ab:35:0c:3c:bd:0b:80:3c:aa:b8:c8:bf:f9:80:15:
68:cf:6f:93:6c:79:c8:3c:20:3d:29:83:98:5e:3c:
78:f4:0a:50:28:28:c5:9e:ca:50:c3:e3:2a:6d:75:
3a:75:ae:10:38:4e:f4:62:fd:a2:ce:8e:92:96:f2:
c4:05:b0:49:ba:89:4a:e0:b1:6f:fa:e6:02:a2:63:
8c:15:06:0f:aa:99:3e:48:4a:de:f3:72:76:46:77:
29:ac:5c:09:b5:3b:e2:96:8d:2d:27:ca:d5:c1:ba:
de:90:2d:d1:18:24:b0:f4:33:80:f8:02:a0:cc:fc:
70:78:cc:02:25:79:cc:bc:81:c9:a0:a5:d0:c1:56:
23:8c:47:05:65:7c:f2:da:c6:9d:9d:0a:83:39:26:
9f:fe:f4:04:72:45:e8:c4:54:63:bf:d0:1f:b0:a4:
a9:51:56:81:6e:bf:3f:76:cb:be:aa:38:71:8c:75:
e7:5d:05:ba:43:30:3b:13:4e:9e:2d:30:7d:72:77:
d8:8a:67:b0:d6:62:ac:29:d2:bc:bb:17:c1:3b:c8:
da:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:68:63:9A:3B:8A:61:B1:0B:F2:C1:DF:9F:EE:64:00:BE:8E:09:54
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8e:d8:a0:f2:ad:8d:09:ca:6e:9f:a9:9c:c5:8d:e1:11:74:
cb:33:77:09:3d:8f:d6:e2:b8:5a:fb:4e:05:7a:2f:b7:71:65:
8b:7b:86:e2:43:24:4a:83:28:05:48:fc:b7:60:14:67:3a:7b:
c9:1d:c6:df:ec:f3:5e:e7:53:58:2e:da:91:87:64:ab:b6:2a:
a8:77:ae:d5:48:1d:15:68:b6:18:6f:20:79:04:af:3a:bb:bd:
86:0c:c2:b6:72:67:0d:f4:59:ad:98:63:fb:60:21:7a:2d:41:
ea:c6:33:60:61:ee:3a:24:76:5f:1a:dd:99:da:a9:17:6b:6c:
69:62:30:f2:34:d8:b0:5f:c1:53:cd:58:10:e1:86:78:bd:85:
c3:55:5d:70:c9:da:75:35:87:ad:ad:fc:0e:19:9a:be:05:61:
2b:5a:2a:30:6d:0b:bb:66:1b:a5:ea:45:b8:f7:70:2d:1d:bc:
9d:50:b6:60:b9:3f:26:70:1d:c6:65:58:51:9b:1e:49:6d:df:
18:09:47:a9:99:5f:c7:3a:3e:e4:23:93:07:59:0e:c5:19:ac:
c5:8d:b9:12:90:d9:77:2f:3f:15:6b:21:64:9d:6b:88:ed:5b:
76:fc:39:f1:ca:40:87:d6:0d:0b:4b:10:12:f3:1c:20:c0:33:
ff:05:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:58 2025 by rpki-client