Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: E8QdiuuWvwxiFZO2H+OXieLEH2B3iqlA1dQK6klDdFA=
Subject key identifier: 98:ED:2B:9C:04:F5:05:81:37:52:4C:53:93:58:4D:11:1A:2A:72:E0
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 0199FD3491D2BB9EF637BD7BDC7F18021C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 16BB
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 04ZDqKGnFo9+jcoNxI5Bc9qOnYCs6uwWHGEN0EWtPZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:91:d2:bb:9e:f6:37:bd:7b:dc:7f:18:02:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=98ed2b9c04f5058137524c5393584d111a2a72e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:84:a5:3d:66:6f:4a:92:4f:11:2a:63:e0:
42:10:86:59:b5:a9:d2:42:64:ac:5e:bb:21:87:bf:
88:2f:09:7e:75:b8:12:0f:85:df:ca:ef:47:19:a0:
24:c6:68:02:9d:4b:19:14:52:fb:88:bc:03:24:7f:
3e:15:8b:0e:2c:a5:44:07:5d:8c:3b:f1:fd:97:63:
b3:f8:21:eb:da:1a:3e:51:9a:d8:9e:d5:07:6a:b6:
1d:45:49:4a:cc:ca:0f:d5:84:0e:9f:3c:7a:c4:0a:
1f:6b:68:80:f6:ff:06:74:a6:74:ce:79:06:f2:45:
da:a5:77:99:27:48:6a:b9:2c:99:b3:22:aa:c0:cf:
0f:78:aa:6c:e8:32:55:57:b0:8a:6a:e6:1e:84:43:
48:28:2a:f1:93:e8:43:2c:21:c0:fd:23:72:2f:22:
d3:92:56:53:0f:52:fd:ac:77:fe:51:32:5a:d2:19:
c4:34:ae:71:74:50:bf:ea:4d:c8:ba:bb:4e:26:19:
32:95:98:79:61:db:26:5f:61:4e:f5:9a:11:42:9d:
af:48:59:a4:cd:de:fc:37:b4:0a:da:5d:fa:34:f7:
e0:77:7a:73:c9:92:14:03:08:6d:45:d2:2d:68:f6:
a3:8a:48:5a:1d:09:d0:d9:14:a1:f5:e1:95:14:80:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:2B:9C:04:F5:05:81:37:52:4C:53:93:58:4D:11:1A:2A:72:E0
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e8:c0:93:d3:22:65:0a:57:ae:b6:c0:74:ca:8f:63:b9:19:
3d:c4:92:11:a3:4b:8f:1f:51:15:9a:b4:32:42:9b:33:29:ca:
de:da:ad:04:5a:d3:cc:3f:0a:85:97:04:96:75:3e:37:75:a2:
d5:18:b3:f7:c0:d4:c3:81:3c:a8:2e:cb:05:eb:cb:e2:d1:8d:
7f:42:22:76:6d:55:17:68:cc:d3:aa:2d:4d:61:66:9e:ab:c7:
12:50:e6:a0:31:12:a0:9e:9e:a1:fb:0f:ba:0f:2e:bd:06:cb:
1e:c3:79:95:3c:0e:d7:ed:97:6c:98:2f:5b:79:82:4c:b6:45:
4b:ed:82:78:c2:3e:de:b6:7e:1b:85:a7:a1:5b:87:27:9a:c9:
17:dc:99:5a:93:49:6d:91:1a:4f:76:6d:0a:88:34:5d:96:d8:
80:36:e8:58:44:48:b5:1c:2a:99:11:87:57:ab:ba:c1:f8:3f:
09:33:e8:85:5c:d2:65:a3:97:88:83:e0:6c:f7:29:6a:39:5e:
61:f1:62:3f:48:e6:db:f8:ef:f5:73:0c:7f:90:d2:a3:cb:52:
23:11:cc:32:f8:c7:10:af:91:b7:6b:2e:91:13:2d:6b:29:2c:
9c:8f:55:0b:92:62:84:f6:04:23:65:d4:93:95:b0:d3:2d:da:
46:da:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:26 2025 by rpki-client