Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft (raw, json)
Hash identifier: kInS4LdFuWp+nWFXuupkr2CBvf0Nl9bubtUMbL+zyeE=
Subject key identifier: 47:FE:9A:7E:C5:B5:D8:33:D8:8B:F5:66:74:2F:B0:8A:1A:9F:67:37
Authority key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Certificate issuer: /CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Certificate serial: 0199FEB4BB4C2B0C611247568F5CEA32A3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 23:01:21 +0000
Manifest this update: Sun 19 Oct 2025 23:01:21 +0000
Manifest next update: Mon 20 Oct 2025 23:01:21 +0000
Files and hashes: 1: QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl (hash: pSNhYA0G5JS68iRwxeku9OKqx0q98NPfD0ZrSFIKihQ=)
2: YAyk3zFlveiyrktJmuMDObuicGM.roa (hash: X7im5gEfQxzJ+2uFiNxaGzJ0zO2RD2TZsOAKFKiJMJs=)
3: umFBgs224fvHmv7UVIkmk-cu2a0.roa (hash: LWAYsABtQECbCV3sDGlu7B0OwEh6Yr4LZp65O/U8FCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:bb:4c:2b:0c:61:12:47:56:8f:5c:ea:32:a3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Validity
Not Before: Oct 19 23:01:21 2025 GMT
Not After : Oct 20 23:01:21 2025 GMT
Subject: CN=47fe9a7ec5b5d833d88bf566742fb08a1a9f6737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:63:a7:91:3e:eb:7a:77:76:de:fb:16:08:
72:72:79:b1:a7:a5:a0:c2:dd:1a:27:56:78:16:46:
ea:2e:b6:f4:12:19:43:dc:33:7e:b3:f6:df:c3:0a:
bf:87:26:52:cf:07:47:44:34:5f:46:f5:4d:ae:8f:
81:71:26:68:00:07:af:28:1a:fc:2f:83:85:87:5d:
33:c2:ae:9b:b0:28:34:1b:e5:90:bd:2d:6f:a3:d1:
79:96:3d:38:f5:e4:3a:9d:63:a4:d3:04:88:f6:28:
cd:5d:2b:b7:7c:54:ee:55:30:4a:06:2c:09:6b:64:
58:8c:cf:dc:eb:88:3a:a3:b9:f5:14:5e:91:7e:28:
ba:07:e8:e7:98:e1:15:6b:68:d0:17:c8:68:59:e5:
28:6c:8a:4b:9d:c1:b9:60:1f:b7:2f:84:ac:7c:7f:
60:bf:cc:8d:75:a3:be:83:90:45:30:1e:36:53:f7:
9d:35:9b:98:d8:ed:e6:c6:67:c0:d9:65:06:7f:0d:
7b:f7:f4:2a:36:c2:90:77:04:fa:fd:d7:6f:89:23:
43:30:bd:24:be:d5:fb:b0:65:87:dc:29:00:99:45:
48:c4:ae:f7:ac:27:3a:39:dc:ac:40:df:21:0b:9f:
9e:a4:76:46:b4:07:1f:9c:ee:fb:33:aa:44:c3:0b:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FE:9A:7E:C5:B5:D8:33:D8:8B:F5:66:74:2F:B0:8A:1A:9F:67:37
X509v3 Authority Key Identifier:
keyid:42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d7:31:ec:1f:47:79:07:57:3a:73:ed:6c:7e:9b:52:98:17:
5c:76:cc:24:1d:b5:ec:e9:f3:f0:41:08:c9:7a:d8:24:8e:0f:
5b:10:74:24:7d:8f:1d:45:f2:87:64:38:79:c7:34:a7:2c:aa:
00:ce:a6:4a:f4:b0:71:15:a0:cc:fc:54:04:66:4c:09:2a:48:
82:5d:a3:44:a4:bb:20:8e:2f:de:b9:44:80:13:74:92:3b:95:
de:a3:e6:fd:d8:8f:7d:e2:59:ad:e9:2a:43:91:a2:e3:78:d7:
bb:0c:f9:39:6f:5d:d7:b8:89:46:59:26:0a:61:b2:74:f4:5d:
c2:84:f3:e6:8e:ef:b6:63:ec:aa:cc:0f:95:9b:ff:b4:52:8d:
15:2f:bd:56:d8:f9:e3:d7:1e:79:49:ef:af:ea:ba:57:1c:c6:
48:b9:fc:c1:7d:47:05:f9:ea:2c:dc:f5:13:84:b8:f5:ef:fe:
36:2a:7f:ce:8f:3f:b6:1e:7d:c8:09:dd:01:da:17:e7:a2:c6:
ad:61:7d:01:bf:13:ac:6f:b5:ca:89:54:15:8e:ce:05:ca:28:
59:b1:c5:28:ce:ba:7f:ea:f4:3e:cb:49:86:86:91:1e:cb:11:
a3:74:69:31:68:e0:26:68:95:4b:34:ef:03:23:63:b2:7b:f7:
97:d5:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:07 2025 by rpki-client