Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File: qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier: T2S9DeixtPgDYlaomlDpEc1Nxh9b/jxctUNbOk+Aijs=
Subject key identifier: FF:66:8B:B6:2F:95:6E:D0:1D:63:5B:0A:E4:2C:1E:77:6B:AB:D3:73
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 0199FC585E3E6194A68E5326F1009298B820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number: 04CE
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (hash: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=)
2: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: I77x13GDSgFw9pY7fQJmYYPLH4zmiww3l/ABFLAO2Yw=)
3: tSdceX3_WKYPOSqNpQt9_4TBFn8.roa (hash: zZjSigYgJ8knWkj4u0ar/HI7QTSKBL8PUuzQf8DJQWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5e:3e:61:94:a6:8e:53:26:f1:00:92:98:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=ff668bb62f956ed01d635b0ae42c1e776babd373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:50:0c:17:0f:2f:59:64:03:06:fb:e4:60:
08:7d:86:57:f1:9e:58:8c:58:a4:fd:82:67:19:d1:
06:6f:73:28:c8:f2:85:57:87:d9:ad:10:5d:b5:bc:
4f:53:f9:ae:db:da:5a:85:44:1d:11:87:76:c8:e7:
f4:39:0b:97:bb:63:a9:25:c3:ac:6f:48:70:66:c2:
ed:db:34:39:e3:48:0a:54:7c:71:04:cd:b4:70:9e:
b1:9f:f0:92:7d:0c:45:47:6b:d6:5e:46:ab:1e:7d:
6b:76:0e:1f:a7:1b:30:14:87:d6:2a:84:ff:23:d8:
6d:4b:d8:70:a3:98:eb:bc:02:a2:90:78:22:28:47:
26:84:f1:29:c5:74:52:b9:50:80:e6:81:91:ed:ed:
0d:5f:11:ba:b7:ec:45:1d:ec:fc:1b:13:da:87:90:
24:14:7a:59:aa:0d:b8:93:06:49:13:d6:04:a6:28:
8e:f0:5c:ab:56:cc:89:53:8b:7d:1b:5a:16:63:f5:
f7:91:79:66:8f:6a:14:98:d3:e3:df:b2:01:99:b6:
ac:e8:00:2b:2e:f7:bf:02:91:bf:a0:c1:a9:97:86:
c4:ba:1f:78:f3:45:f4:8f:13:d2:6c:63:46:62:12:
79:6f:37:a2:b3:00:75:2d:f9:66:05:be:b1:02:78:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:66:8B:B6:2F:95:6E:D0:1D:63:5B:0A:E4:2C:1E:77:6B:AB:D3:73
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:bb:60:2a:dc:a7:2b:e6:10:6a:91:81:6b:07:f0:bb:9a:49:
8f:95:9f:a4:ff:f1:11:f0:33:9f:53:4f:a4:66:cf:0a:70:ad:
a6:f2:96:e2:c9:c4:34:9d:3a:50:9f:5d:d8:59:e0:89:db:e3:
08:72:04:00:58:8c:ba:c3:23:3b:d7:35:11:03:11:0d:f5:04:
bf:00:5d:dd:df:e6:01:e5:f8:8a:52:b9:a4:74:b6:50:94:fc:
da:bf:16:a1:9c:39:82:6e:47:b0:e7:75:d7:71:33:05:40:2e:
39:4f:dc:93:b9:15:f1:1d:77:c2:de:ab:69:e1:fa:13:6c:e8:
73:2f:07:35:f2:55:59:af:5c:3a:7c:b6:d4:6d:b9:25:5f:ae:
f9:18:6d:bc:d6:06:ed:da:4f:2a:a4:95:2d:0f:af:e6:09:9e:
66:70:a2:49:0a:54:26:77:1c:0e:95:dc:3c:56:60:c5:ed:61:
f0:63:fc:e6:25:64:90:c2:4d:fe:42:49:ca:8f:f4:e8:c4:5c:
99:bb:2c:1a:b4:6a:cc:5f:31:96:60:8c:e4:b8:39:85:41:19:
76:03:cc:05:c5:f3:88:15:b0:17:b9:e4:6c:ad:c5:33:c4:5c:
8b:f3:2c:84:f4:ac:0f:a7:ef:63:63:d9:6f:a8:c0:6e:5e:c3:
72:1c:79:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:18 2025 by rpki-client