Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File: QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier: 91oVIn15qvduJhZUCu6oL5zytMZIc8rv3wm+aSrsXEc=
Subject key identifier: AB:8A:DB:29:D2:8B:AE:9A:DC:C5:3F:4A:55:DD:FD:AC:AE:99:89:F1
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 0199FE0FE284807C7F64668FCF661724E6C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number: 0FA5
Signing time: Sun 19 Oct 2025 20:01:17 +0000
Manifest this update: Sun 19 Oct 2025 20:01:17 +0000
Manifest next update: Mon 20 Oct 2025 20:01:17 +0000
Files and hashes: 1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=)
2: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: d6HMWAGDyLBYxQJ6YRbUCtHC2YkalSom4EqDsbjYrwU=)
3: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=)
4: d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa (hash: eCiVHw72+bTZlv8fotK++2o6VMWQ+UX2AuVuNcdkIqk=)
5: iXw_41SDwVWtAf5ihJuQUw9Lk8I.roa (hash: IeaHE4eJJAlQPpX43/jtDGK9a0UQu+G72Lz6Qc9LhBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e2:84:80:7c:7f:64:66:8f:cf:66:17:24:e6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Oct 19 20:01:17 2025 GMT
Not After : Oct 20 20:01:17 2025 GMT
Subject: CN=ab8adb29d28bae9adcc53f4a55ddfdacae9989f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:5e:9a:dd:29:ca:0c:67:df:99:4f:a7:34:
a7:16:ea:cd:13:3b:f9:1c:4e:53:13:34:6b:3d:e1:
78:58:f4:a8:a3:3c:7a:3e:e1:cf:06:af:b2:67:b9:
4f:e1:f8:ef:c3:33:e5:5a:8c:57:9f:1b:72:52:a0:
06:a2:43:e7:b6:de:03:f5:39:60:18:3f:61:b5:34:
89:3e:3c:3e:76:fd:6f:dd:5e:3c:fe:fb:01:60:80:
93:77:34:2e:ae:ad:78:6b:ee:2d:bf:9d:cb:9e:8a:
2a:8d:eb:d0:e7:40:b5:e8:da:09:a8:6a:9c:fb:8b:
5b:51:2a:6c:bb:bc:ea:62:67:de:da:7b:19:9e:f8:
47:bd:f7:af:ac:c3:a9:de:9d:93:b6:fc:bc:5f:6a:
18:a5:f7:79:78:08:35:e4:f1:eb:b1:97:6e:bc:78:
e0:78:ea:7c:94:37:56:4f:d0:77:6b:6d:bc:af:17:
b8:81:d2:ac:fa:9f:75:5d:0e:da:f5:06:d5:24:d0:
a6:6a:8a:fa:d5:f8:f0:00:73:c4:91:d9:01:01:57:
a1:3b:9f:f8:b1:a9:c9:e9:67:4b:49:bc:c4:07:ea:
68:ff:1d:5b:41:4c:ca:35:3f:27:a3:96:16:f8:66:
8c:4b:c3:b0:40:cd:b6:85:5b:3c:2f:08:eb:cd:c4:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8A:DB:29:D2:8B:AE:9A:DC:C5:3F:4A:55:DD:FD:AC:AE:99:89:F1
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9a:b8:c2:64:8e:82:ae:b2:3e:11:04:6c:c5:15:d7:8b:3c:
cf:28:73:bf:e2:aa:00:25:a4:72:fe:a3:3b:fd:12:f3:39:5f:
89:64:70:6e:9c:a3:52:fc:fd:7f:d7:87:c0:c4:68:1f:c5:22:
a0:46:95:d5:01:04:da:74:5f:81:8e:c2:3b:e8:42:a1:11:46:
e5:3f:ec:6e:8b:a8:0d:af:c4:4e:f2:1f:fe:45:76:6d:20:ab:
d6:6b:bb:b3:12:06:2d:32:bc:50:2c:fd:34:47:b5:62:dd:9b:
a9:dc:8a:b4:5b:74:6e:e2:ea:f4:6c:52:85:73:04:70:52:36:
08:35:82:b3:4d:97:99:97:2e:34:99:ad:3c:1c:74:cb:9c:ad:
19:3b:c2:26:47:4f:89:80:d2:a9:c1:e7:9e:37:91:33:6c:ae:
d9:fa:9c:a0:6c:8f:40:98:1f:f6:6c:b9:7f:bc:3a:bd:c3:be:
69:59:74:a9:fd:d9:ca:c9:2b:47:37:3c:b1:84:d5:a5:18:ca:
8b:a5:71:33:c1:e8:82:4f:b5:a0:cf:42:cf:4b:40:97:29:6a:
41:d9:da:8a:00:c5:3a:75:00:a8:e3:b7:78:b8:e5:e7:ee:ce:
dd:82:14:7b:69:98:d1:cd:5a:48:dd:ac:b5:9e:0e:b0:2a:a3:
e1:70:ff:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:15:06 2025 by rpki-client