Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
File: QPddMndhuQwImWOPQw62FMh8MQY.mft (raw, json)
Hash identifier: WwvLUqbNIRK6HgIfC0m+wg+vA7ITodRK6T+UEvsgO2g=
Subject key identifier: 20:3E:7B:90:01:38:19:7C:A4:F5:C6:B2:91:29:C1:76:64:69:9D:B8
Authority key identifier: 40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
Certificate issuer: /CN=40f75d327761b90c0899638f430eb614c87c3106
Certificate serial: 0199FCC69CDE1C1D5FE175A1FD38EBEFA125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
Manifest number: 120B
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: EjhHxmUhTpI_yi1jYptWWVsle0k.roa (hash: Eisn/B+33eIZDNWVZUSS6g6De7shzryfH75XScwtDR4=)
2: LMr4qJtoQiNuzRtdrPseYJWhmNQ.roa (hash: HjlHZSPbMqdny8RRGC9Ay5m+qCJBqQwRwFr/X+SmBKc=)
3: QPddMndhuQwImWOPQw62FMh8MQY.crl (hash: 8XPnQV8kNSjjYlu26DLbI1bz6WEFw/Teslcfpiixg9I=)
4: c5QEXFgvsV_AiBAbEhTe2AqCERQ.roa (hash: zLlrVyu51dTFBBqx0nndVHW+/Nx+vLVjEHJZY4Wab0U=)
5: y-yADsSuAYCkz0gxVgZddom2080.roa (hash: zES6u5cNrLeUaCV/Nld2QqUVKIff3UmbYVses7LYQwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9c:de:1c:1d:5f:e1:75:a1:fd:38:eb:ef:a1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f75d327761b90c0899638f430eb614c87c3106
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=203e7b900138197ca4f5c6b29129c17664699db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:4f:4c:fb:bb:c2:cd:6c:b6:9b:cd:47:e5:
c7:8d:d8:6b:1b:a1:46:55:96:9f:e1:67:fe:4c:79:
df:08:d6:0e:71:93:65:a2:f1:3a:63:21:8d:e4:85:
39:48:93:2a:7d:df:60:b9:c6:96:88:56:2a:42:d6:
4e:73:3e:cb:20:f4:06:1d:b7:12:bf:0c:40:45:24:
21:df:2c:76:78:60:39:1d:22:90:fa:e8:81:bf:68:
cd:a3:8d:6b:8b:4e:bb:cd:89:a9:18:8e:e5:03:39:
b4:1b:fb:16:53:7d:91:bc:08:5b:ae:c8:bf:0f:bf:
0d:75:32:f1:b3:e2:e3:91:ab:0f:73:a6:83:13:1e:
ce:d1:0f:d9:3f:1c:ab:99:df:a9:6b:4a:d1:ad:ff:
db:dc:09:e0:1d:d1:1c:b6:e6:c1:e6:44:d4:ff:89:
9e:db:42:63:d4:fb:19:79:9b:58:69:ab:33:83:24:
83:fa:2c:b7:fd:e3:e9:47:65:f5:4f:46:86:ab:96:
c9:c6:9f:9d:ff:9f:eb:f0:a0:95:2f:10:0c:86:cb:
89:3f:60:d4:da:e8:97:81:ab:1a:75:06:ca:aa:cc:
f6:72:ae:d7:60:94:4e:65:a1:0a:d8:29:76:88:69:
18:a3:9e:58:cd:0c:e0:1c:6a:62:9d:70:ca:02:18:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3E:7B:90:01:38:19:7C:A4:F5:C6:B2:91:29:C1:76:64:69:9D:B8
X509v3 Authority Key Identifier:
keyid:40:F7:5D:32:77:61:B9:0C:08:99:63:8F:43:0E:B6:14:C8:7C:31:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPddMndhuQwImWOPQw62FMh8MQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6e5f4c-2eae-48a0-8550-29ac45e2ecff/1/QPddMndhuQwImWOPQw62FMh8MQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:49:be:b2:c4:d8:7c:8c:67:31:32:6e:35:fc:68:09:bb:38:
11:fd:a6:fb:ac:6d:e2:63:6b:cb:fb:5d:aa:7f:75:1d:68:96:
52:77:e1:f4:a5:32:bf:a0:52:52:03:fb:df:db:e5:c5:1f:05:
28:94:17:dc:06:8c:91:ac:06:1b:fa:8d:1c:d3:ee:81:94:bd:
2d:e0:6f:37:43:5f:b9:e2:47:b9:29:9b:85:d2:0d:5f:57:36:
4e:70:1a:19:77:59:ec:e6:6e:f0:65:65:01:b8:51:f9:c1:da:
98:a4:82:3e:f0:39:66:86:32:0f:f9:76:80:8d:3b:d6:46:4d:
04:49:02:4b:ab:2d:56:cb:83:7d:38:2b:fd:f5:22:ae:d9:b3:
96:9e:cb:a0:9c:3f:e6:b8:5d:f3:c4:36:5d:e3:cd:16:01:39:
96:2d:96:b9:f1:ab:e5:e7:0f:7e:21:e3:35:f4:42:0c:b4:7d:
16:b5:86:a8:5d:2b:98:d7:5f:db:0e:49:1e:25:af:ba:4c:62:
8d:53:d8:fe:5d:48:27:24:2a:cf:39:c5:ea:e9:6a:8f:bc:86:
b8:3c:78:4c:e8:b7:66:12:21:2e:30:f4:6f:d0:35:85:5c:2a:
76:39:8a:bb:a6:8f:a1:7c:b6:dc:1b:2b:1c:eb:68:78:e5:48:
24:d2:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:51:43 2025 by rpki-client