Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier: udGhE90pNmlZuVfWpUSCIbC2Fa8B9wqywhL6+0WGwT8=
Subject key identifier: B2:6B:A4:B3:A5:30:AC:DD:19:60:58:90:D7:C7:6A:71:FA:E6:6E:CD
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 0199FC58C2FC2B9E04F880553D3935386E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number: 1542
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (hash: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=)
2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: jAYBPbRrxOQNHhciDXl/zO51NkTfP/dg5o1iQZURNzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c2:fc:2b:9e:04:f8:80:55:3d:39:35:38:6e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=b26ba4b3a530acdd19605890d7c76a71fae66ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:1c:0e:28:94:60:1d:c0:57:07:9b:52:ec:
d1:84:5f:a3:e3:0d:12:8d:9a:ef:7b:97:97:41:b6:
c1:51:b8:45:94:4d:5a:2d:49:58:ce:fe:86:16:0d:
24:50:f7:a8:35:41:cc:45:b3:6a:cc:cc:23:84:10:
ce:9a:4a:80:f3:62:c2:9c:ed:49:0a:88:52:03:3f:
c2:81:e3:d0:37:7d:6b:d2:67:d8:eb:dc:3c:a9:59:
a4:1c:10:e0:1a:f5:d5:97:e3:49:2a:e4:df:0f:ef:
e2:e0:9a:8e:da:0b:05:61:4f:45:fb:fc:95:6d:f6:
d5:5f:e0:ec:88:32:d7:32:1a:fc:2d:dc:9c:d8:a4:
29:54:20:ba:91:21:bf:7c:23:f1:4c:4d:65:59:52:
84:57:5a:1a:88:10:a0:ac:e3:1e:a9:35:a4:6c:ec:
ec:5f:be:ac:ec:0a:7a:27:a7:cf:7e:84:f1:c6:ba:
0d:f4:8e:70:1f:83:de:f7:4d:f0:66:68:85:fc:43:
f0:eb:06:f8:d6:ca:65:0b:f8:d1:6a:eb:a6:6d:10:
62:ad:af:a9:c3:08:44:a3:f4:f7:33:41:cd:a2:1d:
82:5b:42:24:78:22:05:52:5f:a6:c1:33:1a:ac:e5:
5f:50:8e:3d:08:d5:db:85:48:34:be:da:76:a4:18:
03:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:A4:B3:A5:30:AC:DD:19:60:58:90:D7:C7:6A:71:FA:E6:6E:CD
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:45:c3:fb:12:d6:fb:91:21:ad:b8:05:53:5b:0d:b8:ae:c7:
d6:42:71:87:04:7f:da:32:d1:5e:2e:ab:9e:ff:7e:70:87:31:
89:84:37:08:38:b7:ab:38:fb:45:4e:60:17:71:3a:d3:8e:61:
bc:8c:25:4f:36:c6:34:9a:e2:5a:46:eb:e6:50:89:00:c4:ed:
71:6d:6e:9c:44:ea:92:c5:0c:c3:3e:a8:be:e2:c1:81:fa:52:
6b:13:2e:d1:7e:4e:a4:0d:8c:23:0c:8c:21:80:fd:36:1c:ac:
ee:2b:0d:31:32:31:0c:6e:2a:bf:44:35:37:46:a1:0f:5b:d8:
9b:1b:3d:45:90:52:69:d4:52:e9:4c:1e:0a:e7:cc:e1:44:5f:
4c:8e:d8:59:74:ac:88:84:b7:c6:94:08:8e:19:04:a5:11:73:
f7:14:82:95:f5:c2:f8:cd:33:ba:c8:78:4c:36:23:a2:8a:c7:
70:aa:75:f2:08:c4:66:80:2a:20:a8:bc:73:45:c4:bd:1e:d7:
dc:eb:7c:78:5d:ee:e2:f9:e7:69:69:91:d2:d7:a5:0e:48:f4:
98:4e:25:bd:79:c2:34:ec:61:e3:87:96:9c:61:5d:63:97:75:
75:98:ee:d7:3d:b9:08:56:47:80:25:9b:54:5c:77:c0:87:5c:
af:25:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:50 2025 by rpki-client