Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
File: QXY9se0zSnxSgKuYVHQpFK4MTFI.mft (raw, json)
Hash identifier: iSkSSNw5SLxubjeig+o6V9+8WAb6WihTRqzWJB4f/co=
Subject key identifier: 12:30:0A:B7:58:33:07:56:02:F8:6C:12:48:96:D6:C2:E3:11:F0:6A
Authority key identifier: 41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
Certificate issuer: /CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Certificate serial: 0199FC8FBFB0E8E0C48BFC54CE1E1E90DD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: NDvYoDRKvIsz-6V9rVmhTDCa2sQ.roa (hash: dhgjcITIcU0jzfd0xbGSpC/kzQFCv6MxYX9SO45zGFg=)
2: QXY9se0zSnxSgKuYVHQpFK4MTFI.crl (hash: S744ml1chrPf6T9FVeB/DXZq1IZMZ34/9LxckyLE/sU=)
3: cIiLeLQjSOta8uBuSJamYJA2bp0.roa (hash: HNS0nyiGUfnG1aMP87O2udQ4Nk+kwAFUsHx1btTnPvE=)
4: pYhcj4jriDQOw9AurBjLjtrgCIY.roa (hash: 7LD9r3XdAs/ISMzQa0jD1EGLbfWfSA0NQe/HoYtppdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:bf:b0:e8:e0:c4:8b:fc:54:ce:1e:1e:90:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41763db1ed334a7c5280ab9854742914ae0c4c52
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=12300ab75833075602f86c124896d6c2e311f06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:4d:7b:9e:bb:e8:41:2a:39:43:ae:b8:af:
8c:b4:b9:d7:3e:ea:21:fd:b1:36:1c:b2:4a:e8:38:
12:d5:66:0b:8d:bb:f5:fc:94:33:5d:b2:0f:bc:f9:
40:1b:b3:22:18:28:3b:72:34:39:8c:6f:8f:aa:94:
7b:65:cf:af:d3:89:ae:0b:e5:c2:bd:2a:82:8a:41:
98:bc:44:98:97:00:58:dd:c8:a2:0d:79:4a:32:cd:
d7:50:88:73:67:b8:09:a3:b9:c5:45:ca:04:24:51:
f8:9f:a3:84:d5:2c:7b:9a:60:62:fd:94:a6:8f:dd:
70:86:0e:ac:43:59:c9:3c:5f:21:72:cc:9c:db:b0:
f1:81:2b:22:4e:80:6c:23:44:bd:c9:5a:b1:86:b9:
97:2c:8e:d6:a9:2c:4a:bb:97:b2:b3:18:d1:05:26:
13:bb:66:c0:20:15:c3:dc:aa:11:61:8d:48:43:d7:
bd:89:17:74:83:6e:78:52:3f:24:ec:af:ae:0f:0d:
62:47:e8:e4:6d:cf:b6:2c:ca:3c:0d:d2:c6:b9:4e:
d6:ca:b7:42:6f:33:eb:43:7d:eb:3d:73:51:86:63:
ad:1e:21:28:67:21:c9:03:61:dc:a0:b4:1f:65:71:
6b:48:bc:f5:b7:fb:0e:f3:ef:25:46:e8:54:07:0f:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:30:0A:B7:58:33:07:56:02:F8:6C:12:48:96:D6:C2:E3:11:F0:6A
X509v3 Authority Key Identifier:
keyid:41:76:3D:B1:ED:33:4A:7C:52:80:AB:98:54:74:29:14:AE:0C:4C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXY9se0zSnxSgKuYVHQpFK4MTFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/efd094-4bc0-4ad0-aba3-49c95eeac812/1/QXY9se0zSnxSgKuYVHQpFK4MTFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:68:c6:af:cf:2b:8b:44:32:50:5c:9c:5f:35:44:e6:48:54:
43:09:d8:10:9f:8f:52:e4:96:1f:2b:cf:f2:3f:8b:54:6b:79:
74:c3:4a:5c:81:3c:23:78:b1:95:a3:cd:a6:5d:aa:c3:5a:dd:
9c:0a:8a:d8:18:f7:63:f4:b6:95:c3:af:fd:c5:ea:3f:4f:a5:
3c:02:0a:e3:30:79:5c:b3:0f:ce:1c:2c:67:a5:2f:8a:5f:79:
d4:d7:96:bb:9d:a8:b7:9f:3d:c3:69:00:53:da:2b:f1:0e:fc:
f6:c1:fa:00:d9:58:c8:bb:eb:98:b8:10:70:ef:26:69:88:7b:
6a:a0:4f:e8:47:0a:1d:28:c6:99:cb:1f:ab:e4:cc:de:d2:a1:
8a:8d:ae:21:df:c7:24:c0:35:55:e1:39:3b:a2:25:03:a0:7e:
a0:0d:5e:4c:e6:21:d9:eb:07:5e:c6:f3:b9:17:6e:a1:7e:94:
07:05:52:e7:9c:c4:8c:76:a7:59:d5:30:73:c8:ca:7e:69:67:
95:9c:40:c5:49:a3:fc:53:41:d6:0c:cf:7d:e9:fe:d9:25:22:
78:b7:8d:43:80:b6:d2:a3:42:c2:4c:91:d1:02:7a:f9:60:14:
f0:22:c3:22:49:72:19:04:06:99:14:79:07:d4:c4:11:20:23:
bc:70:e8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:23 2025 by rpki-client