Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: G/K6FompEm2GZxDFeAALTLWl/Rjr8tC5iPmHy1pWMmo=
Subject key identifier: 2C:16:E7:EB:6B:7F:8E:0D:0D:21:9C:AF:65:39:18:42:92:0D:5D:9F
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 0199FCC69F8519E133073E4F3D88FC025FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 14:01:39 +0000
Manifest this update: Sun 19 Oct 2025 14:01:39 +0000
Manifest next update: Mon 20 Oct 2025 14:01:39 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: GouOUccIpDywA9wCxyx5cYE3d3kCtkhJiE4BywqC4Kw=)
2: ymSnyZ91fxVC39LRAlSHciRZ46Y.roa (hash: 9upse4LtnCnU7pMyWCgkPTtYXe3IQqerCyozn8qome0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9f:85:19:e1:33:07:3e:4f:3d:88:fc:02:5f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Oct 19 14:01:39 2025 GMT
Not After : Oct 20 14:01:39 2025 GMT
Subject: CN=2c16e7eb6b7f8e0d0d219caf65391842920d5d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:87:18:5f:f8:37:23:5b:0b:be:74:0e:f7:
16:47:c0:29:33:6a:9c:6e:63:44:5d:2b:3d:ea:0d:
79:93:2a:13:b0:fb:de:11:65:60:f6:03:3e:b2:03:
f2:fe:ad:59:95:e5:e7:9b:30:9e:2c:08:72:ff:57:
ca:43:21:22:5a:e3:76:ab:c1:3f:dc:e4:12:63:a7:
6b:4f:85:ff:fb:1d:9f:f7:13:35:c1:27:43:66:56:
0c:65:9c:68:e5:43:cd:7e:12:6c:8d:6e:f7:d0:90:
16:40:75:2d:60:63:c3:1d:11:36:a7:eb:f6:1a:99:
5d:57:ef:17:82:55:7c:5b:d9:87:0a:ab:b3:18:8d:
f3:34:42:eb:8c:6b:e7:96:0e:a1:bc:7f:09:73:1f:
d0:dd:62:f8:3c:0f:93:89:ff:bd:ef:4b:99:3a:ab:
ca:09:4b:52:26:2f:af:25:21:cc:24:dd:00:22:e3:
2f:f8:11:42:49:66:21:a4:84:b6:f7:76:72:25:1c:
a8:ae:9b:6f:72:50:a1:7a:95:73:03:4a:05:36:29:
61:c5:0d:dc:38:88:12:d1:e1:2c:56:b9:e6:ae:80:
b4:1a:ac:c6:53:8e:3e:ce:8e:79:86:06:cd:d5:83:
bf:3c:3e:96:50:3b:67:65:39:eb:ba:a7:09:30:60:
9d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:16:E7:EB:6B:7F:8E:0D:0D:21:9C:AF:65:39:18:42:92:0D:5D:9F
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fe:26:fb:64:b2:cc:f4:d5:1b:30:c4:d1:27:18:17:57:cc:
b9:c4:2b:50:30:3e:cc:a9:32:76:ac:98:01:ec:de:f6:01:8e:
4d:f7:9d:d9:01:12:0f:7a:2a:a0:b0:f6:1d:b3:2d:94:55:94:
0b:0a:17:f1:39:9a:f9:c5:dd:4d:a2:86:36:45:e9:64:b3:e8:
d8:80:1b:bc:04:3e:98:ac:09:8d:ed:3f:6c:d9:f3:43:46:10:
90:40:f4:4d:e1:06:5c:68:0e:b4:e5:4d:39:9c:03:4b:b6:96:
a1:a3:5d:8c:2e:a0:df:42:58:3a:e3:53:84:7e:c5:eb:a3:06:
1d:55:56:5e:2f:82:9a:35:51:80:79:b1:18:f6:9a:36:af:8f:
f4:06:96:04:98:d5:9b:50:a5:a3:67:ee:1b:ac:ca:93:99:a9:
a9:ec:e4:23:d5:8f:90:98:a6:8a:49:e4:da:94:25:b4:68:ca:
b8:f7:b7:17:2f:de:d7:fe:dc:f6:c9:52:44:d1:5a:15:84:70:
80:de:89:ab:e1:61:dc:a9:33:a2:75:4f:d0:09:cd:be:ff:e7:
7a:b3:31:b7:05:b7:5f:8e:a5:d5:f1:5f:b2:e9:17:03:e4:60:
e4:09:4d:fa:b8:79:7b:90:aa:28:17:44:60:7d:41:58:35:af:
2f:47:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:37 2025 by rpki-client