Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: xqBxbWaR5HLB8bVbXUNLM2ogfKoe9Q5bWtvGdqblOIQ=
Subject key identifier: 62:95:4E:16:E3:82:A0:9F:70:8B:91:E5:47:2A:60:FF:07:60:5D:39
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 0199FC216FCE57C8C06271DC92C24F45EF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 0277
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: kzb3UELNoFts8y6lwl17kjRfOQIsfPbZT4OsqpMVSGg=)
2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:ce:57:c8:c0:62:71:dc:92:c2:4f:45:ef:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=62954e16e382a09f708b91e5472a60ff07605d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:58:a3:e5:a7:f6:63:77:6b:a8:23:ac:81:
79:da:46:ab:9e:da:f3:57:8e:1b:e2:09:9f:54:ff:
01:5b:9a:e5:d9:15:8f:bd:86:cc:96:cd:5d:77:83:
18:5a:e4:f4:56:7a:31:79:60:e5:7d:39:9c:5a:24:
e8:78:0d:43:60:ca:89:05:f5:25:15:b5:b7:f6:2c:
d7:c1:b3:d9:51:bb:65:c2:1c:76:d9:bd:00:c4:a7:
88:60:30:a7:cf:eb:bd:37:f4:85:35:bb:8f:0c:1c:
b7:06:32:7b:fc:df:00:2f:a8:92:64:00:5c:aa:30:
fc:b8:5f:1a:bb:ae:e1:41:b5:b9:9b:d0:a9:9f:de:
e7:14:bc:a5:9e:8f:44:24:44:86:06:e0:f3:9a:b4:
e8:ba:69:6b:3f:cd:ac:08:97:aa:02:84:dc:54:b4:
7b:cb:0e:5c:51:eb:8e:70:c0:5c:28:df:f3:40:37:
02:75:f6:94:5d:6e:f8:06:75:88:78:10:b7:3e:b5:
26:3f:23:1b:c4:a5:bb:00:87:f9:54:b9:9a:04:8d:
e6:c5:83:42:54:4d:01:4b:20:8d:a2:52:8b:a8:87:
f9:57:f3:01:e1:9b:d3:ea:1a:d1:4e:77:49:9b:a4:
eb:e8:33:f6:30:1b:b5:4f:2e:93:a7:78:12:ea:94:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:4E:16:E3:82:A0:9F:70:8B:91:E5:47:2A:60:FF:07:60:5D:39
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fe:d6:08:b4:1d:78:ae:6d:3e:03:28:19:58:e7:53:2d:d3:
59:1d:37:87:d6:36:49:75:2a:75:94:b0:39:56:b1:9a:49:1a:
05:9b:6f:63:ab:51:46:d7:49:9f:b0:2f:84:ab:f3:6c:98:20:
26:33:2b:28:ad:e2:c3:98:7f:93:03:e8:0b:4e:bb:c0:ea:35:
1b:99:dd:d5:e2:b4:e0:15:b8:fd:f6:d2:7c:26:ec:99:19:6b:
87:f7:fe:0f:14:ff:9e:9d:d7:92:67:30:27:f0:9a:23:87:99:
80:76:3c:d0:a4:d5:dd:94:94:9a:c5:bc:fc:8f:5f:22:42:55:
af:51:28:d1:eb:72:90:9b:5f:2f:23:01:21:26:2e:d1:f6:62:
b7:ec:ee:fe:fc:1e:ee:6d:bc:8a:7d:ec:43:8d:7a:df:b3:3a:
d9:fb:65:6c:27:c0:64:e9:a0:d5:50:ae:78:aa:1e:f1:86:4d:
78:f0:c0:9d:13:f7:d8:df:52:29:42:32:1d:e6:6b:f8:ad:7d:
dd:97:d3:7f:2d:e2:46:f7:b0:10:67:73:4e:c5:8d:8a:a8:f4:
c6:b3:79:cc:2e:74:5c:34:c4:0a:e9:0c:a4:14:d9:d1:76:8d:
ee:8e:17:6b:f5:34:17:54:3e:d4:7e:48:04:fb:7c:9e:2e:79:
dd:1b:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:00 2025 by rpki-client