Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
File: QiF6LVE6n7D84aHPwrPAXAGL2ME.mft (raw, json)
Hash identifier: zPPyBnCeTtairuy9vbHTIi5DurtJrCYiJ5azZ9bP92U=
Subject key identifier: F6:C3:54:26:1E:5C:43:40:AD:28:A6:49:AA:0B:82:EC:06:9E:C6:75
Authority key identifier: 42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
Certificate issuer: /CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Certificate serial: 0199FB7CF543642C4226494D57CBD1A667E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
Manifest number: 0A6B
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: BF1OaGyaTyDLCWSklyxgYbn9nEs.roa (hash: AVER/BhL6ABrbQlRM/PyN/xXO4yBqy6qEwfqfNZn84A=)
2: QiF6LVE6n7D84aHPwrPAXAGL2ME.crl (hash: PYYjR87a3OfIPGGoPIXkqL9rYm2TDJWOLqviXJVx+yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f5:43:64:2c:42:26:49:4d:57:cb:d1:a6:67:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42217a2d513a9fb0fce1a1cfc2b3c05c018bd8c1
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=f6c354261e5c4340ad28a649aa0b82ec069ec675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:a6:fc:a8:e0:07:17:2f:c8:5d:82:15:da:
1a:30:8b:cb:65:64:33:ef:94:20:a9:7a:ed:ee:28:
e5:43:c3:07:2e:29:f6:da:d4:a9:61:cb:eb:6c:95:
b7:18:75:1e:eb:55:ef:10:13:c2:e4:d4:79:40:52:
f4:61:ec:0a:fc:bf:9a:9f:09:bd:76:ae:90:95:9b:
dd:5e:40:f7:e3:d5:76:2c:b0:a1:0e:10:9f:26:62:
e6:1c:8c:ef:d2:e9:52:79:e0:5c:ec:09:46:9a:28:
b1:e2:d3:8a:64:58:30:01:1e:6d:57:f1:cc:f5:f3:
e9:e3:79:32:67:9e:b3:9d:1e:08:57:36:fd:92:77:
2f:d2:b1:a5:a6:51:de:8c:40:77:aa:4c:87:5c:00:
84:83:27:70:99:1c:99:5b:16:a6:1e:07:5c:5f:a4:
06:00:66:83:c2:b1:8a:44:9e:05:ec:02:46:57:3e:
09:37:ea:bb:8e:10:e3:a7:b5:8d:e2:69:6e:9c:3c:
c4:75:a4:da:3f:af:7f:6c:cd:24:bc:1b:21:34:21:
f5:39:7f:6d:38:c1:bd:24:d5:d0:f4:96:58:a0:3f:
7c:ab:48:1f:d9:2b:e3:12:9e:48:87:05:97:b8:70:
44:bb:79:a2:d2:5a:12:0e:59:1e:5b:e5:1d:66:f3:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C3:54:26:1E:5C:43:40:AD:28:A6:49:AA:0B:82:EC:06:9E:C6:75
X509v3 Authority Key Identifier:
keyid:42:21:7A:2D:51:3A:9F:B0:FC:E1:A1:CF:C2:B3:C0:5C:01:8B:D8:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiF6LVE6n7D84aHPwrPAXAGL2ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f12551-20cc-4218-a426-f41d6c0c84b6/1/QiF6LVE6n7D84aHPwrPAXAGL2ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0b:61:cc:0e:68:56:ed:80:c6:a6:58:64:61:f6:3d:35:fd:
07:58:37:ed:98:a7:8b:a6:5e:c3:ac:69:fe:a2:cf:e3:fd:96:
d1:ea:76:30:64:0c:49:70:16:f0:74:55:23:b2:96:5a:b5:bc:
d4:c9:6d:e1:60:b3:09:1f:fd:bd:23:6c:dc:21:81:ac:b9:77:
f2:35:27:c1:53:d3:0b:60:b5:ee:97:80:5c:9b:0d:f3:73:2f:
c2:3e:c8:86:df:2f:60:71:07:5b:c4:78:5c:3c:3e:47:27:1c:
bb:ad:95:47:dd:7c:79:21:58:52:e0:2b:c1:43:f5:7e:56:84:
63:8e:e0:99:dc:78:42:ca:f3:6d:57:b2:b4:3f:b3:0b:f2:e5:
9d:0b:a7:5f:ae:92:4b:3d:0d:93:c7:65:b5:60:12:01:29:33:
4d:6f:89:9c:73:17:f1:c7:ea:8b:b4:0f:a6:04:e0:34:ce:80:
e9:dd:6c:10:1c:dd:90:0c:9f:7e:a8:1c:1e:74:a7:be:91:3b:
1b:4c:48:99:8c:a6:72:b5:34:7d:3e:f4:20:90:13:d9:d7:16:
e1:62:be:4b:d7:54:66:50:95:55:28:37:48:a2:31:db:77:4e:
ad:03:09:91:fc:1a:17:c5:13:40:6b:4b:41:81:0c:24:c8:be:
0b:fa:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:17 2025 by rpki-client