Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: kUIphj98PMZ2ZfU0Asr/KybmZXTqmxFi6EaggNwfX48=
Subject key identifier: 5B:17:1B:A7:CA:81:E7:37:8D:09:68:EA:C3:B2:3E:7B:22:82:ED:6B
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 0199FCC6CC85665CC6BF52B9521C6158FC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 1167
Signing time: Sun 19 Oct 2025 14:01:50 +0000
Manifest this update: Sun 19 Oct 2025 14:01:50 +0000
Manifest next update: Mon 20 Oct 2025 14:01:50 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: 7BTkqGAkJuy6OeHb9+rFw2bRwi08DTszD33mcLsTKsE=)
2: TrfKChON90CRCXVKGdWD_lFGLCU.roa (hash: GFMm+kc1nJBxOyEj3z/q6lfVZK3yETv8yRHloXoAgN8=)
3: TyDlQY0--7dqqa7hSxcdPHHA3k8.roa (hash: FDPgCRRVSr9ns/UDWv1/DVuyWSkU4YS2bgao5MAg8Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:cc:85:66:5c:c6:bf:52:b9:52:1c:61:58:fc:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Oct 19 14:01:50 2025 GMT
Not After : Oct 20 14:01:50 2025 GMT
Subject: CN=5b171ba7ca81e7378d0968eac3b23e7b2282ed6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:a0:32:c5:9d:10:56:dc:7f:9d:e0:15:0a:
08:7a:ea:4f:da:2b:de:3b:b0:a5:9f:8f:9a:06:f4:
1f:13:a8:db:86:45:88:dd:98:9f:bf:8f:88:4c:85:
9a:f2:27:14:8a:fb:e7:8b:78:f9:c6:c5:e7:e4:e2:
05:6b:5b:d3:af:d1:93:65:18:31:aa:ae:d4:ed:f3:
c0:38:b2:7e:5c:05:36:50:aa:29:1a:fa:95:db:25:
37:7c:59:88:ba:15:0f:d1:95:e7:a7:32:50:bb:92:
d1:21:56:73:d3:aa:9d:8f:f9:12:f4:ec:2f:7b:7b:
0b:8c:08:24:43:cf:b3:79:28:0c:3d:a2:8f:d8:e6:
1e:dc:2d:1f:5b:11:fd:e0:b4:58:f5:34:c6:3f:72:
99:55:1d:1c:27:74:64:9a:a1:06:0f:63:29:d8:72:
26:04:eb:c0:66:10:67:aa:dd:1b:d4:3f:62:6e:c0:
fd:f5:eb:98:2f:17:28:cc:b8:d9:bb:cd:6f:34:62:
b4:c7:fa:44:a5:fa:ca:57:41:f2:73:54:1c:09:0e:
4d:6a:49:1a:a2:14:5c:5f:39:8a:5f:43:9f:65:fb:
21:80:04:ad:3f:5f:28:83:93:da:06:99:39:c1:6b:
f7:f3:33:39:73:94:d3:d1:1b:9e:03:7d:9f:0b:68:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:1B:A7:CA:81:E7:37:8D:09:68:EA:C3:B2:3E:7B:22:82:ED:6B
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:95:19:8f:e2:a6:6f:0d:f0:a4:83:3c:f5:9c:72:59:fd:25:
a0:c9:6f:41:12:0e:a9:e4:f5:8e:06:48:1a:df:a8:64:13:75:
af:54:35:d6:55:cb:fd:77:03:db:f7:9b:64:03:90:29:47:3d:
77:24:ee:29:ba:8e:99:3c:ea:df:b4:70:87:05:1c:09:a3:be:
a3:65:82:fd:a1:44:5f:3b:8a:c5:e9:85:18:d4:2f:f9:02:9b:
20:32:41:c6:02:7d:ff:cc:84:91:cb:45:a0:15:ce:cd:d3:c4:
9c:b7:52:94:4d:95:aa:62:93:81:91:40:2b:67:78:cb:82:c8:
4c:f8:57:8d:c5:ea:0a:72:77:d2:9a:cd:9e:b2:f7:f6:ef:73:
8e:e9:2c:97:e2:70:87:56:b6:1f:6f:28:d4:95:30:07:37:5c:
0f:e1:05:01:68:3b:f4:3f:21:60:75:64:42:b0:3b:f2:a6:eb:
c5:25:77:e2:37:3c:b9:8b:f8:fc:34:17:d7:8d:3b:67:14:17:
de:cb:39:fb:ed:82:be:cb:c1:ce:ae:b8:1d:ce:65:d4:cc:c6:
10:62:d3:1a:fc:19:87:ad:b9:08:9b:2e:36:7a:b2:91:0c:52:
69:b2:21:4e:99:7e:58:79:2f:01:e7:95:a8:bc:f3:ca:97:f3:
49:42:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:08 2025 by rpki-client