Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: mba3T1y22z00iNcXTl18Q1Y3O4EOJ8DL2quGwzZKXHw=
Subject key identifier: BD:34:43:F1:7C:2F:60:CF:E4:63:67:CA:FF:5C:DD:22:0C:D0:C0:AC
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 0199FC58F6F2AA3E1B308D62DA90A28B741C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: GxaI4hXBc2RYVYOf0z16mvSsnyE.roa (hash: g97pf2epkDk5ZUzae5HXyC8jqAaA5Zg8rR+Lupka6qA=)
2: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: fW10dFKPX6o1HCWv2czahnlacymzGCDH45WzeUZQSjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f6:f2:aa:3e:1b:30:8d:62:da:90:a2:8b:74:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=bd3443f17c2f60cfe46367caff5cdd220cd0c0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:79:09:bd:f9:d8:55:2f:cc:48:e7:09:40:
3e:a3:aa:9d:61:bf:dc:4a:58:d6:aa:f5:e0:f7:4c:
31:58:10:08:81:6d:31:80:7b:b4:3a:4e:24:32:a2:
a4:c7:60:6d:89:2c:80:ee:82:55:89:c3:9c:e4:55:
54:97:2c:33:4f:60:a0:de:24:f2:0c:eb:74:00:35:
22:fd:35:a8:c1:5c:0d:50:32:c7:1d:c7:60:05:50:
95:34:35:ca:b1:8e:f2:6c:b2:20:b0:b5:a3:f7:ba:
4a:13:71:11:90:38:08:8e:6a:c2:56:85:62:39:6b:
50:03:c7:bb:13:75:48:0a:27:66:b4:48:fd:cd:8a:
ae:57:0f:77:82:75:62:07:02:47:79:49:37:68:dd:
15:b3:8c:4f:69:b6:56:c3:fc:ee:75:e9:7a:03:3b:
92:d7:81:f6:b2:07:b3:c4:cc:49:02:1c:6b:67:fa:
ba:55:9d:11:5a:d0:d4:06:1f:ea:8f:17:79:90:fb:
15:9d:8b:8e:06:15:14:0b:fc:7d:48:b1:23:67:3c:
87:25:fd:60:a0:f2:fa:52:1d:76:69:61:3a:7a:85:
d8:e9:e0:af:84:13:49:84:09:e8:8f:2d:60:af:d4:
e4:c3:f1:7a:e6:4f:8c:10:4f:c5:2c:96:72:90:f7:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:43:F1:7C:2F:60:CF:E4:63:67:CA:FF:5C:DD:22:0C:D0:C0:AC
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7d:63:11:2e:57:2f:60:c9:b8:29:b7:95:ef:0c:e8:af:6f:
9d:80:aa:c3:b4:2b:96:4b:39:9d:10:f9:4e:d4:19:34:85:2d:
56:e2:63:f0:9b:c8:38:14:02:17:2e:00:5b:06:74:30:e1:28:
a3:6e:50:87:42:b9:04:6f:fc:9b:41:a2:02:c5:ee:45:d7:21:
d3:0e:b8:17:05:d4:7e:86:42:40:01:ba:7c:d9:35:cd:6c:57:
36:25:04:77:f0:ba:db:f4:f5:dd:69:60:41:81:3e:f7:0c:6c:
45:99:c4:79:66:5c:76:d6:88:f3:84:cf:3a:25:d4:d9:59:af:
90:6d:73:f8:ea:cd:fd:bb:01:33:81:c5:44:4c:35:6c:e4:02:
81:b8:22:b5:6f:37:c3:54:64:09:34:de:2e:0d:4b:cb:68:c1:
90:dd:eb:6e:34:95:1a:49:19:15:9f:44:52:da:cb:b1:10:7c:
5a:f9:2b:14:bf:9f:ed:b4:78:6e:5d:03:51:85:eb:d7:dc:2a:
29:a8:3b:85:ec:4c:1e:d2:b8:f2:a0:69:3a:f2:97:c2:72:10:
24:80:98:e3:45:ab:fa:01:05:3b:e9:fc:ec:00:b1:46:29:b9:
8f:9e:fe:18:e4:93:70:30:5e:ab:e0:06:96:79:a2:8a:0b:79:
24:f1:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:30 2025 by rpki-client