Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: fIGgCBUSlijfCVagmgfTARaX3itQ31G+GcKG9dMT9ZY=
Subject key identifier: 4B:85:EE:5C:80:B3:CB:22:D0:2D:D6:B8:C4:B2:4F:09:A1:A9:C3:5C
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 0199FCC60941CF5ACDAF09B6BD2E98A403EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: vERao3M2rdMKQ/xBL8TqYQJ4AcwJ4dbmtfPQp0JN7Io=)
2: cjjqef6iWCl_1yFiNx4mwIqngEo.roa (hash: d/pj6gBhpaRW2JX3FWdfa1N0hGZit4d6dbXlFGA0bW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:09:41:cf:5a:cd:af:09:b6:bd:2e:98:a4:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=4b85ee5c80b3cb22d02dd6b8c4b24f09a1a9c35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:45:30:e1:18:bb:84:44:7d:8d:f7:46:7d:
7b:f3:c0:a8:21:80:0e:fc:f3:f3:cf:93:06:6b:fc:
57:55:08:27:f0:f6:b7:06:42:a6:1f:70:42:67:46:
ed:63:51:11:00:0b:bd:48:93:42:d2:86:5e:28:20:
0c:8a:33:10:e9:26:5f:6b:06:33:b9:b5:af:bd:ab:
d4:e7:19:99:2b:de:86:18:5b:13:23:da:68:94:d5:
b2:f0:d6:63:f3:65:17:7c:c5:4f:91:3e:97:6d:21:
6f:b6:d2:1a:d2:d3:a5:c5:50:bf:61:b0:a7:d1:c4:
df:64:c3:b8:21:17:ab:81:a3:8f:64:ed:de:0e:81:
a7:91:34:64:12:ee:b9:b4:02:02:9e:40:68:49:26:
99:90:67:dc:47:73:ae:5f:0f:d2:81:2e:e1:5b:51:
36:2c:60:7d:6d:eb:92:f0:6b:b4:55:70:15:7b:f1:
c2:31:99:28:b2:44:3f:d1:f2:41:79:b7:14:a6:10:
d3:c2:11:fd:63:9b:ca:70:f6:42:45:50:ab:16:28:
ee:52:7f:47:f0:c7:9d:a4:3a:6a:5d:c0:af:d1:ef:
64:2c:c2:08:25:12:79:7f:22:b4:30:0f:1f:1c:bf:
c5:6d:89:4b:52:b8:84:a1:e7:cc:c2:52:b7:7f:10:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:EE:5C:80:B3:CB:22:D0:2D:D6:B8:C4:B2:4F:09:A1:A9:C3:5C
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d4:6e:7f:69:2a:1b:e3:1c:b7:b6:cb:9c:4d:35:42:6a:ff:
2c:72:01:9b:da:bf:72:2f:1f:4c:69:f8:ad:68:d0:6f:e9:88:
6c:54:47:1d:10:57:bf:0f:dd:6c:47:49:f2:de:24:7d:5e:d3:
55:b0:17:03:89:7a:dd:98:ac:3e:12:c7:e1:82:23:c0:7c:f3:
3f:66:a1:6b:e9:f4:46:53:aa:58:94:55:97:9b:4e:60:b9:e9:
3e:29:39:c1:40:d2:c5:59:9c:5d:a8:a7:85:6f:90:74:fc:0f:
af:df:59:5d:0c:38:52:d3:1e:f6:18:47:6a:36:11:9b:29:3f:
c0:d3:ef:14:3d:ef:d4:ac:ca:0f:b8:a7:0c:a6:3a:c7:b0:12:
88:e2:c3:12:73:e6:8d:d3:3e:00:6d:0b:3f:38:87:03:15:2a:
c7:40:78:61:23:f8:51:77:f3:61:2f:00:6a:41:1a:07:26:d3:
ab:53:52:6b:10:e4:55:83:74:08:ff:22:c8:0d:f8:9a:eb:fc:
e7:90:27:0d:71:af:1f:dd:cd:30:1e:e6:74:ff:b7:0f:14:a1:
eb:b6:bf:3a:33:05:c7:99:23:6d:d5:c6:aa:d6:58:43:5b:c6:
b3:a5:0d:af:a6:e3:a3:08:8e:a2:41:f2:08:26:9f:6c:c2:58:
ee:6f:d1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:55 2025 by rpki-client