Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
File: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft (raw, json)
Hash identifier: 40krFRLYwNoGTioJszzLyV9Z9lX6+Qnc9Qfuqgt+Gho=
Subject key identifier: A6:2D:68:7B:F5:E1:CC:39:A0:3D:01:93:B8:8D:47:A7:20:3F:87:C4
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 0199FC58C7220DCC10E7A5ACC052B703296A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl (hash: wJ/ibr76YA4CJekPDCD6d8WuJpIfG3mh1vp5OPGNQvg=)
2: T5gr7GnqjE8y7ukPZ3Upa6e15rU.roa (hash: IygW4LAvMnA+EIcJ9N6BryWosUgw51JGwDaJIPLdjAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c7:22:0d:cc:10:e7:a5:ac:c0:52:b7:03:29:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=a62d687bf5e1cc39a03d0193b88d47a7203f87c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:d4:0d:0a:cb:90:56:3a:51:31:9c:e9:f1:
b7:04:87:6a:7f:b8:37:f2:c2:87:9f:42:0c:67:66:
77:af:ed:2a:ff:98:a6:d5:d7:d0:2f:cc:d0:0c:19:
ec:99:2a:94:ba:39:c9:4a:1e:8d:54:ea:71:80:c4:
c0:5b:98:f1:d9:56:c3:1d:a4:d1:2b:a6:72:c2:f9:
0c:cf:d8:09:dd:b7:34:6e:03:8f:58:b6:08:c2:4e:
a1:33:58:df:97:59:eb:5b:f5:77:a3:fc:2e:58:99:
45:e4:58:96:47:c7:97:74:9d:69:ba:8a:62:87:58:
d3:cc:f2:fd:0d:61:c5:43:e9:fd:0a:34:11:c9:b9:
81:e9:03:43:e2:62:55:23:a1:eb:bf:ce:91:e3:ba:
f7:76:7c:cc:64:53:2f:4a:3b:2a:b4:39:d2:7a:18:
31:8b:f1:d1:46:70:f0:3f:1d:d2:27:5a:7a:d8:7a:
a0:2a:aa:66:03:ae:8c:46:77:75:bc:0d:71:37:3b:
cf:15:84:e9:b2:e1:ba:63:af:1c:09:4e:19:58:04:
6c:73:8c:38:7a:cf:9b:a5:e1:4d:21:f4:65:63:6f:
a7:e9:33:b6:34:65:25:66:0c:41:f2:96:78:14:9d:
82:9f:28:bc:20:fc:78:f2:f5:fe:81:4c:c7:6f:bc:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2D:68:7B:F5:E1:CC:39:A0:3D:01:93:B8:8D:47:A7:20:3F:87:C4
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:dc:01:14:d9:bb:49:62:7e:71:0b:d2:af:dc:fb:7c:37:
21:64:cf:d1:67:b1:25:04:ca:3d:45:be:e7:84:9f:f9:eb:8e:
3d:cf:e0:9a:10:13:e6:47:e0:9a:60:56:c7:20:4c:78:5b:1b:
53:69:1f:6a:aa:89:d6:62:47:1b:dc:9f:56:a2:c2:e7:70:56:
f2:60:be:64:14:62:73:f2:c2:b0:f8:ac:59:e7:71:a4:20:25:
95:ec:73:6d:10:92:98:62:04:23:76:de:9b:44:e8:2b:5c:aa:
9b:29:f0:7e:eb:93:91:19:99:8c:80:15:1c:6a:f0:0f:89:be:
c8:06:3f:3b:9d:42:00:a6:de:5c:1c:ea:de:95:7a:75:e3:84:
51:1a:ae:ad:a7:df:67:75:dc:43:73:d0:80:f3:72:37:c5:08:
70:29:2d:69:16:0c:c0:8a:f4:09:6e:4e:fe:90:b2:80:e7:4c:
8c:de:11:cd:52:af:82:d5:cd:6e:29:42:97:ae:99:35:9d:e3:
f2:39:98:ba:de:9b:47:c3:9d:b1:e7:04:c9:b0:e9:72:59:1c:
3c:22:0e:b6:68:22:2f:8b:a0:5f:25:91:97:7f:51:cc:04:67:
cb:c5:30:cd:33:f7:53:8e:32:8a:b5:e9:68:0e:29:fe:af:f9:
b7:d7:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:43 2025 by rpki-client