
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
File: qexXvIRk_sLpobCY_840whqvnKY.mft (raw, json)
Hash identifier: v+UYhu7IzvHkgGk85oDvSCZ9qlem/brwmb6sASw6+Uc=
Subject key identifier: F3:80:75:F2:B1:80:2A:98:43:90:81:3D:FE:51:60:DD:21:05:76:6B
Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Certificate serial: 0199FBEB8A75FFE62127C0ABC7166A7FA6C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
Manifest number: 16EA
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: 1-CZEw8pGGdh9Gwph40yHsdoq1ag.roa (hash: C4R2UwFpzsqxbaKGdNIAuHg0NhGWKQyDYz9JMjta9y4=)
2: KkLe_YT5Uk0GdABl6GPnDWFGMNQ.roa (hash: aAELh0L1Pt+xus/0OHPywPbhavPNQTpi8tpROW9r5vw=)
3: bvkEOSa8BWLrsJXoOS6vPdUb-3o.roa (hash: avVdlCWpdgw57lZLBjVHwn93ctSM7J2JECKH0ZE6DSs=)
4: qexXvIRk_sLpobCY_840whqvnKY.crl (hash: QegvGaeWrFcWwEB5D9KyVv/3JlfmpFgX1Cq+KG+nAEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8a:75:ff:e6:21:27:c0:ab:c7:16:6a:7f:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=f38075f2b1802a984390813dfe5160dd2105766b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:94:53:c6:65:b6:82:0e:71:08:71:f8:e7:
7d:5e:1f:51:72:16:60:0b:d9:ec:be:a9:78:9a:59:
80:19:be:a1:6d:3c:ba:5a:7f:c0:4a:13:eb:8c:50:
61:93:5d:e9:8a:6c:b3:4e:32:26:5c:88:34:a9:fd:
23:a5:a4:90:9d:0a:80:35:ae:31:dd:4f:44:d4:63:
56:c0:cf:4e:e5:ac:52:0b:c8:b2:32:51:b2:c3:3b:
02:20:d3:bd:65:fe:dd:66:ca:f3:55:4f:5e:17:67:
5c:47:dc:8a:dd:ba:1e:9a:5e:55:c4:6b:bb:39:8e:
a3:da:66:df:b5:69:d5:4a:86:7c:97:85:a8:50:81:
6d:74:70:1a:87:2c:e5:a8:d0:ec:03:94:33:52:e8:
19:f8:b6:35:03:f9:bc:ca:c4:8e:6c:ef:ac:62:10:
f9:c5:0b:47:83:8e:a2:4c:36:0f:89:d8:b6:a7:20:
37:16:cf:01:bc:4e:d0:3a:23:7b:d1:62:9c:32:3c:
b9:c0:95:7c:36:50:31:b2:f3:be:c5:3b:73:da:60:
c1:74:11:39:a2:4c:95:0d:9b:94:b5:96:a5:bc:ee:
a7:be:c0:12:42:14:f1:b4:a1:73:13:ec:2d:1d:88:
48:9d:cb:d8:20:c5:f8:72:70:1f:a2:90:11:34:c6:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:75:F2:B1:80:2A:98:43:90:81:3D:FE:51:60:DD:21:05:76:6B
X509v3 Authority Key Identifier:
keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b7:59:60:65:32:02:c8:a2:9a:86:1d:80:27:c7:50:ee:d8:
30:7e:f9:75:dc:6b:57:e0:a8:4c:3f:06:bd:b1:e3:00:08:c0:
f6:04:6e:14:72:16:58:aa:4b:e5:0a:aa:22:98:fe:6b:03:02:
ee:c8:33:81:62:1d:6f:b3:37:86:24:bc:62:67:4b:8f:d2:ec:
75:02:2d:17:94:c5:70:48:46:b4:b7:cd:75:b6:82:00:1a:45:
60:29:d6:5f:52:fa:36:58:d4:d5:b3:3e:42:7f:37:a3:f4:93:
49:e7:4e:8a:82:e4:70:ff:74:5c:0b:df:18:44:27:69:f9:92:
7c:86:4f:80:00:81:f7:82:c4:33:08:d1:c7:37:67:e3:6f:27:
ce:87:bc:3d:6a:8a:f7:d9:6b:23:e6:fd:25:75:0a:bd:61:dd:
9f:38:e8:fc:2e:60:57:b1:d8:5e:12:c7:9f:df:bf:69:7e:92:
99:70:46:9e:1a:b9:dd:ef:6c:ad:33:44:a8:43:60:42:eb:72:
83:da:4c:c0:c3:95:01:b6:c6:95:10:5d:d2:9b:f2:23:8c:d8:
05:5c:09:72:2c:b3:54:94:ab:37:02:31:27:77:68:67:24:29:
bb:14:58:f0:28:52:58:a0:6e:8a:b4:d0:44:21:8a:a5:4e:44:
67:d3:43:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:21 2025 by rpki-client