Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: hPXz5zHqXuhvKEqoSf7u86HXEKxJpo4ZplYj4/mrr2M=
Subject key identifier: D1:2C:CD:20:CF:BD:C9:43:F2:4A:A8:35:78:47:4D:DF:94:75:1B:D1
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 0199FC58992756DEDFEF17B6962E77A21760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 13C9
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 7347cFurkIFVNRTShqXtdTwOLOA.roa (hash: 81GL5pa945jQA5j8/X64fsQyRv+u1Eyr3yERMPF2bKE=)
2: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: saIE6/yADza+cFtKcI1+RWQezGgXbc8paG9d+0JlrF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:99:27:56:de:df:ef:17:b6:96:2e:77:a2:17:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=d12ccd20cfbdc943f24aa83578474ddf94751bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:f4:c4:03:87:60:8d:23:f9:82:fb:41:43:
26:00:1d:d0:4e:5e:a0:ad:22:c6:e5:14:6e:26:5c:
51:08:2b:9c:84:a3:02:46:29:f8:77:22:47:93:0e:
ca:d5:2d:c6:f9:fc:ea:cf:f2:14:a3:2b:95:10:e2:
f3:0f:22:65:a6:6e:e4:be:36:06:e9:50:ee:41:e3:
13:75:7b:50:e1:40:71:1a:da:6e:f4:5f:4a:e5:8a:
d1:39:26:0d:f9:94:ba:a0:31:16:49:e9:4e:01:55:
1f:ae:20:7e:bf:57:e4:be:8d:03:67:2d:6d:6c:be:
49:12:f7:bd:13:54:c2:0f:a4:c0:69:7d:74:59:b8:
14:17:b0:49:47:5d:28:37:e9:dd:db:7a:37:17:71:
2f:77:a3:4b:9d:02:35:82:c4:22:42:b9:39:c2:4d:
56:db:2a:06:a2:72:54:36:e8:19:12:e3:33:ba:ad:
01:54:b0:2d:72:f6:46:19:1c:da:e9:52:dc:fe:f6:
4c:41:54:69:14:57:b2:51:26:17:4a:49:24:ac:10:
3d:28:95:bf:5e:e9:73:82:92:37:ae:89:29:90:63:
f1:8d:c4:9c:be:4c:3c:b8:b2:80:fe:6c:64:95:47:
37:7c:a6:5c:1c:45:b7:9f:cb:cd:91:e3:ac:57:7e:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2C:CD:20:CF:BD:C9:43:F2:4A:A8:35:78:47:4D:DF:94:75:1B:D1
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:20:15:a1:48:03:3b:20:ae:c4:6c:8b:6a:11:e3:e2:e4:a7:
eb:c4:0d:37:bb:e9:6e:4a:df:79:5b:3a:44:f9:4b:62:38:75:
8c:86:a9:43:ca:41:23:97:cf:5d:32:51:7f:4a:14:7d:38:00:
20:cf:58:91:75:df:37:d4:8a:48:57:92:8a:87:c8:41:2d:0d:
3d:3d:9c:f1:c7:e2:8e:c8:94:a8:70:c1:89:52:0d:c5:99:2a:
fa:82:2c:f0:f4:26:e3:f2:b6:57:67:c3:db:f0:ce:6f:f1:c4:
38:9d:fe:31:36:32:ea:1a:00:d9:e4:ea:ab:be:df:87:18:d7:
92:f5:03:d7:33:d8:9e:5c:6b:84:cb:64:7e:30:c5:1b:f9:77:
b6:6e:05:44:d1:41:cd:b6:4c:29:71:67:d4:04:5d:b4:77:70:
77:4d:c7:bf:e5:5e:58:30:16:e6:c7:cd:d9:cb:63:34:22:04:
d0:67:a4:01:37:a8:94:c2:91:2e:48:bb:50:bf:c0:df:31:9e:
ff:1e:01:9d:4e:23:6c:47:0e:ad:6c:75:b8:4b:ff:51:1d:6f:
42:09:a2:a3:b8:0b:9b:36:c5:52:5d:87:68:90:76:0f:ec:29:
83:90:bb:d8:13:26:4c:2f:dd:5e:5b:fd:79:36:f0:1f:b1:54:
6f:91:d0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:30 2025 by rpki-client