Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: UYVihFB2XsUrNoLZRnI/CA7cKdhGov321l7KzoWYN10=
Subject key identifier: 00:5B:A1:B1:97:79:CE:44:7D:E2:F8:49:68:23:6E:ED:CD:2C:04:8A
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 0199FBEB6316C3BA8B4FEE125CC4A0B286D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:11 +0000
Manifest this update: Sun 19 Oct 2025 10:02:11 +0000
Manifest next update: Mon 20 Oct 2025 10:02:11 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: TKsZUBky5m3nCNKtwtDVcvJSl5fjV8e41ZQIgcwcgD8=)
2: nqDbjTD7-4bF8APAmv3q39AmNtk.roa (hash: zWbRV6cXuufmhpJUA1tayT8JP8s9Ez0NcmTuvgMXFF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:63:16:c3:ba:8b:4f:ee:12:5c:c4:a0:b2:86:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Oct 19 10:02:11 2025 GMT
Not After : Oct 20 10:02:11 2025 GMT
Subject: CN=005ba1b19779ce447de2f84968236eedcd2c048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:b4:b7:5d:7c:2b:f2:9a:79:cb:f6:e0:60:
a3:df:77:87:35:3c:65:44:82:2c:d1:88:c1:29:a5:
ba:51:63:bd:eb:69:ea:ac:09:ea:d0:25:b1:05:8e:
0d:9c:5b:6b:91:eb:2c:66:97:56:8c:b0:88:51:24:
d6:a5:33:14:6a:4d:0f:0e:59:cc:f9:02:93:2b:3a:
a9:8c:0e:eb:1c:12:95:14:c3:7d:3e:47:04:75:30:
69:2e:54:10:f9:03:88:c8:e7:7f:a3:7a:f6:73:2b:
51:54:15:b4:a2:fd:e2:fe:0b:03:df:4e:4d:f2:95:
b7:5c:46:1f:33:7d:5d:91:49:39:27:6a:28:f3:32:
2d:85:0a:82:b0:ec:8c:01:91:7c:ff:80:b3:53:60:
37:c2:8b:65:9e:8e:ce:be:76:44:42:13:45:64:4d:
7b:b5:73:10:21:44:cd:f7:2d:68:ac:3e:55:d8:5a:
15:ed:22:ba:22:3b:f5:dc:00:3f:7c:4e:83:28:79:
a9:f5:48:a3:9e:24:53:3e:53:11:68:64:71:2e:24:
08:c6:f9:55:e1:f3:95:8b:37:2d:6e:e4:38:ba:ac:
7e:a9:b6:14:0c:76:74:c5:e4:39:41:87:1b:75:75:
8f:91:86:a0:61:92:1e:2a:95:0c:c5:13:f2:14:5b:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:A1:B1:97:79:CE:44:7D:E2:F8:49:68:23:6E:ED:CD:2C:04:8A
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:64:32:82:bb:de:8a:17:d7:1d:88:41:0a:52:65:cf:94:a3:
48:43:86:ca:5d:55:2e:0b:19:06:79:1c:1f:f5:0e:bb:da:71:
e2:f8:58:78:dd:15:92:67:48:e4:15:3b:f7:06:f6:f4:0d:dd:
62:71:9f:34:f4:8c:44:d5:3a:8a:8f:67:34:3f:9a:83:12:61:
78:e2:fa:86:25:11:cc:ae:d0:96:f9:8f:e6:aa:c9:de:a6:f5:
3c:a4:08:87:9a:c2:09:d3:1b:17:5e:aa:2a:d0:74:ef:29:31:
61:62:eb:8e:c9:1c:22:c8:ed:9c:c0:32:b0:05:6e:99:71:e6:
8e:03:10:70:b1:19:23:ea:0a:ea:12:35:85:96:ed:a7:12:13:
ef:c6:ce:e9:2f:07:27:45:e6:63:9f:b7:4d:c5:c2:bd:2c:29:
50:12:67:2f:81:78:80:9f:42:ee:41:92:b7:15:57:95:94:d3:
83:a2:65:60:2a:0f:84:29:06:3f:0d:37:84:be:ff:ea:31:05:
ec:40:b1:78:ba:3d:7c:0e:77:a8:fc:14:5d:02:90:6c:45:c1:
ec:4a:9c:f8:8d:f2:a3:3f:60:31:f1:bb:f6:98:42:5e:ea:68:
59:46:af:10:b6:fb:59:5f:e5:ff:e1:97:52:5e:f5:ce:47:59:
b3:01:b3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:53 2025 by rpki-client