Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: hzJsklwhK58WjVHBgLZ71gS3OGensNHECj8YoBiFAgA=
Subject key identifier: 40:25:34:57:12:42:B7:F2:A4:21:9E:0B:C8:C4:A5:6B:55:D4:A6:BA
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 0199FE0FE849081D217D29B199B1332336D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: 016E
Signing time: Sun 19 Oct 2025 20:01:19 +0000
Manifest this update: Sun 19 Oct 2025 20:01:19 +0000
Manifest next update: Mon 20 Oct 2025 20:01:19 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: m1AZPurODYGYg7d6v0tORBiThBrqA7VIMHWcFTAFRBE=)
2: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (hash: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e8:49:08:1d:21:7d:29:b1:99:b1:33:23:36:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Oct 19 20:01:19 2025 GMT
Not After : Oct 20 20:01:19 2025 GMT
Subject: CN=402534571242b7f2a4219e0bc8c4a56b55d4a6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:29:d3:60:f9:4e:61:4a:62:72:d6:98:28:
78:9a:8b:11:a2:de:3b:cf:78:b4:56:20:2f:4a:4d:
b5:32:29:6c:6e:1e:af:76:bd:1b:cf:be:74:b7:e7:
0c:0c:07:b5:a9:6f:56:2f:eb:6e:29:b4:f1:46:68:
b8:e6:21:70:d0:09:b7:ac:ca:78:6f:9f:b2:c5:01:
7f:41:59:88:b4:85:87:40:2f:9e:49:2b:58:b8:fe:
4c:ef:9d:a7:97:09:17:c7:89:87:55:8f:96:1c:15:
52:bb:5e:a6:9f:92:6c:a5:3e:a6:c1:ac:41:25:e5:
bf:cf:99:f8:60:c3:8e:e0:6b:95:13:77:38:9e:95:
c6:95:45:b5:9a:ea:df:06:61:5a:59:61:2f:b1:91:
4e:19:ab:13:1f:25:90:0e:76:5e:44:e4:95:48:f2:
f7:be:fa:2e:b1:1f:cb:04:c2:5a:4f:86:15:47:0a:
a7:54:98:ed:a1:2f:48:4e:a3:69:b9:c1:a1:26:25:
8e:19:33:a9:32:7f:98:d4:43:d3:26:69:aa:fb:5e:
7f:89:35:03:e2:68:21:a2:d4:84:c4:46:34:f8:ef:
ae:ca:73:f0:81:0b:0c:80:19:86:1a:d3:b7:c6:4e:
99:3a:cf:98:e3:78:09:40:18:d0:84:da:51:a3:a7:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:25:34:57:12:42:B7:F2:A4:21:9E:0B:C8:C4:A5:6B:55:D4:A6:BA
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5a:57:c0:0f:e2:e3:ec:de:cc:fc:20:0c:bc:48:27:65:36:
8e:12:24:84:7a:6f:aa:0c:10:96:88:f4:93:d9:7b:2a:44:fb:
ee:1f:4e:ea:88:47:6c:ce:85:d4:13:52:29:eb:bb:d1:2b:57:
a2:64:b7:76:4e:cb:83:24:ea:f8:d7:65:2f:12:6c:8e:1e:56:
36:02:24:82:ab:ad:fb:92:9b:56:c0:0d:f4:08:8a:58:7e:6b:
28:fb:ff:e6:f2:71:3f:f0:d9:3b:6a:15:70:ed:fd:b1:16:12:
0c:e7:9d:0b:ba:0c:ff:85:41:e9:bc:08:79:58:af:72:46:e6:
db:cb:0c:21:93:bd:f3:37:bc:fb:c3:35:20:7d:6e:3d:20:d1:
1e:e5:dd:68:9c:de:e3:af:cd:b0:4b:ea:09:71:29:1e:f1:80:
37:e1:14:11:8a:40:11:7a:24:6c:f8:17:ad:4f:02:42:68:2d:
b8:21:12:e9:3e:c4:08:d0:a8:c7:f6:dd:51:8f:0b:97:ad:44:
de:e3:14:92:79:55:d9:cd:d6:42:a2:53:54:9d:de:c5:6b:06:
34:35:a1:40:d7:fa:51:fc:e7:43:06:b4:81:e9:96:99:88:52:
02:94:2d:65:eb:c8:22:7f:33:bc:8f:5d:e6:70:b0:8e:c5:41:
73:3e:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:53 2025 by rpki-client