Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: FuJy4citUrqIU3xl6OFuYgLM4rueKavOPJ8NuiWU9hc=
Subject key identifier: 4B:4B:48:E3:72:FF:66:B7:9F:97:29:8D:0B:B4:B4:BF:2B:4C:EB:4C
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 0199FDD8AAB1E5C1647F18F8599D6EA88005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:00:59 +0000
Manifest this update: Sun 19 Oct 2025 19:00:59 +0000
Manifest next update: Mon 20 Oct 2025 19:00:59 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: nb95fkmlX4fmuWgaVXQeQVygGvEziF52+l2OZw88G4o=)
2: wQqY6GzbDftcPzXJa8kVYZmeUUk.roa (hash: JDvmaY6VGQlVNt+ZPlklOrTqgJ6a+KsUqH/Pcr7SIcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:aa:b1:e5:c1:64:7f:18:f8:59:9d:6e:a8:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Oct 19 19:00:59 2025 GMT
Not After : Oct 20 19:00:59 2025 GMT
Subject: CN=4b4b48e372ff66b79f97298d0bb4b4bf2b4ceb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:62:8c:ec:af:61:6e:ab:81:24:8d:18:a5:
28:75:8b:f0:01:53:d2:ac:22:2f:64:49:c1:51:eb:
aa:60:91:ef:1b:ff:9a:d0:9b:24:5e:10:2c:c0:14:
5b:2b:6b:d9:27:38:63:e2:7a:1a:d2:ae:6d:e2:b7:
75:5e:c5:d9:d2:3c:1d:54:0b:16:91:0a:9b:99:dc:
7d:65:1b:ff:e2:ec:16:d8:32:0a:b1:2d:39:0d:03:
53:56:b9:f5:e6:17:e8:e8:1f:79:0e:35:da:05:1e:
cb:da:b1:99:a0:e1:aa:75:d0:16:40:21:c1:86:a3:
6d:3c:eb:5c:73:df:65:c8:03:a0:81:0a:ef:aa:d3:
a2:cd:af:9a:b2:d8:6d:43:2b:76:4b:6c:c0:48:ea:
e6:e7:d8:7e:9c:5b:4a:e0:d1:36:96:0b:6e:57:1e:
10:87:3d:39:72:2c:52:a0:1b:2d:a6:6f:9d:85:dd:
ed:3e:90:50:8d:48:47:dc:99:55:6b:62:6f:38:86:
b0:00:eb:1e:c2:34:ad:65:11:55:70:0b:55:1a:ab:
98:63:da:8a:5a:52:da:59:4b:92:ac:ec:bc:c2:6e:
5f:3f:b3:10:c2:ee:ee:4d:8b:5d:07:87:a1:94:67:
6f:90:9d:2e:1a:b9:16:43:07:c2:a0:b9:77:b7:23:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4B:48:E3:72:FF:66:B7:9F:97:29:8D:0B:B4:B4:BF:2B:4C:EB:4C
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:85:e0:ea:a3:cd:58:1b:51:7c:4d:c4:ed:97:4a:a5:b9:59:
17:56:e5:f8:a0:58:d9:17:5e:75:15:36:24:83:ee:a2:f9:15:
d4:31:40:28:6a:16:24:ed:d1:91:a5:de:eb:65:45:26:5f:d8:
d0:bc:b7:19:49:71:7a:c7:3f:a2:e8:86:4b:25:02:df:43:43:
21:e2:08:0c:cc:80:45:9c:f1:c2:aa:12:04:84:2e:dc:9f:32:
c5:17:15:c1:ec:7d:a1:13:b9:d4:48:7d:42:19:78:aa:c1:65:
de:77:6f:c7:31:51:d8:7b:e2:13:62:5a:27:db:fc:91:a0:72:
d7:09:16:9e:39:bf:1f:df:bf:fc:20:7d:e0:cc:d2:64:a8:8a:
78:fd:cc:94:5f:f6:03:cf:75:52:9e:c0:05:91:cd:89:51:bd:
97:3e:01:d5:b4:11:46:9b:b1:44:ae:73:25:f3:d2:2f:4a:b9:
96:31:d5:f1:5e:02:5f:f7:f2:f6:c0:e3:07:03:37:4a:23:6c:
ac:ef:cb:ea:15:74:d2:e8:cc:df:60:94:29:9a:79:0a:3b:24:
e4:8c:b9:0d:38:70:eb:8d:cd:f7:03:db:58:6c:94:36:54:37:
2a:04:e5:d9:df:bb:ed:38:36:85:5b:22:d9:1d:ee:16:34:23:
76:5d:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:26 2025 by rpki-client