Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: ItACs6pvjLuMSgAbCKyu2I8mvtl0e5LAlfFTSgKmu+g=
Subject key identifier: 06:09:9C:C0:20:DF:14:19:27:18:46:D4:E0:C0:F4:89:14:3F:51:06
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 0199FBEBF8805034B345A9E0A08751FEAC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 044D
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: zze3cKHz+sJObXs1k/NX1AdyHWH/bJqcEtnzo/kdgA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f8:80:50:34:b3:45:a9:e0:a0:87:51:fe:ac:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=06099cc020df1419271846d4e0c0f489143f5106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:23:37:30:1a:52:44:9a:f6:27:fa:79:fc:
39:b2:75:72:52:aa:98:16:dc:b1:09:72:43:b8:85:
ef:b3:22:68:2c:60:cb:25:fd:48:e0:82:94:62:33:
3e:16:a6:a9:2b:10:00:e8:d6:fa:32:34:d4:e1:c7:
a9:dc:0b:f8:9d:72:ee:ec:7d:80:1f:1f:94:c8:f6:
44:cc:fe:d3:c0:6d:21:fa:67:59:12:ac:4e:74:b8:
1d:ce:d0:37:92:17:47:ed:e4:b0:fa:04:b3:eb:fb:
7d:6e:05:79:39:c2:c5:e7:c2:63:e1:e0:c2:0e:99:
a6:6e:87:58:bc:fe:ca:a9:86:19:26:4c:5a:67:80:
82:0c:75:38:aa:06:18:35:e7:0e:b3:49:1e:13:f4:
8f:0e:d5:2c:a9:1c:10:c3:bb:a0:a9:99:bd:64:87:
8a:07:10:60:a2:ee:a5:bc:e5:96:46:99:0b:9b:13:
5c:00:22:59:f3:bc:77:04:d9:f6:ae:a7:68:23:d2:
a3:bd:c6:ff:d5:40:ea:24:58:eb:ce:73:87:0b:ff:
7e:79:00:cb:79:e0:dc:a6:98:e8:a4:54:07:8a:f7:
7a:cb:7d:9a:68:e6:00:79:d5:de:82:bf:4b:47:74:
ae:e0:6c:26:0e:1e:5b:79:0c:04:4f:9c:42:ee:27:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:9C:C0:20:DF:14:19:27:18:46:D4:E0:C0:F4:89:14:3F:51:06
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b5:17:50:2f:bc:ae:ed:1d:88:b1:41:43:7c:22:bf:13:54:
95:4e:33:25:44:42:12:56:de:d0:93:71:6e:e6:fe:0c:3e:82:
84:98:e7:d1:3e:df:68:ce:b1:23:f9:5c:a9:7f:2f:7f:9c:d8:
a2:7c:00:f5:5c:af:33:dd:a3:65:b6:4e:69:df:d1:86:80:c0:
df:01:e6:92:71:06:9f:d1:da:e0:76:92:1e:17:53:61:7d:3a:
7e:1d:6c:a0:91:67:75:af:2c:69:2e:bd:79:c1:14:f6:21:0e:
b6:0a:13:2a:35:89:53:05:8a:d7:e6:71:9f:91:39:9e:20:26:
b1:09:fd:c1:52:65:cd:6a:af:e0:9c:41:70:c1:f0:fe:b7:c7:
cd:9e:ba:c6:05:c8:be:32:b7:6e:82:f9:1b:76:52:96:0c:b0:
a7:ea:12:3c:b5:96:ad:e3:18:98:0d:8f:6e:fd:50:d8:78:00:
e1:41:31:d8:73:7f:36:bf:a1:a3:0a:45:43:98:5f:72:1f:15:
c4:22:14:5a:4d:d9:8d:70:ac:d2:f3:17:b7:ef:8b:d9:3f:08:
c4:a1:c9:74:a1:2e:1b:ba:37:6a:7b:27:2d:f0:fe:83:4e:0e:
bf:d2:e3:b9:a1:1c:1c:0f:73:f3:dc:5b:2e:9e:c9:d3:ee:79:
32:fa:d5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:22 2025 by rpki-client