Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: uz6XX2qTmv6o/mjUhFjJValRCOmoFszXWAmtr++CzSE=
Subject key identifier: C5:0C:D1:6B:EA:D5:C4:E6:61:E4:2B:89:AD:54:50:60:72:24:FA:46
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 0199FBEBD576184C81B27C5D659371EADAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: OdGk58BhUhMZ67ys9l+nTpTEE+TW6+c8HLehx0iWJfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d5:76:18:4c:81:b2:7c:5d:65:93:71:ea:da:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=c50cd16bead5c4e661e42b89ad5450607224fa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:b9:bc:89:08:58:64:2f:59:9c:50:97:9b:
94:07:92:77:89:6e:9e:f8:1d:ca:06:41:98:07:5a:
aa:bf:38:2c:ce:11:b6:13:51:d4:31:53:c6:bf:5a:
06:a2:16:8e:61:b6:1a:ec:a4:c9:dc:95:1d:9d:5d:
0f:56:d1:8b:88:c4:57:0b:ee:df:75:e6:96:a4:d3:
83:f6:67:8e:47:47:e5:94:c6:1e:a6:bb:53:d5:ce:
27:b3:22:ea:1a:dd:c6:4b:4e:d8:1f:83:a6:eb:0b:
2a:33:5a:ae:2b:f0:e9:38:89:2b:ab:c3:9b:57:ac:
95:e2:87:a6:86:f6:00:8c:06:f3:e1:fb:d0:41:52:
c5:37:a1:7e:b4:17:bc:b4:81:37:d9:49:8a:d5:6d:
2b:5e:62:35:82:d5:68:c8:ac:1f:13:1b:4c:74:8f:
13:8f:d0:fa:4e:73:4c:43:2e:99:89:e7:9c:53:55:
98:24:07:9b:ce:b7:a3:f5:7c:dc:27:69:f8:d6:c5:
ab:19:f8:95:8c:65:b8:16:e2:06:b4:b5:3d:1f:1a:
59:81:31:50:54:28:1d:92:2e:90:14:12:dd:93:a1:
65:89:5a:93:30:c5:2b:f3:9c:93:77:2e:be:4f:03:
4c:f6:31:f3:4f:e4:50:b5:13:ef:f7:e4:38:c9:49:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:D1:6B:EA:D5:C4:E6:61:E4:2B:89:AD:54:50:60:72:24:FA:46
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f0:b0:6e:f5:03:83:e1:77:ba:0b:ed:5b:01:8c:34:53:16:
71:fd:51:a1:9b:7a:b7:d8:13:9d:88:c2:ab:9b:4a:32:7a:03:
32:d1:13:e4:34:65:f7:e7:d6:52:97:be:00:7f:e0:c8:45:e4:
da:65:1c:a3:a0:44:b8:55:50:07:8e:02:46:8f:c8:5a:06:ed:
46:42:71:06:78:74:c7:6f:69:d8:e6:4e:7a:74:40:d1:15:c1:
6a:c5:59:55:72:eb:01:8e:8d:9a:71:ce:46:b2:94:06:94:87:
3e:2c:d3:f3:72:5f:ff:16:fe:db:b4:33:e0:89:0d:62:0c:d6:
03:4d:89:9f:da:dd:f4:52:d1:d2:36:84:60:50:fd:77:38:fc:
d8:d0:90:aa:e0:8d:8a:59:3b:44:88:4c:15:fa:b9:50:7c:0e:
7a:59:d5:d0:8b:63:19:4e:c7:38:f0:77:57:72:58:d4:f2:d3:
1d:50:9a:40:20:6a:63:99:ef:58:c7:a8:00:87:09:e4:5c:41:
38:af:32:1c:b5:f3:25:fe:ad:4e:63:8a:f9:c5:ac:1b:bd:56:
aa:1a:9d:45:8f:51:cd:37:0a:50:90:e2:68:e9:e5:c3:2b:90:
fa:6a:19:e6:c5:e0:a4:13:f6:4c:79:e1:14:b8:93:0a:df:d0:
99:46:d2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:09 2025 by rpki-client