Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: yptTrhhuQdFFRvhYSlq+sipS4oFAoPPolAF4hfF2EZg=
Subject key identifier: 29:DA:CC:F0:CE:4D:03:E0:A0:67:50:BE:2D:65:CC:D3:8C:B6:54:63
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 0199FBEC01526B0C288EB18329B82B0C31D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: 0ye9g1uyQ/jkuztFTRsYo3pxaVxViU2t20TrnrxbLTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:01:52:6b:0c:28:8e:b1:83:29:b8:2b:0c:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=29daccf0ce4d03e0a06750be2d65ccd38cb65463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:58:e5:e3:98:bd:e0:da:ef:b3:29:02:da:
bf:88:c1:e8:0a:3d:50:fb:c7:bf:da:35:3a:0e:46:
92:e5:8a:e6:4c:96:d5:83:93:43:bf:60:23:74:97:
a2:5d:93:52:79:29:f8:25:38:83:b1:b6:0f:ed:01:
46:44:ec:45:0e:7b:b2:d9:cc:ff:8a:98:7f:15:43:
df:72:40:3b:05:58:11:14:f4:a8:29:68:29:1c:9c:
f7:78:ca:18:6b:f3:37:6e:ae:02:f3:26:a6:96:35:
4a:4b:74:af:f7:20:dd:ae:f7:dd:ce:37:76:9c:0f:
d7:c9:58:d1:e7:04:4a:4f:4f:af:cd:f9:e8:43:26:
cd:f7:62:05:ce:a0:42:5e:5a:01:04:3c:b1:de:9e:
53:1c:25:56:97:5b:a2:c5:44:43:4c:c7:b4:5d:5e:
c5:81:95:12:05:7e:fb:96:18:94:4e:69:f4:06:b4:
31:ef:3b:29:0a:38:af:e6:3b:1a:7c:bf:ff:2d:b8:
62:09:c2:c5:6b:75:eb:d8:82:ca:5f:67:d1:45:3d:
02:a7:04:0b:31:1f:50:39:f0:c9:bf:96:1c:a8:d7:
9c:fc:77:9f:f5:c1:ad:8c:b5:24:82:e6:9b:08:7b:
53:6a:91:c8:84:fd:a5:1f:3b:c2:41:91:69:c1:dc:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:CC:F0:CE:4D:03:E0:A0:67:50:BE:2D:65:CC:D3:8C:B6:54:63
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d5:d6:af:bc:6e:de:d4:40:1a:68:f1:f4:72:cc:ab:8a:18:
23:5f:b8:ec:9b:b7:6b:29:3f:c7:c2:16:f3:b9:12:05:77:3d:
e4:da:fc:ac:f0:30:d8:16:eb:c0:55:aa:fe:8a:e9:19:82:f8:
4e:db:be:12:04:62:d7:f5:61:b6:ce:ef:19:25:14:eb:97:6f:
a3:24:93:bb:af:a0:aa:d4:95:8a:c7:20:cb:c9:dc:ab:a8:b8:
de:0c:9d:c8:9e:87:c3:d4:fd:bd:32:14:65:54:3b:e3:27:95:
bf:00:49:bf:e2:ac:97:ac:a6:4a:31:52:bd:8a:80:9a:a5:b2:
69:6a:f1:6c:cf:04:2a:0b:17:18:40:0f:8a:23:4e:da:fe:b6:
1f:7f:79:42:87:8a:f1:bc:b5:18:61:65:6f:b0:46:3d:db:81:
a0:f6:6b:7b:50:db:77:6b:f7:26:e5:da:d7:97:df:aa:01:74:
53:06:39:9f:c5:12:ac:3e:0d:5f:ff:14:fb:ba:7a:c8:df:13:
3a:2f:ea:48:f2:93:a8:c8:57:d5:ca:d0:7c:e1:c7:cb:2a:c6:
ee:36:c3:74:b7:0d:21:a9:3b:4f:ed:1d:47:22:62:53:4a:10:
da:47:ca:55:9a:4e:59:46:d5:ca:b6:b3:77:86:12:e5:ee:71:
53:43:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:26 2025 by rpki-client