Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
File: qEIWlUkV487vdNu7z-lHIAnYiQE.mft (raw, json)
Hash identifier: cDwHwaHn2l0umVBM3+yjxhZQkc+os1Fact1ihK3L6OQ=
Subject key identifier: DD:EC:F0:66:EE:FB:6C:EB:F0:4A:8F:FB:22:C3:25:45:A0:28:10:1A
Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901
Certificate serial: 0199FC2196B3D63315010529C38FC7F2E4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
Manifest number: 0527
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: qEIWlUkV487vdNu7z-lHIAnYiQE.crl (hash: WjILV8DlTRv8YHk7IMyX4tr0WXbRmJRrojwYVVCBMbg=)
2: uzEIjlJYDDkYjDRzAf2S2_nuADQ.roa (hash: jOMq+THXs6tHKVnh3usZCh/VkjmthWBocgL66TKhVMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:96:b3:d6:33:15:01:05:29:c3:8f:c7:f2:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=ddecf066eefb6cebf04a8ffb22c32545a028101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c2:61:29:b1:76:94:e4:b5:c1:ce:02:7f:c4:
3a:5e:ac:ce:7b:a0:4a:83:1c:0b:c2:9f:eb:2c:0d:
4c:cc:15:6b:9a:58:e1:61:3f:0c:b8:95:5f:a8:5f:
5e:5b:17:1f:de:8e:8d:64:4e:1e:28:f7:29:d6:78:
55:f9:6f:02:d7:01:b2:98:f6:f9:eb:1c:03:b8:ca:
5f:bd:06:d8:b0:bc:01:ff:ce:d6:3e:fa:2c:af:1b:
22:6d:89:c5:0a:ca:ce:f0:25:44:01:90:24:10:72:
ab:9d:5e:69:99:a4:b2:02:09:87:97:20:13:cd:89:
05:3e:eb:28:1a:ba:26:df:64:d6:76:6a:a3:d4:a8:
d1:ef:7d:2d:3d:f7:43:4d:ad:de:58:4b:22:27:af:
ba:57:c9:ed:a8:93:68:14:de:f5:0d:96:86:18:57:
f5:02:ba:8e:e9:88:7b:d7:66:ee:6f:0b:34:e0:aa:
62:e8:75:e8:5b:56:56:6e:8c:36:76:67:96:c3:f4:
f2:b9:97:a5:2d:5f:32:72:a0:63:d7:f5:14:22:d6:
2b:c9:e3:88:c5:a5:e3:78:f4:6e:a1:89:58:39:ae:
d7:18:64:f4:c8:20:40:62:99:a8:9c:05:c8:8e:1b:
21:bc:e2:5d:93:63:ff:33:af:79:ec:f8:12:af:db:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EC:F0:66:EE:FB:6C:EB:F0:4A:8F:FB:22:C3:25:45:A0:28:10:1A
X509v3 Authority Key Identifier:
keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c0:c2:54:f1:8e:0d:4e:52:7f:fb:13:37:2c:a4:98:59:e8:
47:13:f2:0d:df:ec:e2:48:f1:d7:26:e6:7b:62:0d:b9:16:37:
3c:89:66:93:7b:78:fa:7b:0f:c5:17:5f:fb:f6:d2:8b:8f:45:
34:61:3d:32:58:cb:66:99:71:c1:cd:32:33:e8:a0:9d:ac:11:
22:fe:10:eb:d1:8b:a4:94:e8:23:a9:f1:8c:73:1b:69:43:70:
83:f0:e2:32:ac:85:ea:7d:e1:69:be:9c:23:63:ca:23:cb:80:
1a:20:63:c7:aa:76:69:9a:85:6d:4a:1d:30:88:f9:3e:f8:31:
0b:e8:4b:7f:5f:0a:57:ca:3c:6c:9d:70:02:64:05:bb:26:a8:
7f:b1:3d:6b:cf:12:55:e9:cb:b4:0b:d4:70:e5:d9:1b:6d:77:
8e:0d:34:0f:48:c5:8d:b3:b8:a0:36:d6:4c:c7:86:e5:5a:df:
3d:89:3a:b1:76:28:cc:4b:e5:36:44:9d:8d:83:ae:a0:7a:06:
6d:94:3b:33:a5:bf:4f:e4:fc:4c:3e:bd:b4:3b:d6:73:29:a7:
f7:4a:63:8a:bf:db:e2:9a:2d:be:d6:7f:58:6a:7b:f7:24:20:
f1:f2:1e:43:81:67:11:c9:a9:62:22:61:44:e6:1a:c7:0c:a8:
79:e2:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:43 2025 by rpki-client