Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: lp4sVS/COoy6zaY2FSt7BNd7tyJUUJO8tmYGJghgoqs=
Subject key identifier: F0:DA:1E:18:6E:40:4E:57:51:FD:FC:13:92:7B:82:8E:E7:68:A2:37
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 0199FD345755F30AFDDC088E0CA4CB6C6035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 14B5
Signing time: Sun 19 Oct 2025 16:01:29 +0000
Manifest this update: Sun 19 Oct 2025 16:01:29 +0000
Manifest next update: Mon 20 Oct 2025 16:01:29 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: UzhwougQCA/yHXHiFWNsDWBAAwhciZOIG7OCwr0HiOQ=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:57:55:f3:0a:fd:dc:08:8e:0c:a4:cb:6c:60:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Oct 19 16:01:29 2025 GMT
Not After : Oct 20 16:01:29 2025 GMT
Subject: CN=f0da1e186e404e5751fdfc13927b828ee768a237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:9b:2e:23:a6:83:57:8e:da:e6:2d:1d:09:
d8:99:57:e7:26:e9:ac:7c:25:b4:d9:18:8a:9e:d8:
e8:8e:3a:21:00:0f:3e:e6:9b:16:e7:88:d1:48:d0:
d8:34:5d:6d:8f:c3:dc:5d:7d:bd:6a:e1:bc:64:b7:
96:d9:b7:dc:c6:8f:fc:06:8a:8f:80:5a:29:75:e3:
3f:33:ee:17:03:4e:2d:c8:21:18:94:15:28:13:8d:
f0:af:14:4f:88:d7:47:6f:d7:6b:ae:2c:29:79:08:
8d:5d:2a:ee:5f:47:f5:07:de:48:59:9a:3d:94:57:
d0:0c:aa:ea:64:6f:fa:db:bc:ae:ea:12:31:d7:88:
ff:a7:3f:60:63:06:b6:66:81:8a:63:23:b2:5c:52:
be:b4:aa:f7:5b:0a:52:53:38:55:49:d3:70:df:a8:
87:2b:85:34:30:c4:2e:00:31:c7:7e:96:ec:c2:ca:
d1:b5:9b:ed:4e:a4:01:4c:0c:5e:39:b5:32:b3:5d:
c1:93:36:71:46:56:a1:4c:0f:34:52:5a:c3:ca:51:
ca:30:c8:70:6d:7a:6e:8f:48:f4:5d:73:ac:37:a7:
c9:15:fa:b5:7f:65:2b:a4:3b:3e:4a:d8:fb:59:5e:
1a:bd:96:d8:b6:3b:b8:b2:35:1d:37:58:96:e3:e1:
3f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DA:1E:18:6E:40:4E:57:51:FD:FC:13:92:7B:82:8E:E7:68:A2:37
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3d:dc:b2:85:3c:8e:58:e0:f9:ca:e1:63:8c:29:c6:2a:ca:
f9:a4:db:fb:bd:61:69:b2:6b:d0:18:39:36:9e:83:2d:94:36:
c0:06:92:cf:97:6d:d4:f1:4a:60:ca:76:49:0d:25:17:2e:3a:
0e:fb:88:8b:1f:2b:ef:10:3a:23:ad:fb:03:00:23:bc:28:1a:
e1:4e:d3:d1:e7:b8:1d:12:3c:7e:93:eb:d9:9d:80:4b:6f:3c:
a5:91:73:2f:9f:52:30:78:95:de:f1:31:16:69:68:16:5e:b8:
4d:79:4e:c6:39:c6:f0:76:a2:5b:d4:69:92:bc:10:2d:8e:bf:
77:25:a4:73:11:b4:bb:f1:7f:9f:e7:1c:f1:1c:1e:fd:84:ee:
a3:8e:b2:78:44:69:48:b4:27:0c:9d:50:46:87:a5:4b:f6:79:
c2:c4:ef:5b:fa:f1:47:6e:fd:fa:7a:9c:6d:ec:af:04:26:51:
40:8b:98:d2:7c:3f:94:9f:91:1c:cb:51:2b:78:0e:e4:dc:58:
1a:e2:5b:4e:f1:95:f6:1c:e9:e3:90:ad:ff:56:a6:17:5e:15:
15:ab:f6:90:88:f2:e9:06:59:f7:cd:31:f3:9f:d2:b7:e0:bb:
6a:1f:8f:ee:8b:f1:97:fe:2a:d2:71:cf:88:d2:78:d0:f7:78:
ba:c5:94:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:02 2025 by rpki-client