Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: xq54vCYn8oAIZeN2pTrCqA4Aw55lSlv508+KwvgBbNg=
Subject key identifier: D1:75:90:5C:8F:62:B6:C4:FF:BE:36:F4:28:85:C0:02:58:E4:D4:44
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 0199FF597E7DB5B03814219DBF3B2C1E8666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 128E
Signing time: Mon 20 Oct 2025 02:01:19 +0000
Manifest this update: Mon 20 Oct 2025 02:01:19 +0000
Manifest next update: Tue 21 Oct 2025 02:01:19 +0000
Files and hashes: 1: 4LiTUjwXcNYVafdM65pwT0SBtHo.roa (hash: aRRcAkpdwNbRnG0Mp4QvYoZmqIPlW1QZ3Z9Gc0YUkqo=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: QeTTPiWO5hVBPdB1290l8f7+kQYN89ojCU8hbG/U/xk=)
3: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (hash: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:7e:7d:b5:b0:38:14:21:9d:bf:3b:2c:1e:86:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Oct 20 02:01:19 2025 GMT
Not After : Oct 21 02:01:19 2025 GMT
Subject: CN=d175905c8f62b6c4ffbe36f42885c00258e4d444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:5b:0a:20:13:a1:d9:b1:57:59:d8:c2:e0:
d4:97:3b:e0:00:53:14:af:20:79:f2:dc:0d:f5:d8:
c4:d4:26:c9:54:b7:63:32:d3:7e:0a:34:32:54:24:
ce:d1:c3:ca:02:69:6c:4a:c8:99:a0:b0:ce:80:86:
dd:8c:48:e3:34:f1:4a:69:a4:05:24:4a:fb:e0:2a:
a4:bf:ad:23:f6:08:df:b6:da:e0:96:bc:2d:f4:18:
95:9b:d2:39:6c:0e:01:df:7d:7e:d5:5d:b8:f2:04:
f6:51:10:aa:c9:68:12:de:9c:9b:37:55:61:22:83:
c2:ab:41:73:86:c8:c0:d2:ca:45:db:79:db:60:ab:
b3:4d:e0:22:17:cd:82:5f:7c:7f:33:0e:66:e7:c8:
2f:fe:39:21:6c:50:d6:1e:72:d1:1e:fe:73:68:2b:
2f:3b:c6:c4:c2:ea:4a:25:93:4d:d6:05:4d:d0:6e:
9b:f4:08:fb:a0:e6:51:5a:15:19:82:e9:cd:f3:d1:
1f:bc:a0:89:12:e1:8f:a5:2b:e2:31:ee:f6:5a:b1:
a7:f8:f2:13:9f:cc:56:b6:1b:c7:f7:74:ed:9c:4f:
6f:63:1a:4a:c2:db:27:f2:2a:1a:e7:d4:91:cc:8b:
5e:a0:fa:cc:22:ab:02:b1:21:9b:76:ce:e2:b4:d7:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:75:90:5C:8F:62:B6:C4:FF:BE:36:F4:28:85:C0:02:58:E4:D4:44
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0f:79:72:be:3e:f7:5e:24:94:e1:8d:81:d5:5d:f9:5c:78:
38:82:e8:0f:a4:f0:bd:34:0b:fe:23:5e:a1:32:88:02:d5:98:
69:8c:d1:b5:28:02:68:4a:65:d5:94:79:9f:2d:53:44:bc:0c:
84:59:28:aa:1e:9a:fb:36:2b:1c:24:c8:a6:4d:9b:86:a4:d0:
f9:d7:13:ec:be:ab:fa:19:11:fa:44:48:97:eb:4d:ff:74:10:
da:2d:c4:8f:bd:d2:75:42:46:c6:ed:11:71:3b:ad:b7:93:5c:
41:75:ea:1d:68:96:73:59:1b:f8:65:12:c1:ee:cc:05:7f:40:
0f:4e:17:11:3c:a0:00:fe:f7:48:a2:43:fe:51:8c:2b:db:a5:
3d:c5:41:66:c6:ff:14:ae:66:8e:8f:30:db:dc:e0:bf:a3:f4:
78:79:b9:ca:46:ec:e3:62:7c:72:02:3a:be:be:94:de:cc:63:
d0:0f:6e:c9:48:93:81:73:8c:86:7e:ce:66:58:8b:e0:cf:fa:
09:3c:8f:22:e7:61:74:d2:27:37:0b:f0:e1:2f:2b:cc:51:ae:
f8:8a:37:97:82:0c:87:cd:df:f3:d4:4b:db:79:76:e3:50:e9:
38:f2:da:06:77:ed:8a:1c:b1:cf:58:20:4d:38:79:08:e8:d7:
58:ee:cb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:03:08 2025 by rpki-client