Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
File: QD8Iu6_6QWGEMgOop1erbpVGsM4.mft (raw, json)
Hash identifier: x6xjlfP4i7qAEqeH3Lihrokb44YJY1KY/LOYHt11U8M=
Subject key identifier: 54:2D:A9:4C:2A:F3:42:6B:93:3D:A8:79:F3:03:86:21:5C:29:24:A8
Authority key identifier: 40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
Certificate issuer: /CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Certificate serial: 0199FD3468B7387EFEBEAE06E96CE678A0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
Manifest number: 05F6
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: 4PjPPpWKgAtzAAOasr7gIk0JbPI.roa (hash: yiKX1aQ5yWrVl7HwLmjfK1M9G+FpWFiXbyU5qVlLbDY=)
2: QD8Iu6_6QWGEMgOop1erbpVGsM4.crl (hash: DCVcyqwhhLikZ3JxmtsHW2EE2B8f9RoNBhS0hDNXj10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:68:b7:38:7e:fe:be:ae:06:e9:6c:e6:78:a0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=542da94c2af3426b933da879f30386215c2924a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:d0:58:06:47:27:97:ec:a4:71:6d:81:47:
d7:60:3f:56:ed:fd:00:a1:20:31:ea:a5:81:14:98:
59:6f:e5:96:ab:1a:2e:f5:1d:ac:8a:33:b0:a1:d9:
fc:d4:97:a5:d3:4e:e4:b9:a8:d9:20:a2:65:e8:c3:
93:77:1f:0f:36:e2:83:f1:4a:52:25:f9:5f:a2:68:
56:97:e3:0e:8a:fc:cf:32:f1:82:45:69:b7:21:53:
fd:16:f3:17:10:f5:94:89:44:c2:7f:97:30:12:24:
5f:af:85:1e:91:f2:48:d7:5f:57:ff:e0:ab:1a:44:
54:2c:2a:c9:58:b0:9c:ac:18:57:7d:80:cc:b9:93:
d7:cb:cb:ae:e0:75:e6:0b:46:7a:5b:6e:8e:f7:d3:
2b:27:eb:ed:13:e4:05:49:69:79:f7:db:13:89:31:
bd:ab:0c:83:2f:a9:1e:76:e1:21:51:3a:98:d1:ee:
9f:0d:e0:81:a8:79:2c:14:46:2a:0c:4d:d0:06:e7:
1b:8d:04:89:1b:1e:ad:5c:18:7a:4c:b4:60:39:a7:
0c:3e:9e:66:2f:41:00:d5:c6:cd:a9:5b:07:ed:b2:
fc:76:98:44:a5:3a:d2:fa:6a:c4:9b:f1:d9:15:f8:
b7:66:94:7c:4a:2c:92:fb:7a:2a:74:bd:c6:08:fa:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2D:A9:4C:2A:F3:42:6B:93:3D:A8:79:F3:03:86:21:5C:29:24:A8
X509v3 Authority Key Identifier:
keyid:40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:46:f2:7d:02:a3:7d:f8:43:e3:50:ce:77:3c:93:c8:77:
00:26:11:41:ac:d1:28:7c:f5:ae:32:4a:c2:06:ed:75:49:a5:
20:ef:9e:c5:66:91:f9:6b:be:f4:0b:06:55:17:0d:ff:da:38:
6f:b0:92:46:3a:0d:62:21:11:d0:be:a6:87:7a:40:45:75:dc:
8c:e6:06:39:5e:6f:4d:e2:9e:ec:72:a7:fc:44:e0:c4:3d:35:
55:ca:33:7d:20:7f:56:dd:4f:04:ba:2d:11:12:5d:b2:0d:9d:
d0:2b:ec:5b:ab:65:f1:0c:2f:a2:47:3d:bd:f9:76:04:8e:06:
bc:b8:87:9d:ce:56:66:04:e8:f7:2c:b4:61:97:64:a8:6d:b1:
12:b5:63:ee:fc:38:85:d2:ef:c1:7d:9e:91:a1:d0:1b:b6:f6:
0f:e8:42:72:ca:ca:21:4c:63:e2:1c:a9:42:12:41:d2:55:59:
25:b8:72:07:f8:6d:2f:7c:4b:82:1f:10:84:af:82:38:8b:d2:
24:e9:aa:8f:0f:18:e4:d8:cd:b9:9c:b3:5b:da:54:54:48:43:
0c:cf:bd:e1:95:25:d2:6e:a6:57:28:2d:1a:e4:57:55:3c:ab:
af:1e:fe:16:72:50:f3:e9:12:3d:36:a1:07:39:45:23:19:e0:
48:8f:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:49 2025 by rpki-client