Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: Ncool7JcLqvHb9Sef+kEO0qix/BUVe6TvjjqS4VTSSE=
Subject key identifier: 2B:CB:A0:D5:B9:92:45:BD:9D:9D:7A:20:0C:A8:71:EA:52:95:7B:6A
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 0199FE7DB9D6D40D34D3540991D2C3C810A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0A03
Signing time: Sun 19 Oct 2025 22:01:16 +0000
Manifest this update: Sun 19 Oct 2025 22:01:16 +0000
Manifest next update: Mon 20 Oct 2025 22:01:16 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: nOs23GDDUwRdUcRqQyNbc36EVOZePb9Hnit6okr0URI=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:b9:d6:d4:0d:34:d3:54:09:91:d2:c3:c8:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Oct 19 22:01:16 2025 GMT
Not After : Oct 20 22:01:16 2025 GMT
Subject: CN=2bcba0d5b99245bd9d9d7a200ca871ea52957b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:09:e5:5d:a1:07:e7:15:1c:41:ea:22:e2:
8f:be:25:69:db:a1:6a:7e:43:00:ae:a6:20:89:17:
a7:cc:dd:10:3f:98:b2:06:b2:1c:8c:61:9a:f6:13:
fb:64:5b:64:5c:42:9a:5f:17:38:21:64:c4:66:a0:
4e:d7:d3:b5:a0:f3:8e:b2:d9:e4:89:de:1a:af:60:
fc:42:d7:03:0a:a0:f3:9b:cb:0e:c2:36:a5:8b:c0:
62:29:fe:e1:b6:28:54:ce:c5:21:95:05:d8:f4:6e:
43:00:8e:be:20:b4:db:48:4e:56:3a:f9:2e:06:25:
96:a4:6d:84:30:d2:98:f2:f8:a9:12:46:44:86:82:
27:85:66:d8:e6:aa:39:e8:f1:9c:8c:e1:af:6a:14:
e5:8f:db:a5:17:e1:53:fa:0a:a3:0c:a8:dc:a5:6f:
13:a3:9e:d4:fb:63:f3:fc:50:ee:f8:e4:7a:d8:40:
43:d5:ea:e6:b8:6a:c5:83:31:28:43:90:d3:d9:40:
23:43:8d:22:30:d3:b6:eb:6d:a5:7a:ac:16:af:f7:
23:3f:87:38:42:97:e7:c0:22:c7:22:7e:8d:69:c0:
21:13:54:95:18:d4:0a:39:64:a5:3d:f0:f9:91:23:
7b:f0:32:af:4b:57:40:a4:29:9f:fc:77:4b:53:b9:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CB:A0:D5:B9:92:45:BD:9D:9D:7A:20:0C:A8:71:EA:52:95:7B:6A
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:27:24:56:28:36:28:f0:f7:4d:9b:8b:6d:d9:c2:db:ed:8d:
b1:9b:16:59:c2:bf:8b:23:46:67:5e:aa:85:73:5f:b1:b9:44:
11:de:03:6e:b7:52:3a:1e:b9:70:ec:5e:7b:5d:04:3f:57:e5:
cf:20:72:b9:98:9b:a3:65:3e:67:f8:df:87:c7:02:44:3c:5d:
06:61:ac:fc:2d:30:a1:11:af:31:63:d3:de:e9:72:ec:17:a9:
1d:88:38:f4:a6:eb:5b:65:0d:9a:d1:3b:d6:8d:4e:43:66:99:
13:27:19:fb:99:b1:08:5c:55:f4:df:ef:16:ac:a2:63:00:b2:
28:de:1b:67:b6:01:12:21:23:42:fa:2d:54:1e:f4:55:81:1f:
87:37:b8:e2:f7:8b:2e:b5:bb:87:0e:bd:71:45:92:08:7c:aa:
3d:b2:85:43:90:2e:e8:74:4d:6f:14:29:af:78:e8:90:c1:08:
0f:69:70:69:37:d9:73:d4:f0:52:0f:13:44:50:f3:ac:18:d5:
48:49:b5:32:3d:10:06:43:78:33:ce:97:13:46:e3:cc:94:fe:
94:55:05:34:66:61:7f:eb:a2:33:26:25:6d:6d:61:21:84:28:
1d:c6:9c:5e:ba:bd:0f:a7:f2:3d:68:d6:b8:d8:0a:62:7e:f2:
a8:d7:77:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:59 2025 by rpki-client