Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
File: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft (raw, json)
Hash identifier: ykFQVk77uXl1DmGWciYNiZTR2mRg6BF3jkCl6rVHibc=
Subject key identifier: AF:9C:19:89:3B:BF:7D:04:6D:28:87:12:13:F4:AE:22:C2:A2:35:A0
Authority key identifier: 42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
Certificate issuer: /CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Certificate serial: 0199FDD8C5D24566EAABE316E31DECFF0E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
Manifest number: 0CE2
Signing time: Sun 19 Oct 2025 19:01:05 +0000
Manifest this update: Sun 19 Oct 2025 19:01:05 +0000
Manifest next update: Mon 20 Oct 2025 19:01:05 +0000
Files and hashes: 1: Pi86dWn6x9Vtc8GH3REzDrMrSX0.roa (hash: geFyDSt8c1EYU/IR6IGQVBM3q8GhN/Mt5BfwBL1upLs=)
2: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl (hash: qV3dSN489MG8BjiDIBIKT1zewFCiVD0fa23CH8sBZHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c5:d2:45:66:ea:ab:e3:16:e3:1d:ec:ff:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Validity
Not Before: Oct 19 19:01:05 2025 GMT
Not After : Oct 20 19:01:05 2025 GMT
Subject: CN=af9c19893bbf7d046d28871213f4ae22c2a235a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e1:db:6e:07:dd:26:ba:3a:7b:a8:87:31:95:
0e:03:30:22:99:84:a7:69:ff:ec:e0:c0:5b:2e:63:
1a:e0:f5:56:67:39:35:ad:b5:fe:a6:62:93:3e:0c:
1f:34:c1:e8:65:ae:5e:47:df:f1:61:fb:15:fd:30:
bb:ad:7c:78:2e:de:b8:c4:0b:6d:66:94:37:36:d7:
62:24:5b:3e:b8:0f:04:fd:ae:3f:e4:eb:6f:fe:02:
9a:f1:ce:06:ef:0b:38:7b:9a:92:20:84:33:e2:8d:
36:a4:54:15:b1:e8:03:6a:76:ec:46:bb:9c:51:fc:
0d:56:db:08:ec:e7:b3:bf:e0:67:ef:92:8f:59:75:
6b:08:f2:a7:8a:a5:f9:7c:b6:9d:6d:a1:0e:0a:21:
a0:a4:0a:05:39:ed:eb:cc:53:64:6b:01:41:24:21:
4a:95:3c:ab:2e:0b:e3:8b:c3:12:09:db:5a:62:c9:
ab:5b:60:0e:6e:15:00:e7:c6:b5:4f:ec:14:96:7b:
22:78:5c:6a:93:8a:c8:20:84:b0:62:07:4f:5e:4e:
e1:1e:0c:cb:93:0b:ad:07:55:dc:bd:90:82:d4:de:
1f:d8:29:29:ac:0b:b6:34:71:50:bd:46:d2:ef:0d:
eb:f2:6b:26:3d:aa:ae:38:ca:ed:6d:0e:bd:a9:c4:
e1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9C:19:89:3B:BF:7D:04:6D:28:87:12:13:F4:AE:22:C2:A2:35:A0
X509v3 Authority Key Identifier:
keyid:42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:44:18:9a:51:e0:3d:95:e8:f2:08:4d:78:98:1c:34:f1:30:
5f:d6:be:2d:28:ed:52:3e:16:8a:9d:8f:f5:8d:f6:3c:aa:da:
5c:77:b8:ba:3c:7a:97:5b:73:14:c6:3e:cf:ca:bc:1a:1e:55:
be:f9:ca:0d:03:68:e3:9b:fe:96:c5:d7:ae:d5:5d:e9:82:19:
9a:1b:3a:49:56:dc:31:3d:23:f6:da:ea:d1:8e:19:04:82:e5:
a5:8a:65:a2:31:47:41:48:15:83:74:26:3f:65:5b:de:6d:23:
1b:3b:59:d5:44:eb:16:74:02:f0:8f:6c:e3:dd:33:78:a1:2a:
e1:b6:75:f4:c4:f0:79:49:47:4e:b7:2a:06:20:eb:d1:5a:65:
f2:fb:4a:0d:ad:1f:16:42:28:bb:fc:64:4d:99:8c:de:f1:e8:
d6:60:94:e4:76:84:c1:26:6f:5c:fb:2f:6e:67:16:ba:03:2c:
6a:50:bd:10:01:01:f2:2c:ad:4f:30:08:d6:64:3f:f5:60:c4:
1f:bc:76:71:a1:38:46:d6:ab:d5:c7:4b:c0:b4:b8:c8:55:a0:
d5:ea:1c:04:22:d4:4a:5f:ab:c6:b7:79:4e:5e:fb:d8:a1:46:
10:59:11:8a:fe:e3:83:69:f5:be:e9:68:18:ff:33:5d:14:d9:
1a:6c:29:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:13:56 2025 by rpki-client