Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
File: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft (raw, json)
Hash identifier: 1k63+Uy6CAf/wQLOsMuwjZT6q3Da1zbhLv5u6PR3mI8=
Subject key identifier: E3:D5:1A:0C:14:14:77:D2:6B:40:2D:2F:F4:41:10:54:67:68:84:0B
Authority key identifier: 42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
Certificate issuer: /CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Certificate serial: 019A03A358AAD830EBEB3DF02A31D98B2A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
Manifest number: 0CE5
Signing time: Mon 20 Oct 2025 22:00:27 +0000
Manifest this update: Mon 20 Oct 2025 22:00:27 +0000
Manifest next update: Tue 21 Oct 2025 22:00:27 +0000
Files and hashes: 1: Pi86dWn6x9Vtc8GH3REzDrMrSX0.roa (hash: geFyDSt8c1EYU/IR6IGQVBM3q8GhN/Mt5BfwBL1upLs=)
2: QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl (hash: J/UQaLyJeWtlk3rNa9+JlL0sTK48+h7AlVIoCyDTqTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:58:aa:d8:30:eb:eb:3d:f0:2a:31:d9:8b:2a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200eb2f8fd0138c4377f540006cfc8b765c4a76
Validity
Not Before: Oct 20 22:00:27 2025 GMT
Not After : Oct 21 22:00:27 2025 GMT
Subject: CN=e3d51a0c141477d26b402d2ff44110546768840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:ca:11:5e:b9:a9:37:6a:b9:5f:c1:b8:68:
6b:22:80:8e:9d:22:5e:0e:2c:3e:17:7d:ad:e3:5a:
cb:7c:96:ff:b9:1e:eb:dc:82:ee:2e:af:07:9d:53:
8a:e5:76:bf:0f:3c:14:ea:dc:0f:42:7c:70:a0:88:
7f:d3:aa:b7:3a:e6:1e:82:62:03:32:25:c8:a8:c4:
ba:8a:fc:0d:c2:e0:c9:7c:c0:cd:1d:b6:1b:45:65:
93:79:dd:65:6c:45:a4:6e:de:a8:43:32:5b:a1:65:
89:dd:90:24:0c:60:64:a1:46:5e:5d:dd:38:bd:82:
87:f0:19:96:e8:67:92:b3:dc:4b:93:ae:c4:9f:48:
ff:b9:38:4a:db:6f:5b:b2:62:1e:fd:68:87:76:93:
9e:07:2b:e3:5e:f1:5a:96:2a:c2:bb:50:02:12:4e:
10:06:f1:9a:2f:84:0c:be:2d:0b:34:ba:14:a4:f7:
d8:36:e7:ae:86:3b:c1:18:ef:de:79:bf:cc:38:5a:
fc:e5:28:be:35:22:7d:44:c9:de:7b:e5:37:d9:2a:
16:66:4b:f5:d4:63:99:a9:4d:84:49:be:af:42:7e:
78:5d:7b:ff:f3:f9:e3:a5:d0:a0:38:ee:04:c8:de:
ff:1b:42:4f:5b:be:75:8a:10:d0:2c:4b:a0:c2:0c:
6e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D5:1A:0C:14:14:77:D2:6B:40:2D:2F:F4:41:10:54:67:68:84:0B
X509v3 Authority Key Identifier:
keyid:42:00:EB:2F:8F:D0:13:8C:43:77:F5:40:00:6C:FC:8B:76:5C:4A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/355be3-c11c-41c8-a89a-d1429837dabf/1/QgDrL4_QE4xDd_VAAGz8i3ZcSnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a6:5e:f3:bb:eb:fb:a0:dd:9c:12:fd:c2:29:4d:35:17:22:
42:80:11:5c:47:1c:e3:0e:30:c0:8f:20:db:fa:b4:26:74:9c:
2a:d2:de:4c:13:8b:50:0c:ac:b3:c0:50:c2:20:9e:61:6f:17:
5a:61:31:06:95:d8:49:83:e8:ab:ec:a1:e1:85:0f:85:6e:f9:
f3:34:bb:8c:4c:ec:c8:0a:85:c5:59:c9:ce:fa:f1:90:a6:03:
18:79:56:61:db:7c:83:9d:45:22:ad:e0:a1:c1:e1:e8:d8:91:
a7:e7:64:83:68:60:aa:c9:5a:b8:d4:6f:41:d1:aa:b5:0e:08:
c2:73:b3:04:f8:21:55:7b:95:1e:3d:93:05:c3:52:9e:a5:7c:
10:aa:f0:7a:1e:70:fe:12:a0:41:fe:3a:db:39:d7:83:1b:11:
59:01:ea:ed:98:54:0b:a2:72:2c:aa:35:20:ed:87:e0:6a:b6:
bc:6f:a7:1c:4a:1b:e9:fa:e8:ab:e7:bc:13:ec:19:75:3b:fb:
d6:27:f1:d5:d9:06:5e:51:d3:0f:b6:16:a2:c6:ba:9d:41:47:
94:c9:85:24:b9:3f:a8:07:12:5e:cc:6a:72:c1:37:58:9c:0e:
94:d1:82:35:ca:22:ee:cc:17:41:9a:66:35:f9:95:06:95:a2:
64:80:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:29 2025 by rpki-client