Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: AgvZxfAZKarqO0iQQksHbnvsVuc4R2OXhJHhnThxi8o=
Subject key identifier: D5:CC:2F:08:AF:ED:A0:9F:2D:55:ED:8C:A1:E2:92:BB:F8:46:A2:06
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 0199FBEBCDD7FF3370EFD246D5DC122EEC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: Jg9/5RKOjnQ/vM6vwF7KG67/DRtevCkt1Qf0SDwXSRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cd:d7:ff:33:70:ef:d2:46:d5:dc:12:2e:ec:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=d5cc2f08afeda09f2d55ed8ca1e292bbf846a206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:8b:bd:fd:20:a9:3e:c8:57:53:26:a6:8b:
11:d5:21:af:a4:40:72:9a:a9:0d:53:60:22:51:58:
1e:f8:17:96:e2:d1:bc:b4:31:1f:7d:09:79:e4:6e:
c7:54:25:cb:bc:2b:1d:1b:54:8d:b1:20:6f:33:29:
02:6e:4b:97:72:e1:5a:59:e3:26:a0:59:73:cd:81:
6b:ca:94:6b:f1:36:13:f5:17:bb:13:50:a4:30:ef:
df:0f:4b:f2:8a:f8:0c:63:f4:74:57:d1:da:4e:b9:
11:0f:fa:22:7e:6b:db:f7:be:9e:cd:8f:6b:1a:c1:
26:b9:e6:c3:3f:56:e6:95:63:0a:1e:5d:90:e4:d7:
4b:87:44:1e:7e:00:c7:7f:e9:ad:0b:44:0d:c9:0a:
da:39:0d:dc:aa:42:46:9c:9d:10:28:f4:f3:0b:3b:
11:be:1c:a8:46:d7:c2:81:48:78:43:6b:c0:b3:7c:
94:03:0f:f2:c7:0c:f6:be:ae:01:31:c5:a5:f1:da:
e7:a5:c7:59:fa:ef:db:7e:4b:69:90:c6:53:b8:ae:
0c:0d:5c:6b:45:f0:b6:8a:b7:ac:c2:f8:57:2b:46:
1c:e4:54:15:6d:51:07:d9:a0:3b:79:b8:6a:b0:41:
70:2a:3c:08:56:aa:e7:99:55:6a:d9:e5:2e:da:a6:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CC:2F:08:AF:ED:A0:9F:2D:55:ED:8C:A1:E2:92:BB:F8:46:A2:06
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:46:a5:e8:ab:8d:4c:68:bf:6c:5a:f0:3b:ed:bd:a1:fa:b3:
81:62:80:d6:24:f7:1a:3c:1a:fe:be:c3:91:dc:d7:c5:5a:70:
af:c2:99:6b:43:89:72:d0:a9:be:c0:cd:06:12:b5:89:2d:6e:
6f:dd:f8:ff:1a:17:55:45:f2:df:09:45:4f:d2:b6:0a:17:64:
b0:2c:e8:e3:46:bd:e0:96:df:66:00:84:2c:e4:33:7a:57:ce:
31:4e:fa:c0:11:24:5e:9c:39:fa:3a:58:44:88:e9:86:0e:52:
21:00:52:f3:66:2b:93:f1:ac:61:45:98:27:f8:5e:c1:d7:90:
7e:f6:98:55:30:e5:79:7f:bd:68:58:4d:96:1b:6b:1c:57:39:
0a:e5:99:f1:1e:9c:d2:be:3e:8a:b4:b8:a4:75:6f:e7:48:1a:
27:8d:39:82:1b:7b:8e:bc:97:3d:01:e2:38:a9:d1:b6:21:d7:
5e:9a:cd:2d:bd:eb:75:1a:c4:5c:8f:25:de:18:99:b7:2a:0c:
6c:16:6e:a6:72:f3:be:03:33:ea:12:4d:a2:ea:90:23:c6:b4:
52:d1:de:0b:21:e0:5e:c3:1b:fd:17:4f:d8:10:9e:51:27:1b:
e2:14:c2:0f:ec:4f:2a:59:0a:60:20:53:b6:5a:40:47:6d:7e:
21:15:a0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:05 2025 by rpki-client