Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: CMuKXCCfGoj3EOuSQWUltN0Oz90N8Gao/LLM9/FHTl8=
Subject key identifier: 77:E7:DB:9C:53:F9:67:40:36:43:46:F2:A0:61:8D:4B:A4:4F:2F:67
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 0199FCC65AE431407096911C42AB2E71FC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:21 +0000
Manifest this update: Sun 19 Oct 2025 14:01:21 +0000
Manifest next update: Mon 20 Oct 2025 14:01:21 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: Rpu+X6sumuTK+msIRincogLBoINhcRM/Sh0pKwyfMAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5a:e4:31:40:70:96:91:1c:42:ab:2e:71:fc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Oct 19 14:01:21 2025 GMT
Not After : Oct 20 14:01:21 2025 GMT
Subject: CN=77e7db9c53f96740364346f2a0618d4ba44f2f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:3f:90:d7:11:4c:d7:32:14:b1:b6:a7:bd:
bf:3e:72:27:2f:80:ba:23:c1:e9:d9:5a:0d:4d:6d:
9b:34:c1:70:ad:05:f4:d7:9c:05:71:d7:a9:d7:33:
02:78:85:4f:b4:3b:44:fb:d8:94:dc:61:a6:b0:c1:
2c:76:4b:c5:77:a8:67:b3:86:63:d7:2b:33:b5:f6:
23:df:af:22:9b:a9:47:53:ca:53:af:ef:92:8e:83:
3d:f7:4e:1e:ee:be:5a:31:01:87:7c:d3:42:b4:2f:
42:63:02:58:22:5b:94:35:27:8d:88:de:84:6f:86:
34:03:79:48:d5:93:35:2c:67:42:d7:91:32:ea:8e:
fe:9b:f6:77:7e:a6:39:78:04:76:8c:0a:ec:37:5a:
fc:1b:c4:2c:ce:8b:53:a2:f1:07:10:d0:58:c8:dc:
6f:42:22:fc:6f:2b:d8:51:c4:1e:36:0d:6f:7c:68:
97:33:74:b9:74:53:f5:ad:93:f9:e4:3d:6d:6a:53:
75:b9:02:39:8b:3f:1b:66:c4:77:94:33:fa:72:59:
e8:40:7c:50:31:20:22:73:3d:23:02:59:d8:20:15:
3b:4f:03:4d:88:3e:cf:ae:f3:9e:c5:ba:b5:cb:76:
53:e3:81:07:64:39:1c:ce:ae:3c:5d:61:c8:55:85:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E7:DB:9C:53:F9:67:40:36:43:46:F2:A0:61:8D:4B:A4:4F:2F:67
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b4:96:34:e2:92:54:35:22:2e:ab:24:ad:7f:85:28:da:92:
a9:d8:c0:fe:2d:03:e0:39:23:c1:da:13:72:23:1a:c2:b3:01:
45:3b:5b:83:ad:78:3c:5d:bf:c7:a5:a0:30:1d:ae:c0:10:7d:
51:fd:0e:de:05:2b:f6:1a:08:11:b9:3e:9f:5e:b1:4a:5f:25:
e1:ab:b6:ca:39:a3:bb:57:e5:de:ae:c6:8f:2e:9b:b2:fe:ba:
23:d0:29:9e:3f:b7:08:d1:3e:b0:3d:df:e6:b2:6d:de:21:8f:
c8:d3:2e:4f:7e:c8:9b:4e:25:7c:1c:af:aa:e7:75:b2:14:ec:
fa:1d:63:4b:68:75:ac:49:97:f9:6e:80:56:21:27:7c:05:c3:
ac:10:8b:59:f9:dc:54:07:11:42:be:9c:a0:cd:6b:a2:4f:de:
f0:28:14:5f:54:4b:6a:73:df:d4:5d:a1:d7:d6:4c:fa:2f:74:
c3:97:94:00:51:cd:9e:86:57:4c:d8:94:34:37:4d:a5:78:c0:
07:a3:8d:77:c0:8d:b0:41:86:cb:ef:b3:a5:9e:39:af:31:80:
c1:81:da:f3:e3:07:ee:89:6c:08:d3:6a:c5:0c:bd:4d:3e:79:
5e:06:5b:d4:f0:af:cf:fe:5d:1e:98:57:84:10:0c:3f:8b:3d:
a6:46:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:33 2025 by rpki-client