Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: 2C89uJAAVBYkcAY/omdsxRv3SF7EIJmTChwvUprurdk=
Subject key identifier: 9E:EE:B4:E8:1C:E1:3E:A0:4E:FB:F9:AF:1F:1A:DF:8B:40:06:76:79
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 0199FC8F5E316DE908C76D7870B63F04B77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 123E
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: LAQFYdTuuH0xszeB5N+aG5NHFwEqVhdyCdd3fc2upp8=)
2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5e:31:6d:e9:08:c7:6d:78:70:b6:3f:04:b7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=9eeeb4e81ce13ea04efbf9af1f1adf8b40067679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:31:b9:9c:45:89:33:eb:2f:d0:10:f0:92:
60:a6:34:37:97:d8:b9:4a:d9:c5:40:18:d5:b2:4b:
ef:f1:e9:3b:ee:36:b9:a8:c0:9c:5b:58:31:9b:f6:
70:8f:a2:76:68:b2:1e:0a:cd:55:b7:a9:a3:07:21:
51:bb:a6:61:93:b6:04:d5:b7:4d:16:3a:fc:52:44:
4e:ee:9b:9e:77:10:d4:46:14:08:97:22:bb:17:2c:
ca:dc:66:b8:6b:5a:fc:ed:ce:e7:27:c7:e9:a0:9a:
28:2a:37:9d:51:76:5c:7a:c4:11:1a:31:4d:95:88:
1c:60:02:75:b6:f5:36:37:a1:5c:57:64:fb:a1:91:
9e:cc:39:d9:6d:00:e6:38:28:d7:8c:7d:6b:b1:b8:
0b:a0:13:43:c4:92:dd:c4:84:3b:b3:7e:dd:5c:e8:
46:70:62:a1:50:8a:1d:ad:42:d6:a2:21:5a:25:42:
95:ed:32:21:98:ef:53:0e:e4:61:5f:75:5d:6d:09:
ae:09:b5:f8:97:d5:68:d4:9d:67:44:7c:fa:51:a9:
9c:00:aa:3d:f1:13:d4:85:9a:78:86:59:d3:45:4b:
75:11:7a:e9:ae:a4:c4:d9:9b:d9:23:2d:da:06:e4:
f3:3a:3e:f5:21:ca:08:aa:cf:9a:00:96:10:b7:ea:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EE:B4:E8:1C:E1:3E:A0:4E:FB:F9:AF:1F:1A:DF:8B:40:06:76:79
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:14:47:33:92:55:cd:54:3b:5c:24:0f:ea:96:06:60:e9:c4:
a1:83:07:ab:7d:12:02:17:54:6f:fc:6f:86:f5:6f:36:c2:c0:
85:8e:cb:c1:8b:ef:c9:8e:fb:fe:54:5e:6d:76:ba:45:1e:73:
de:2c:1d:f5:54:58:c6:ce:bd:98:f9:67:79:db:02:5b:66:09:
52:d9:e3:5a:2c:9e:28:de:de:94:ef:04:b2:1c:b5:46:08:f8:
1b:b9:17:4c:c3:3b:e0:89:54:e0:be:79:1f:d3:1e:2b:ca:c2:
ac:39:d8:1e:ed:db:00:6b:82:1f:e1:9e:ae:71:65:1f:a9:4f:
26:21:b0:51:e5:ac:35:83:64:5d:59:d8:87:2d:67:f2:1b:e8:
77:59:d1:bb:e7:19:5a:d5:4a:91:6b:0b:81:73:d4:ff:7a:c0:
2e:07:3b:e1:c2:83:8c:71:c6:17:40:75:6b:4c:61:c0:2a:7f:
8b:88:9c:f7:c0:67:44:e6:7b:7d:05:72:2f:53:37:8b:d3:69:
be:dc:e0:57:3e:0f:ee:4a:34:bd:a8:6f:03:7e:4d:45:6c:22:
46:3d:f3:b5:07:94:c1:0f:41:bf:7c:9a:d1:b1:39:83:10:e5:
9f:0f:d5:8a:7c:e4:86:26:5f:76:b6:e8:c9:38:c1:76:17:ae:
3a:8c:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:04 2025 by rpki-client