Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
File: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft (raw, json)
Hash identifier: q7gEFw9y1NzhxDOlf04frJbVZUQjnkM2N2b5xvd/q2A=
Subject key identifier: 3B:FF:0C:11:98:AA:78:00:E4:EF:CE:A4:14:82:45:3B:D8:45:B2:54
Authority key identifier: 41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
Certificate issuer: /CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Certificate serial: 0199FBEC308524D74A91951F8A05559F3076
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
Manifest number: 156A
Signing time: Sun 19 Oct 2025 10:03:04 +0000
Manifest this update: Sun 19 Oct 2025 10:03:04 +0000
Manifest next update: Mon 20 Oct 2025 10:03:04 +0000
Files and hashes: 1: Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl (hash: iUgGH/Ma16e2rDLvgBISADC2BXOoe0l04JM7tqaXkMY=)
2: tCKYdWD2hSQqFlBHMS87DdwFA_c.roa (hash: P2KIjX/YYHmksRirKKz2Fd1xnQFo0kzJQbDUVFG/Ics=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:30:85:24:d7:4a:91:95:1f:8a:05:55:9f:30:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f73670ac161f4b56679c49da8b489b60bf0b16
Validity
Not Before: Oct 19 10:03:04 2025 GMT
Not After : Oct 20 10:03:04 2025 GMT
Subject: CN=3bff0c1198aa7800e4efcea41482453bd845b254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:88:c4:ca:21:97:d6:f9:56:a7:60:5b:57:
d6:5c:23:0f:a1:79:d6:f3:55:c7:f0:81:69:4c:de:
b1:14:96:b4:18:77:37:46:56:56:12:7c:98:70:dd:
7b:f0:f5:ad:70:58:a4:19:85:74:d5:d2:aa:51:7e:
1d:e0:be:77:67:58:8f:ae:da:22:3f:e7:12:83:5c:
5b:9f:58:c7:e0:35:60:a8:64:ec:8c:59:48:8f:b0:
c1:ed:5d:e3:74:6f:e0:58:31:97:be:8d:55:50:62:
c6:ea:d8:b3:22:53:02:ba:a1:d7:5d:78:1a:7c:c2:
6d:96:c1:fd:83:04:23:17:cc:bc:d1:50:0c:14:87:
f8:6d:79:c9:8d:da:7c:f9:60:d8:9d:59:72:de:cc:
09:57:95:cd:5b:0c:2f:7d:82:fa:86:14:12:73:0e:
13:c0:59:ac:90:b7:b8:29:b6:5e:05:34:15:11:10:
ca:99:62:80:23:37:be:63:40:9d:fd:2b:6a:81:3e:
ff:c7:e2:37:6f:5e:5d:8d:ff:e3:e2:72:44:1a:92:
f3:4d:5a:b3:b9:27:73:73:e1:73:13:19:ee:e2:e3:
f4:ea:ca:27:2e:93:a6:ee:c7:cc:4a:06:88:f7:f3:
34:05:8d:7d:71:62:33:d9:81:c5:cb:5c:53:a6:fa:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FF:0C:11:98:AA:78:00:E4:EF:CE:A4:14:82:45:3B:D8:45:B2:54
X509v3 Authority Key Identifier:
keyid:41:F7:36:70:AC:16:1F:4B:56:67:9C:49:DA:8B:48:9B:60:BF:0B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c31033-e7ae-4ab1-af49-29618387ba26/1/Qfc2cKwWH0tWZ5xJ2otIm2C_CxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b2:7d:0c:a9:72:5c:56:0c:86:a4:66:c1:ea:0b:84:03:29:
dc:06:43:d0:d0:c3:c6:fc:a9:f6:fa:1f:7f:fa:da:1e:c6:2b:
c2:aa:5f:1a:f5:07:3c:c0:6b:f6:bd:44:90:af:7b:3a:4e:ca:
0d:b9:d4:eb:fc:f2:6d:7a:85:56:21:e7:a4:a7:5b:b1:c6:62:
e2:69:cd:af:b9:76:16:6b:50:30:ad:14:83:26:b2:f7:d6:d0:
a5:f9:31:41:f3:b0:08:5f:c6:ca:8a:10:10:f3:e9:17:c0:80:
74:b3:46:d2:db:80:4f:33:eb:33:82:6e:3e:cb:24:1d:e9:97:
c4:e1:e1:64:3d:a4:dd:30:85:78:9d:ab:27:f7:8d:03:ac:a9:
dc:c5:78:65:26:81:73:b5:7b:05:06:6a:42:1a:8f:e7:ea:0d:
23:47:d2:f7:bc:7b:7a:14:60:fd:75:3d:1e:c6:c5:d7:4c:7e:
a2:37:4c:8f:0b:b7:3c:36:cf:2a:35:b0:63:6d:ff:35:78:38:
e2:c6:c7:ee:72:a0:50:2a:c6:e2:be:a1:36:7a:0f:0c:af:2a:
41:11:c2:db:11:35:cc:64:2d:f2:c0:fe:47:26:80:df:cd:6c:
de:f3:b9:97:dc:fb:0c:50:fd:fb:f0:a9:5e:f4:94:e7:23:c7:
64:d3:e3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:17 2025 by rpki-client