Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File: QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier: 3Q0eXQJ8QSR1Wiu9n2LVgrYYrRZsThXT4KnnwPJ5Xbs=
Subject key identifier: A7:59:98:B4:04:85:A2:59:28:6E:39:97:BE:86:5B:C0:69:41:72:05
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 0199FC586BAA7A845EA53FC2FCEC6B1DC9A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: MEmdVewkQryx/qICdcFA/wb3eiKjqKnVxH8YMQoL+HY=)
2: S6s1MZvjGFTRPk9vZPziFkYY6qM.roa (hash: ToU3MZhIjvRp74FUEtCCsRrFPES+LOdbmLPRk+Oahhc=)
3: dsWRyZzKIXE-_o05dhzwQLK-Lbk.roa (hash: VWsGICYRCZ2YCd/cztWs6r3W91Apf8NSGDgQ7RjrOcc=)
4: g-0mYXlZCCbY8bUpprXLVbOiC9A.roa (hash: hFmcyS+hXU9/y3wiy+mf+wC/haCuFA1o+qKC1n/PUV4=)
5: o1EPY-XxVbxJyaIoWSUC8RQCjcc.roa (hash: Kquty1N0A29MJH0xvyL5yuCvTt71jZz0jcczxSEKzL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6b:aa:7a:84:5e:a5:3f:c2:fc:ec:6b:1d:c9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=a75998b40485a259286e3997be865bc069417205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:dc:63:00:f2:e3:53:80:c7:d7:31:32:ad:
28:a4:31:cd:b2:24:c2:15:59:91:b7:3d:0e:6c:8d:
13:8b:ef:26:db:4d:6f:d2:0f:41:0b:1a:41:e8:82:
59:90:2c:47:5d:41:a3:e3:7e:e7:ef:04:25:bf:db:
73:f4:74:d2:72:dd:ac:b1:76:43:6b:29:3f:9e:82:
d4:bd:bb:0e:fd:f7:31:05:54:2a:fe:08:63:a4:0a:
39:35:c5:90:91:3d:0a:09:89:d0:e1:92:ab:ad:f8:
54:e2:d3:8c:c7:4d:7b:ef:3f:72:f5:ab:79:c0:66:
56:8a:79:70:3c:bb:6d:21:01:24:db:e2:36:0e:75:
b3:a5:55:3c:8f:44:9d:34:5b:01:44:58:ee:ab:88:
26:9d:b9:bf:8a:fe:ea:a4:83:cc:40:c2:a2:97:87:
60:bd:40:bf:ea:bc:c7:5a:77:48:ec:5c:43:47:53:
ba:b3:90:42:de:6d:e3:72:72:1c:75:11:29:ff:77:
9b:19:bb:5a:8d:86:1a:5d:d2:b9:a2:4e:dd:cc:49:
0a:14:80:e9:be:e5:ec:83:cd:7d:3a:5e:fc:e9:f4:
b5:87:cd:dc:49:94:5d:ae:fd:b0:7e:92:13:f9:3a:
65:41:57:b5:17:7c:34:62:3f:6a:f5:82:39:1e:b1:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:98:B4:04:85:A2:59:28:6E:39:97:BE:86:5B:C0:69:41:72:05
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cb:de:bf:ce:f9:f2:8d:ee:64:9c:0f:04:d7:42:29:76:5e:
d3:8d:ff:2f:1a:9d:a6:0a:59:c4:50:96:16:19:51:e2:fa:70:
65:25:70:8f:72:d3:97:3c:5e:a0:ec:75:38:f0:90:ec:7b:69:
04:e3:14:a6:20:bf:5b:3f:65:f9:be:ce:fd:8e:91:63:e3:02:
4d:71:21:7e:25:6f:76:d6:c2:d3:37:b4:20:ae:f1:46:18:3a:
ee:1b:14:79:3f:1a:0d:a7:69:d9:47:0d:7e:bd:43:87:13:9b:
c9:39:f5:b1:d7:9f:31:8a:6b:07:bf:ff:28:f2:16:6c:51:54:
e9:5c:1b:95:b1:2c:47:b9:62:85:d1:13:d1:26:0d:3d:d3:5f:
f2:5c:e6:d3:34:84:76:3d:6c:1d:e1:89:8a:0f:c7:d1:e2:40:
2b:ff:ba:ae:ad:0b:ad:1e:5a:46:f7:6f:16:a0:e2:ae:4c:a6:
8c:f0:86:c2:18:7e:39:36:83:91:e6:71:a9:0a:fb:01:64:ff:
cc:f2:ab:18:86:00:56:8a:ea:30:f1:4e:4f:c1:81:bf:da:ec:
de:a4:3b:d3:91:6b:67:9e:39:9b:fc:91:b6:08:9f:81:bf:f6:
81:58:7c:d4:d7:25:99:ed:cc:7a:1e:89:4f:29:46:05:28:08:
b8:36:a0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:53 2025 by rpki-client