Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: m/Ugb8TweE+finj1BzzPB3ngj8GfklC7hoyorI+01KE=
Subject key identifier: 61:18:19:2F:A9:AA:90:AA:C9:10:D4:EC:5F:49:05:14:30:B9:C7:CE
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 0199FBEAF7EAAA57AB64E4C20EF52882A7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 0FBA
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: pyToPZt8anKRuowyZwcfLyM+ddJ50IB4N8EXOTer+Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f7:ea:aa:57:ab:64:e4:c2:0e:f5:28:82:a7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=6118192fa9aa90aac910d4ec5f49051430b9c7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:67:97:9b:d0:e1:25:9e:f9:61:d1:cc:e3:
88:11:12:42:ae:5f:32:d6:50:6f:61:43:2b:a5:ed:
c6:8f:b0:d2:ce:84:c0:0f:87:3b:12:8a:3a:26:87:
28:97:15:37:b3:9c:b8:1c:f2:65:9e:42:28:79:fd:
c8:7c:aa:ef:94:55:0a:22:7f:03:52:39:82:59:5d:
5b:54:ec:ba:19:44:52:77:a6:05:dc:3a:ce:02:7f:
99:d3:7d:1f:20:ea:d9:00:b2:3a:2a:28:3c:c6:ce:
19:6e:88:3c:c3:87:35:4f:b5:41:5b:f5:7d:7c:62:
5f:04:84:16:c8:58:3d:cb:3a:cf:3c:ad:7b:76:10:
71:04:23:fe:17:a1:16:d2:47:32:05:a2:70:7a:e8:
65:c2:e1:34:ac:1a:30:40:cd:58:67:6f:4a:ba:70:
a0:31:2b:40:9e:c2:f8:c6:c4:56:17:bc:66:09:cb:
3c:ff:b9:07:0b:7e:54:59:ee:e4:42:70:66:fd:47:
4b:cf:ca:77:cf:98:7a:a7:0d:67:00:7a:8d:91:e9:
da:35:1c:d7:a0:6a:f9:6a:7d:c1:a7:1f:76:47:5e:
c3:61:e4:b0:8b:26:94:ab:19:3e:77:94:d9:11:1c:
3c:04:1a:8b:b1:e8:3f:c9:f6:58:4e:38:4a:a5:43:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:18:19:2F:A9:AA:90:AA:C9:10:D4:EC:5F:49:05:14:30:B9:C7:CE
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fd:1c:35:1d:b3:e7:49:0f:39:d3:dc:17:2c:c0:ec:4c:92:
44:76:07:86:60:08:ea:94:89:af:89:4e:10:49:4c:50:07:7e:
76:9a:9e:30:d6:0f:1c:83:6e:cc:05:0b:0d:73:c4:cc:4a:36:
a4:c7:f3:25:43:fb:bc:83:5b:62:d7:cc:44:df:8f:f6:68:0d:
96:60:0e:a7:62:22:18:ce:42:43:a4:28:46:d2:87:f1:c0:a8:
47:73:e0:d5:11:f7:6b:fb:94:52:2f:0d:bd:0c:c2:75:04:01:
be:84:66:32:ec:12:57:c2:12:ee:a9:96:02:d7:01:8d:d0:68:
3a:77:23:97:18:4a:20:c0:41:e1:84:da:a2:a8:80:6e:75:82:
96:f5:cf:f8:3a:2c:af:0b:cf:a4:05:9b:b1:ed:6d:cf:fc:dc:
91:c3:f6:a8:23:e5:60:05:b9:29:a1:60:e1:48:cd:2a:70:63:
e2:06:69:6b:52:20:25:f3:78:7b:89:89:33:47:84:e1:d8:bc:
cf:93:5f:3e:1f:73:47:28:1e:71:29:ef:b9:48:67:1f:15:57:
8f:dd:86:17:22:0e:87:e4:83:d8:26:f5:6b:5a:37:2c:69:dc:
02:33:4b:d4:41:1f:98:36:e6:90:a6:46:44:90:2b:9a:f8:79:
a0:28:5d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:32 2025 by rpki-client