Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: eZ0CKDzn+YwD53eJO1RnznlIS3HvrWzocKrBhgGRvlY=
Subject key identifier: BA:A1:4F:83:E6:C4:A0:9C:D2:A4:FC:E5:45:58:7A:5D:78:94:7A:83
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 0199FCFDACFF5F3E7B901621488D04CDD7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 1617
Signing time: Sun 19 Oct 2025 15:01:47 +0000
Manifest this update: Sun 19 Oct 2025 15:01:47 +0000
Manifest next update: Mon 20 Oct 2025 15:01:47 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: AXGB8ae3Z3n36cWDRWevT4ylRaaMmV6gle96qem/2H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:ac:ff:5f:3e:7b:90:16:21:48:8d:04:cd:d7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Oct 19 15:01:47 2025 GMT
Not After : Oct 20 15:01:47 2025 GMT
Subject: CN=baa14f83e6c4a09cd2a4fce545587a5d78947a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:5c:c1:bb:49:f5:ae:62:fd:e9:13:e5:5f:
99:9c:89:22:9f:5b:67:fd:08:80:7f:a1:e1:ba:97:
61:70:d9:58:90:91:57:54:d3:d3:ac:2c:51:1d:20:
27:c9:aa:ea:3d:43:65:72:25:50:35:24:f3:2a:79:
a6:6e:52:b0:52:3c:41:63:4b:1c:65:8a:4b:db:d9:
72:c7:74:21:c2:59:2b:83:5e:18:62:fd:39:f9:6e:
bc:dc:9c:8b:7e:56:d2:8f:de:01:82:f1:bf:0e:e5:
a9:4a:65:81:c2:ec:f6:ab:ff:2c:ed:3d:74:3d:35:
b0:02:21:f7:a9:f4:c2:11:02:6c:78:23:cc:ae:d0:
a3:b5:6a:4e:1a:62:8f:ec:f0:7f:6f:88:b5:86:be:
d6:7e:c9:0b:0a:62:af:fb:fc:47:ae:6e:c5:3e:62:
0e:ea:ed:c6:fd:e4:1d:ee:63:99:2d:b3:e7:4e:74:
64:a6:64:ad:b1:bb:d8:02:9c:f8:99:c2:93:5d:6c:
f7:58:32:31:31:51:d6:1c:bc:fb:41:38:a5:71:57:
ea:a6:d9:34:94:5e:2a:fe:27:7c:ae:36:61:db:cd:
60:e4:8e:95:43:a6:59:a9:b9:4a:05:6f:a4:fb:0c:
ae:99:ff:33:ba:28:10:38:51:c2:19:0a:f3:02:c4:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:4F:83:E6:C4:A0:9C:D2:A4:FC:E5:45:58:7A:5D:78:94:7A:83
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:70:f3:9f:63:2f:37:07:62:ec:1a:7d:fb:99:19:ef:18:69:
19:0b:ac:69:69:5a:2a:82:df:9e:6d:ec:09:d6:e2:55:6c:9e:
53:df:2f:d1:44:8d:97:c0:1e:20:f8:53:b5:40:18:d9:a5:fd:
47:d2:af:30:43:39:81:53:a9:df:16:ac:64:c4:79:d8:e3:1f:
ff:85:1c:70:2a:04:4d:8e:94:0d:97:f0:93:b9:7e:6d:a6:0e:
70:e8:db:30:de:e4:fa:a3:97:57:b0:a4:fb:e0:1c:a1:07:ac:
90:67:28:17:ff:7f:df:de:66:17:06:7a:8d:2f:be:c7:21:80:
e1:bd:b6:b8:98:e1:df:9b:8b:bc:d2:3d:64:b8:43:08:f0:35:
dc:2f:98:58:6d:11:dc:9d:e2:6c:7a:24:bd:a0:37:de:b9:a6:
79:10:f9:e4:d5:fb:86:d2:f1:85:64:75:29:5e:6a:d4:bc:8a:
55:5b:3c:d9:67:65:1f:4f:bf:c5:90:9b:66:cf:cc:86:22:f7:
74:0d:65:cd:59:c0:e6:20:c9:3f:c3:b5:f5:b4:00:ec:e9:d0:
2c:38:aa:de:81:fc:af:4d:8d:69:34:4b:5a:9d:50:1a:7b:58:
73:73:aa:17:81:d5:91:47:36:92:cc:3e:ea:95:08:8f:98:16:
30:f7:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:50 2025 by rpki-client