Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
File: qmeVicHEiJfQmy1P7XpmBEqHbqM.mft (raw, json)
Hash identifier: KrONWq1iFQ/iNU8Em7Uqwv2J7V5m+KUpHKyFxNzMUhY=
Subject key identifier: 3C:BA:B0:FF:43:20:F1:30:21:B6:07:73:0D:E7:45:14:9E:06:29:4F
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 0199FBEB866AB121EEC8CFC2A3BDEA41731E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
Manifest number: 16A4
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: 6ePgS-H7Yzuq3toYao1SpcCwfpw.roa (hash: 6wwpW2bNKeFKmlaR35jx40rgyoKDaJsTG+ac1jtGsgs=)
2: h7iUVsathfWiZn6MUEREGc5Lrns.roa (hash: 6VmzPFIIIU0V6MlQJOV1H1bykzKrpknx8IQ1i3Vq0eM=)
3: qmeVicHEiJfQmy1P7XpmBEqHbqM.crl (hash: SXX7DNmHcqH+mJ6N/JV0nScNA9ApqFlK/AlXqgpJswg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:86:6a:b1:21:ee:c8:cf:c2:a3:bd:ea:41:73:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=3cbab0ff4320f13021b607730de745149e06294f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:40:7f:1d:9c:db:59:a9:db:87:5c:50:ba:
56:7c:c4:6d:78:37:2d:f5:cf:15:75:61:92:ec:f7:
b5:c6:a5:53:e2:88:58:e1:b1:7a:c9:f0:f0:0f:eb:
d4:dc:6c:04:7e:52:93:fe:bd:ce:f2:0d:fc:ac:5e:
a1:25:ec:c0:e4:04:41:09:cf:95:39:46:68:2a:50:
08:67:be:23:eb:ff:cc:d2:a1:79:2c:df:fd:df:79:
ef:c7:2c:de:aa:5c:3e:58:df:2a:be:7f:93:ea:56:
51:ee:ee:87:62:c6:b8:08:f8:ad:e6:0f:7e:b4:2d:
69:23:d5:96:b5:eb:8c:2c:8f:e3:80:49:3e:8d:b1:
64:6b:f4:52:b8:3c:59:92:d7:d5:f5:14:45:fc:ab:
74:ab:12:fa:cd:99:9a:da:85:c3:ed:5e:34:b1:08:
eb:64:a3:63:90:8f:62:1f:07:22:99:61:72:b6:47:
dd:f8:89:6f:4b:a1:fd:fb:b1:cd:f0:6a:fb:68:02:
56:78:dc:b8:49:a6:61:f4:4a:9b:81:6f:60:6c:7d:
0e:0f:cf:36:a1:20:a9:e7:03:0a:e9:9b:54:11:ce:
02:6d:ce:05:c4:8a:29:88:c3:23:e7:15:19:5b:20:
a7:60:bc:83:f8:c4:1d:62:90:2b:3f:02:6e:64:0f:
6e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BA:B0:FF:43:20:F1:30:21:B6:07:73:0D:E7:45:14:9E:06:29:4F
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:62:4c:e1:01:d7:bb:6c:36:5b:37:ae:aa:1e:7d:b8:80:6d:
ea:04:db:aa:0a:bf:db:9d:ea:f9:e7:6d:3a:bd:f6:6d:c1:3b:
40:46:61:c5:e3:6e:a8:fb:b8:48:2a:ee:63:43:61:07:b6:ea:
d9:7c:26:f9:9b:97:74:f5:45:89:34:a6:c7:84:6f:f7:8d:52:
22:e8:34:6e:43:23:76:0b:13:6c:d8:43:74:d4:e1:7c:35:91:
62:0f:7e:86:66:ad:74:cc:32:4e:8f:f7:69:64:68:7f:6e:32:
7d:6c:81:a1:e0:0c:17:64:af:32:12:e1:29:42:16:60:98:71:
6e:7b:58:0f:d5:56:8c:e0:9b:3b:f0:9f:cb:bc:a4:f7:9a:d3:
13:19:8b:79:23:00:43:bf:5a:54:cc:7e:6d:e9:df:24:af:80:
2a:a1:6d:b9:8b:f4:c1:36:5e:03:10:6f:dc:0e:9a:a0:83:56:
59:40:54:93:e9:39:7a:c8:00:e3:e8:1c:c7:ed:f1:db:6e:a9:
64:1e:06:4d:5a:d6:8f:aa:b4:c1:49:b2:d0:b2:3a:95:04:c5:
3c:dc:bc:b9:91:37:e2:5c:e6:88:0e:47:6d:a4:27:b0:54:29:
f6:95:e7:b8:2f:03:60:25:07:0b:a1:67:83:67:64:9e:9c:0e:
c3:ba:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:19 2025 by rpki-client