Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
File: qtT1OyE_1fbkbdPuO36dKH_JFzI.mft (raw, json)
Hash identifier: LH4brGwSotdZqdAY7/e8Gmr1X5cZ+596oYN6i6CjKCU=
Subject key identifier: E2:F9:8B:DF:B2:EA:52:98:17:FA:E6:65:7C:1F:B7:DD:D2:8B:E0:D9
Authority key identifier: AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
Certificate issuer: /CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Certificate serial: 0199FBB371645864A10FF173FF84BA1942EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
Manifest number: 0A
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: QH7PkD5ZK8D91RHK6lOrj_AnwS0.roa (hash: 3W6raDOuTY1+pLUCyy05Kr7smlg3BwEP4vah6MOQHS0=)
2: qtT1OyE_1fbkbdPuO36dKH_JFzI.crl (hash: Pj4ofJrIV52CLTb/+rHJm/vAvho3ebtxneWdIgAOw2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:71:64:58:64:a1:0f:f1:73:ff:84:ba:19:42:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad4f53b213fd5f6e46dd3ee3b7e9d287fc91732
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=e2f98bdfb2ea529817fae6657c1fb7ddd28be0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:ec:a0:f2:ab:7b:e5:a2:dd:76:b2:87:fe:
1a:a4:cb:b7:56:74:d8:b7:60:52:dd:f6:4e:08:91:
a4:b9:bc:dc:b1:6b:23:30:a9:20:d5:44:c5:67:ce:
4e:8f:04:e5:65:a0:b9:c2:8f:af:e3:6d:d6:a6:e9:
a7:fb:5c:9f:3b:90:f9:30:f8:2e:ac:ae:a5:1f:3c:
5d:62:6d:70:a6:a5:be:11:b7:53:0f:2b:b0:a5:9b:
ea:29:f7:46:19:e1:7d:91:b5:bf:0c:a8:b1:f6:da:
3c:b0:d2:3c:31:0d:de:77:d5:9d:1d:28:09:18:05:
86:88:ab:e0:38:e4:2d:0e:3b:db:2e:63:90:74:3d:
30:4d:b4:8e:99:4b:de:ea:92:c5:b1:f8:5e:f7:7f:
bf:5e:6f:d2:b1:93:b9:c6:88:85:26:70:35:53:63:
ce:c4:42:85:37:dd:ad:4d:59:6e:a5:fc:8c:44:b1:
7f:43:5b:5a:db:fc:83:b1:36:7e:ae:89:b3:72:c3:
71:66:16:b1:93:3f:63:c4:34:c7:ca:d3:1e:a1:1f:
cb:c8:9e:20:5b:68:b4:6e:fb:60:64:4d:b9:57:c4:
11:b4:21:d5:7f:1a:81:3a:cc:f3:3b:be:a1:30:59:
ed:4f:19:27:19:42:96:72:be:98:61:2d:68:9c:04:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:8B:DF:B2:EA:52:98:17:FA:E6:65:7C:1F:B7:DD:D2:8B:E0:D9
X509v3 Authority Key Identifier:
keyid:AA:D4:F5:3B:21:3F:D5:F6:E4:6D:D3:EE:3B:7E:9D:28:7F:C9:17:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtT1OyE_1fbkbdPuO36dKH_JFzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/42bed4-44d7-480b-bbda-16ab5746ef4e/1/qtT1OyE_1fbkbdPuO36dKH_JFzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:74:b1:d4:4d:ac:08:61:24:97:3b:20:2c:fb:f4:a6:f4:66:
c0:13:96:39:fb:6e:78:cb:88:f6:3b:0c:da:de:92:03:99:55:
fd:bc:6e:ae:eb:84:d3:82:35:f6:7a:a9:1d:a2:98:cb:17:2a:
e5:78:ce:50:93:f2:b5:29:18:5f:b4:21:e3:fd:9f:f5:be:eb:
f7:c5:d0:b5:4b:8c:90:2f:23:ba:5b:55:65:5d:85:c2:bb:5a:
bd:f5:69:6c:2c:32:c6:2c:9c:8b:b5:b8:d7:ba:67:f2:df:b8:
85:b9:0e:f0:f7:aa:5f:2d:7c:05:f0:5a:7f:e6:04:3e:6c:c4:
21:de:5d:7a:22:ba:af:81:d8:6d:af:9a:38:63:1e:7a:5d:94:
eb:46:12:44:75:dc:3f:4e:0c:49:f1:ff:5c:6c:5a:b4:a4:a2:
79:83:f6:e9:ab:6c:ac:a1:00:45:51:b8:22:68:c5:b0:f3:8d:
24:ae:62:54:33:2b:1c:e2:82:0f:15:b6:0c:6d:67:3d:87:e1:
d1:02:34:51:e3:e3:49:b8:c8:dd:fd:fc:aa:70:e4:fe:88:bd:
26:bc:e1:f5:b8:13:f0:bb:dd:c5:74:e0:92:9e:01:6a:23:bb:
23:3c:a0:6b:8c:1c:7e:f4:10:d1:15:17:a8:62:05:c5:84:d5:
ed:31:19:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:25 2025 by rpki-client