
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: 2nakkELRS+/HpmQ5hHxpG0e8MsAUrEiG5GpLKtTuXaM=
Subject key identifier: AB:B0:5A:05:87:3B:04:E9:AF:38:5E:A7:ED:B0:BD:19:39:4F:0E:3A
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 0199FC58B2E100F77582CA2CBEF7FCAB786D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 04AD
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: b2/li5P//QVyE2VOIOYM/jnbVooO2jWNaHH1CzhJ0mU=)
3: kwFJhE8jwEHJybQlTEKHmXErsEs.roa (hash: alWNviEQV6Ni9Uyx0rYA0Shsy6KWc4y7zd5M53FLUU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b2:e1:00:f7:75:82:ca:2c:be:f7:fc:ab:78:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=abb05a05873b04e9af385ea7edb0bd19394f0e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:e0:7f:a5:08:94:6f:0c:f3:51:2b:75:05:
6b:df:0b:33:f6:80:8c:52:29:22:8b:24:f8:0a:2b:
0e:ff:8c:c2:a8:a3:3e:ea:58:4f:b9:20:67:6c:6f:
4d:74:f0:5a:f0:8e:25:74:48:d8:0b:aa:c3:a1:f5:
bf:3b:75:1f:84:b4:5f:1d:96:9d:28:22:c0:2e:59:
30:f1:65:e8:26:40:19:cd:65:b3:45:45:c2:02:6e:
e1:8d:fe:ed:3d:2a:4c:6f:da:0f:ee:48:63:6a:5b:
5f:fa:2f:80:2c:dd:60:dd:0a:27:83:e7:61:e0:74:
2d:26:92:b6:fe:6f:49:a2:47:89:11:cb:6c:84:dc:
07:d4:c8:23:d0:e4:67:ac:83:aa:d6:d7:a1:8d:48:
02:98:fc:58:54:6e:43:20:71:75:1f:7b:50:5b:b5:
c1:68:a1:18:2e:84:e4:ea:44:7f:1e:1d:9e:9c:49:
32:38:39:a0:5c:78:57:45:c5:3c:b4:1d:8c:67:61:
8d:49:49:61:41:4e:16:8e:c2:b6:f5:1d:ec:70:7c:
74:c2:09:28:2b:0c:56:24:c0:6b:08:b0:3e:9e:59:
3a:71:c9:45:d0:85:08:0d:52:39:3d:5b:13:0b:fd:
df:76:d2:70:be:48:18:10:8f:dd:12:c1:7b:79:12:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B0:5A:05:87:3B:04:E9:AF:38:5E:A7:ED:B0:BD:19:39:4F:0E:3A
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f8:94:94:df:6c:98:d8:64:d1:66:48:f4:fd:fb:56:f9:47:
ba:f3:88:6b:5a:91:54:6e:eb:f1:5c:f7:38:f3:3a:d0:f0:e7:
7b:b9:ad:63:fe:41:d3:f8:63:18:41:ea:56:a7:51:5a:9f:53:
b2:86:11:1b:2f:35:b3:77:4a:1f:ff:c7:bb:19:c3:4e:d4:ea:
02:b4:f4:90:4b:47:8c:2b:fa:ad:e5:86:3a:e0:1b:76:6f:ce:
ce:7b:5d:d9:e2:f7:af:e7:28:a7:ef:72:e9:72:21:7b:dd:92:
d3:ff:91:84:f7:92:4a:81:f0:33:83:54:a0:09:34:1a:10:ed:
3e:8f:38:8e:eb:ed:e3:9c:88:78:b7:b9:81:58:09:47:45:a7:
4c:33:22:ab:07:45:10:1f:6f:1b:0b:a5:48:ee:0c:31:6e:18:
67:e9:03:81:a8:dc:5c:a9:cc:89:42:d3:ac:34:60:ae:21:7c:
ca:5e:6a:38:34:b2:f4:98:82:d5:18:cc:ad:19:0a:33:d0:cb:
6d:62:fc:6b:ad:85:79:d6:bf:f8:6b:cf:aa:de:57:a5:74:8a:
bf:9c:dc:dd:4b:99:d3:6a:98:5e:d4:e7:ef:94:6e:74:ee:fb:
76:7e:ca:5c:64:d2:61:07:d8:22:b3:43:9a:06:38:68:0e:6a:
86:f5:5b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:52 2025 by rpki-client