Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: RtL688UTBuhHvGLG/9LEO66U+MEdrpbVmJBIT2NH7x0=
Subject key identifier: 4F:D1:E2:87:44:86:64:4C:71:CA:65:BC:DA:FE:7E:DC:72:37:80:B7
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 0199FD33FA5ADE715C119D553CBACC17083B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 15BC
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: 4ueNH9M2zTZ22dwEvJGWC6bnXqS+rPpoz/fOwRy7ZTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fa:5a:de:71:5c:11:9d:55:3c:ba:cc:17:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=4fd1e2874486644c71ca65bcdafe7edc723780b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:1c:e4:5c:2f:dd:6b:d1:30:db:8e:31:6b:
47:3c:41:79:d2:5d:1b:2a:3e:9d:0e:33:31:1e:7f:
7c:05:fa:00:2f:48:5e:fa:a5:39:66:2d:c4:77:d1:
08:ab:9a:62:00:5d:2b:a8:31:91:a9:1e:fb:41:19:
f5:d9:ed:e5:c5:59:dd:48:02:a2:3e:e7:f8:97:2d:
c4:6b:c5:0b:a6:2c:76:ea:5d:57:0b:6c:a8:31:20:
91:d4:0f:3d:ce:f6:b0:9f:44:0a:a2:85:14:d4:ba:
3b:37:6d:9e:bc:b1:bb:8a:bb:c7:0b:d6:9d:36:5c:
b8:47:fe:ca:ad:c6:21:9e:a6:2c:e6:a9:aa:8d:93:
55:93:0f:1e:c0:42:d9:74:e4:b6:fe:75:8d:49:d5:
81:c0:c1:fd:56:43:39:c1:aa:66:f2:ee:e2:14:e7:
68:b2:83:ab:53:40:c7:53:6c:27:f3:47:19:42:12:
23:10:90:fe:66:fc:5d:74:82:18:2d:68:89:35:e8:
e2:6f:6f:ab:f2:cc:5c:cf:83:27:8e:e6:a0:bd:df:
f3:c4:f5:37:bb:ce:62:6b:14:7c:68:c1:1e:6c:80:
c9:c5:a6:43:86:2a:5a:ea:6a:38:e6:4f:9a:12:ab:
4c:df:74:33:22:85:05:fa:eb:29:fe:f6:83:00:d0:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:E2:87:44:86:64:4C:71:CA:65:BC:DA:FE:7E:DC:72:37:80:B7
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:21:5f:41:47:11:9b:f2:10:19:b1:e7:74:af:36:be:f3:de:
26:41:b5:22:5e:63:d2:87:d5:be:34:dc:9c:e3:20:6b:ab:c7:
e3:e9:53:9a:f9:d7:8f:4c:08:56:99:f1:69:9b:8e:c2:e4:95:
78:a2:21:6b:14:96:b4:9a:7c:41:4a:0e:88:85:24:b0:bb:b0:
10:e3:b1:5b:cf:45:79:1c:76:a3:bd:fc:bd:35:5e:19:27:7f:
cd:ed:ae:a7:03:ec:cb:ca:ba:da:0f:1b:0d:ba:db:44:60:71:
8a:b4:f0:e7:cd:17:16:5a:37:65:c4:bf:18:31:0d:93:72:47:
f2:d6:fe:59:85:58:83:20:cc:6e:3f:a0:e7:16:66:60:a1:15:
3b:4e:d8:ee:ab:33:63:df:81:2b:e0:e2:32:58:f4:2f:e3:53:
8a:af:eb:99:12:c2:77:5e:0c:7a:43:4c:72:17:f9:65:60:ed:
71:ca:3b:6b:ce:2c:1a:27:e4:15:37:00:f2:15:af:c8:74:f3:
ca:25:90:a9:59:8d:78:4a:12:fb:7c:fc:5b:2d:26:32:ec:55:
49:cd:a8:8d:c4:a0:6b:20:d6:28:2b:2f:fc:7b:b4:98:25:77:
e0:9e:ab:66:5c:2e:00:97:ea:da:35:1e:ef:2e:9c:27:47:41:
28:a8:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:04 2025 by rpki-client