Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: V+gATwtAlpuV2A21Tm7gybHynYNBKBsJWTD1IVOv/vo=
Subject key identifier: D6:78:40:9C:DE:25:46:BF:2F:1C:E9:69:A7:EF:C6:6B:31:F9:03:84
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 0199FBB35E41787D0EE478D8D44654375410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: oYVgjsiXxCLb3BP9gXTuZL+pqjRZT7cTEK9asAXDj6g=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5e:41:78:7d:0e:e4:78:d8:d4:46:54:37:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=d678409cde2546bf2f1ce969a7efc66b31f90384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:2c:25:31:ee:90:02:97:22:6b:33:d9:39:
ef:6b:17:ed:28:7c:a5:12:fc:62:f7:be:fa:b3:d2:
6c:4e:f6:50:e4:1c:fb:a9:bc:1b:97:59:88:0e:0f:
85:07:2e:b7:af:9e:fc:51:31:65:df:25:ca:1a:06:
6b:22:df:7f:1a:84:3b:a7:0d:3c:57:50:c1:41:5d:
b7:0a:0f:55:fb:5a:1b:65:a8:37:9f:b5:8e:53:9e:
9c:85:ab:f4:c1:f1:64:b0:f6:78:bc:ae:cb:7b:3b:
5b:14:f3:fc:06:8d:de:91:33:3d:6f:2b:bb:eb:0b:
46:d2:81:41:07:46:19:da:ad:4f:0b:ce:7c:42:ab:
cc:9c:a8:e1:af:ac:11:cb:55:43:a9:31:98:ec:b5:
cc:4b:ce:05:4e:69:a1:df:55:ff:f2:96:88:f4:6b:
cb:87:f6:b0:0d:d0:9e:28:1f:45:03:f1:34:d0:b6:
47:dd:6c:38:2e:4f:64:b8:25:9a:f8:03:cc:f7:d5:
ce:ee:04:ba:bb:c8:94:0b:a2:1d:85:78:1d:6a:46:
0a:1b:65:be:35:11:1c:b5:42:58:b6:36:25:a4:e2:
95:52:dd:8d:2c:93:79:86:24:fe:77:16:2f:06:da:
88:eb:93:25:57:1c:56:37:12:2b:06:06:15:e8:9a:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:78:40:9C:DE:25:46:BF:2F:1C:E9:69:A7:EF:C6:6B:31:F9:03:84
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:64:ff:05:34:a0:74:e4:ea:8f:ee:ee:2b:3e:96:89:ca:e1:
6e:b3:35:b6:ba:5b:46:d2:7f:71:2e:62:1c:1a:ca:8a:1f:e4:
b6:7f:2d:96:f6:9f:5c:4e:a8:46:71:c8:2f:ec:a2:bb:30:5f:
35:ba:5b:ae:90:ae:0f:f4:17:34:7d:b4:01:5a:0c:5b:c6:aa:
eb:4c:01:8a:be:1a:d7:b7:eb:19:7e:9f:3c:c7:d2:c1:73:db:
b0:3f:e9:06:45:b0:10:0f:4b:b8:43:66:fc:e5:41:c9:8a:29:
9c:ea:90:4f:8c:9b:f3:19:aa:1e:8e:46:97:5f:77:25:ff:8d:
f3:f0:7a:b4:3d:e6:2e:f2:5c:49:8d:8d:f0:8d:bf:b5:85:79:
95:e2:ab:52:de:c5:f6:01:32:2a:ed:03:ef:a6:5b:e9:a9:74:
d2:a9:92:02:31:1e:1b:99:dc:e8:b0:77:cb:84:f5:ff:6e:c6:
89:95:e5:de:e3:06:1e:f2:ba:dd:69:e5:be:fb:af:49:2f:ab:
f7:3b:c3:93:25:22:dc:f8:67:1d:a5:a8:31:e9:4b:43:d8:94:
b2:38:75:73:52:cf:84:a0:0e:fc:7b:8f:bc:e0:33:42:25:21:
01:d3:e7:43:41:b1:5d:fb:03:fe:33:1d:d1:57:90:53:88:46:
e9:7d:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:59 2025 by rpki-client