Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: rpG7gArkcZ/hIx+vj35m2qAIUPPjbDxGStcdZQnwSSU=
Subject key identifier: D6:4A:64:A1:7D:BD:DD:98:73:29:4A:A2:90:A7:24:94:D7:49:5F:E8
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 0199FC21C02E0FC7EB459EBA2103F336F5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0B13
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: NNtuOH7Ss0GK2NCY4ASxIdJwy5M.roa (hash: XEhO+BECYJy48qc1PZIYHLHaFzNgbkvhwIUjzz8UOEI=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: nw2o3NThJIE+I4xQK2REEHpViGBcJmr5WFxwRoAJq+A=)
3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c0:2e:0f:c7:eb:45:9e:ba:21:03:f3:36:f5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=d64a64a17dbddd9873294aa290a72494d7495fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:26:8e:39:97:08:74:0f:9a:75:11:93:9a:52:
a8:b5:04:aa:12:36:3c:38:f3:57:c3:da:8b:c9:98:
06:d8:24:31:05:f9:13:5e:43:b0:49:ec:0c:10:d3:
95:27:87:ea:78:37:4f:79:90:b3:6b:fa:52:da:a7:
ca:39:34:36:2f:03:7c:e1:af:da:32:76:f4:59:27:
87:32:f1:49:04:f4:84:00:a0:04:17:59:47:73:77:
b0:4a:15:2f:a8:b1:b6:11:d5:71:5f:f2:a4:df:17:
d1:54:4a:b9:90:25:2e:6b:36:ac:b6:a9:85:d9:3e:
94:25:b8:b1:90:50:41:87:9d:11:48:60:9a:18:13:
88:10:d4:a6:ee:dd:9b:80:70:d6:2e:ee:b9:63:36:
39:fc:e8:e4:d9:3c:d8:c4:a3:2c:97:11:fa:ce:3a:
b4:8d:ea:4c:fe:39:36:28:f1:59:e5:97:93:86:db:
43:8a:e8:1d:16:d7:c8:b4:71:8c:a3:03:82:6b:03:
53:e0:2f:7c:b0:8d:fb:53:d9:db:36:59:e8:db:42:
29:6b:46:26:59:cb:6d:f7:97:a6:ce:f1:a8:7a:c5:
83:bc:b6:1f:77:be:33:94:71:64:17:a1:8a:39:78:
4f:ab:d3:b0:09:a4:ac:4a:94:f4:c5:3d:38:96:17:
2f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4A:64:A1:7D:BD:DD:98:73:29:4A:A2:90:A7:24:94:D7:49:5F:E8
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d7:13:59:49:f1:c4:21:14:85:14:d6:df:0f:de:ef:5a:dc:
05:66:14:5f:37:7c:ba:21:8e:e3:24:2e:8e:55:c0:aa:91:e2:
5e:28:3f:6e:e7:9d:ce:cd:42:82:91:4a:2a:1d:d1:f7:e9:1d:
25:3d:b9:5b:c7:10:4d:eb:5a:d5:16:88:66:31:d4:34:ed:0b:
db:ef:02:fb:d3:7b:0d:d5:85:e5:03:f8:49:de:0a:29:07:a8:
53:c1:11:29:74:1a:36:44:c6:e6:94:91:7e:bb:cc:c5:c4:f8:
52:77:ae:63:5a:4c:c9:06:e9:b5:d8:df:67:ba:be:10:f6:ed:
20:0c:b8:df:6f:a9:bc:43:ca:c9:67:8f:32:d0:76:06:32:ab:
d2:37:fa:fa:45:d0:59:0d:36:89:99:5b:b1:ff:6a:bc:ba:c5:
10:2e:9e:c0:d5:34:f4:87:c3:a8:e1:de:61:d2:ba:dc:e9:bb:
ba:dd:12:55:a5:f8:09:34:fa:a8:ac:9c:75:0e:e7:29:6a:79:
cc:f3:f5:4a:29:9c:77:6c:2a:56:ab:26:a4:59:29:a1:e8:94:
f1:40:11:57:83:3d:86:5e:fc:14:ef:c6:d1:4c:3a:4b:25:c5:
8b:8d:29:c6:a3:f0:56:20:8e:66:dc:fd:d8:4f:40:ca:7f:d2:
f0:11:5e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:14 2025 by rpki-client