
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
File: Q2T-c0GbyG1fLnK0FLa01DedW_U.mft (raw, json)
Hash identifier: pf81XBLTCgVp6VXfQUILMTHhW6fP8hENxOU2PYoxY9k=
Subject key identifier: 92:3E:24:E7:2D:3D:AB:F1:BB:19:2E:A4:AD:84:39:8E:EF:48:70:F3
Authority key identifier: 43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
Certificate issuer: /CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Certificate serial: 0199FC58875B57B98729F7D87E6C3B5DEDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: F_vaOKUje6wVSmmdNWKQj90pJEs.roa (hash: lSDHkW2GLzRQJdNUjIFPaHP5/gFVElG0iEqr3Re75Vs=)
2: Q2T-c0GbyG1fLnK0FLa01DedW_U.crl (hash: O+/HCTbTc5mNS8HI05q0NlzcfEVC7/NOnkZeBXOCgDA=)
3: mJRbgDWTWOF5d-waA4kjPdUwfKM.roa (hash: Cjg8Drs7NcYUITHcRSLo1PVz8MlOvWaOvbO+s0BbSe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:87:5b:57:b9:87:29:f7:d8:7e:6c:3b:5d:ed:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364fe73419bc86d5f2e72b414b6b4d4379d5bf5
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=923e24e72d3dabf1bb192ea4ad84398eef4870f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:25:19:68:a1:1e:d4:b1:d6:63:9b:26:e0:
ad:90:67:49:85:50:7a:06:4c:e2:38:ff:aa:99:19:
d8:52:ad:6b:d6:af:90:c7:a9:40:a0:33:0f:14:e8:
09:58:ab:cf:7f:82:99:1d:34:3d:50:44:4a:6d:88:
29:2a:c0:8d:15:83:77:80:ad:fe:6c:c1:2e:50:8c:
a5:82:81:27:17:eb:7c:f1:44:b2:79:be:ad:14:77:
75:36:d0:68:e4:dc:60:ae:cf:e1:59:9c:4a:9d:53:
80:45:e2:59:6a:f2:f9:4f:64:97:61:5e:8f:88:c4:
34:92:15:97:38:f0:72:04:60:31:fa:12:e8:5c:ae:
75:99:8a:3d:a7:77:66:08:f4:ec:05:32:d8:99:d2:
f9:51:d6:d3:c6:a9:53:53:1f:ff:d8:8f:3d:d4:5a:
20:78:68:9e:b9:09:99:9a:74:bb:7b:65:7b:1e:1a:
eb:31:36:60:e0:63:fb:6b:e2:72:ed:b5:62:f1:b1:
c8:df:83:b7:c0:c7:e4:f9:5d:8a:a0:e8:e3:60:1e:
f4:6a:7b:3a:54:ec:9b:30:60:29:b2:b3:51:64:61:
c5:5b:83:77:0e:3f:a5:3e:fa:d0:fe:81:c1:a3:94:
6f:56:3c:30:a9:c5:2e:88:b1:fe:8e:44:31:4b:a0:
df:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3E:24:E7:2D:3D:AB:F1:BB:19:2E:A4:AD:84:39:8E:EF:48:70:F3
X509v3 Authority Key Identifier:
keyid:43:64:FE:73:41:9B:C8:6D:5F:2E:72:B4:14:B6:B4:D4:37:9D:5B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2T-c0GbyG1fLnK0FLa01DedW_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0b1815-53d7-456d-9fb4-670308d1ec9d/1/Q2T-c0GbyG1fLnK0FLa01DedW_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:53:6b:4d:c3:3e:5f:8f:8e:01:42:6a:eb:c7:fa:c5:0b:70:
d7:cf:e0:2b:8d:b9:3b:34:09:49:ed:84:f4:20:ce:d5:09:e8:
4d:a6:b4:bc:85:2c:df:d7:7c:4a:70:93:7b:16:2d:54:df:c6:
10:7e:18:56:68:f4:2c:17:59:51:3c:0e:89:87:99:22:55:ef:
37:b1:a6:e8:e9:15:a2:c9:21:37:9d:5e:0d:b5:9a:67:e7:07:
17:03:4d:8c:38:ab:be:db:1a:19:10:f7:f8:67:3b:32:dc:83:
d8:c6:e9:3c:91:aa:05:90:39:ba:c6:a8:40:7b:a6:d9:bb:27:
cb:d5:f7:3c:13:c4:4c:97:c0:44:18:66:a0:3e:2f:2d:3f:35:
a6:49:68:ec:30:cc:4c:65:87:e2:2a:c1:0d:cd:1e:3e:2d:5e:
71:10:5a:95:8a:79:4e:22:c6:23:34:ef:b8:a8:98:7a:aa:78:
f6:3c:62:66:97:24:cb:30:84:1f:7f:0a:90:f2:ad:d3:a5:07:
68:14:b1:62:fa:08:a8:d4:30:bc:f5:f4:9a:49:07:5a:ce:72:
9d:d4:d8:ee:28:8e:6c:3d:b8:72:50:f6:c6:af:b7:aa:0a:83:
99:2e:21:5c:ed:51:02:69:78:4e:21:20:c4:5c:1a:ba:5b:52:
38:78:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:02 2025 by rpki-client