Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json)
Hash identifier: 8wrfbWYC/pnPzOBaI3jGdtixXrA12MY/i4Kz4HH+3Bo=
Subject key identifier: F6:4F:FB:94:34:7E:5B:C4:87:F3:41:B0:02:CC:D5:96:29:D8:F3:E2
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 0199FBEA7B7D2B9CDC55161C80876762F81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
Manifest number: 048D
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: 2TZgxnjJF7qDIIxEY-THpPbZMQA.roa (hash: 0yx1MB4qhr47LhIlbMqbHpvd6J1nBsWh1WvKzMD4atk=)
2: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: xFqd2JNXDAj2dda1lHgDq2q1P+6k678dFnA9u7gTUi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7b:7d:2b:9c:dc:55:16:1c:80:87:67:62:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=f64ffb94347e5bc487f341b002ccd59629d8f3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:09:bb:0f:13:7c:4e:99:ae:65:bf:66:40:
71:8e:2f:76:f4:af:c2:8a:65:f1:4d:99:68:4b:72:
ca:88:aa:05:88:d2:a7:d5:cd:cf:85:bb:b0:b9:88:
e2:49:b5:cb:e5:8b:72:48:6c:1b:b1:5e:47:80:f5:
71:1c:1f:34:8e:d2:3a:d0:73:bb:67:bb:0f:ef:c3:
27:b7:73:11:df:62:a4:5c:a9:f3:fe:8a:ef:97:05:
11:f8:54:7b:25:44:eb:d7:19:1d:bc:16:f6:fb:e5:
f0:9f:84:94:c4:e4:07:2d:cf:b1:bc:b6:e9:1b:bb:
76:62:db:8d:84:f8:0e:7a:1b:40:26:e7:15:2e:11:
d8:bb:2c:ca:f9:7b:ea:ac:34:ee:6e:cb:c6:fa:ac:
2c:77:5b:50:fc:ae:4a:fe:82:0c:df:10:e1:46:7f:
95:b2:a7:56:88:db:87:15:ca:9f:13:49:ad:d3:dc:
2a:ca:11:c6:a0:f8:58:d6:4f:98:56:3c:eb:bd:e1:
1f:f7:b3:71:fe:c2:0c:7a:1c:3f:66:ce:6c:a3:a9:
95:c1:a9:cf:37:4d:18:1b:74:57:2f:37:35:98:42:
ea:4f:c8:c9:48:bf:34:34:fb:e4:84:42:ff:1c:e4:
58:89:e4:3b:bc:ea:01:76:93:dc:4d:65:77:59:b1:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4F:FB:94:34:7E:5B:C4:87:F3:41:B0:02:CC:D5:96:29:D8:F3:E2
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ba:a3:cc:af:95:7c:22:bc:ee:c8:70:95:9b:62:92:ad:4a:
63:4a:c2:d3:fc:47:91:7c:07:12:84:5c:12:6e:09:2f:33:2e:
21:f6:92:7e:97:55:d5:b3:6c:9a:24:19:ea:93:69:52:65:63:
ce:63:64:08:62:39:cc:f6:c0:eb:02:e2:97:ab:db:58:21:b4:
a7:bf:d2:70:bb:5c:3c:31:2e:b0:30:a0:a0:e9:5f:8e:66:c2:
07:e4:e0:64:43:f7:4b:9f:ef:6d:cf:4a:47:34:87:59:c0:a3:
83:44:2a:dc:8f:49:1d:3c:75:04:9d:0b:66:2f:8b:ed:99:53:
ad:7c:ae:1b:57:49:11:87:da:e4:9e:df:27:5a:94:de:32:ca:
41:81:af:0d:7a:02:ee:2d:a6:10:a6:0b:15:85:d9:7d:0d:5a:
54:09:dc:1a:23:30:53:6a:1f:42:d1:60:d4:8e:7d:5b:0c:e8:
8f:b1:7f:ec:cd:41:b3:ca:47:7b:09:f4:a0:4b:58:95:19:f0:
37:84:51:1d:46:be:d2:06:88:b6:17:a4:a4:99:05:c0:af:09:
33:82:d7:a0:a0:b5:bd:8d:22:82:6a:9e:47:08:d3:c7:c2:a0:
ff:6a:14:8b:48:7d:c5:0a:8d:4a:b7:5b:34:a1:30:dc:18:9c:
f2:22:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:18 2025 by rpki-client