Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier: OeLjiDE4dGxnps+Cvf40xjm/T4FuBsAySd6t+3FwpWg=
Subject key identifier: 99:A7:D9:55:55:A9:DB:12:7D:96:C6:F6:F7:66:B4:21:67:F1:07:C1
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 0199FC585D1C4A71656FD121F4DA1D7BDA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:13 +0000
Manifest this update: Sun 19 Oct 2025 12:01:13 +0000
Manifest next update: Mon 20 Oct 2025 12:01:13 +0000
Files and hashes: 1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=)
2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: mmWbWuh0W56S9/p2sP8WvIID1hjeX4ZHie2A+CJnFOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:5d:1c:4a:71:65:6f:d1:21:f4:da:1d:7b:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Oct 19 12:01:13 2025 GMT
Not After : Oct 20 12:01:13 2025 GMT
Subject: CN=99a7d95555a9db127d96c6f6f766b42167f107c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:40:92:fc:03:95:cb:73:f3:5a:81:8c:f7:
f8:6a:cb:15:22:e1:37:ae:de:ef:0f:93:af:a5:27:
62:2e:5e:a4:28:af:3d:68:1e:0b:0a:99:24:96:18:
b9:26:99:b7:f6:94:92:c4:a9:58:b0:e3:81:61:25:
50:23:f8:03:0e:c3:df:05:fb:38:1e:ed:c4:3a:b6:
bc:e1:07:25:3a:20:c3:d8:be:15:02:1d:d7:bb:95:
39:3b:40:7c:c8:0d:47:08:93:88:76:4b:ec:c0:51:
0e:36:da:2e:f8:e1:60:0c:ae:19:9a:11:19:fb:5c:
e8:a1:8c:65:40:ef:3d:52:b4:b9:cf:40:23:54:b8:
5f:5a:63:e6:82:c4:4d:49:c6:40:5e:d1:4a:5c:26:
06:cc:ba:bb:c3:94:7c:8d:90:b1:b2:4c:f5:81:9b:
cf:82:b3:19:11:b4:37:52:52:81:6c:d8:8f:f5:02:
a3:c9:e3:56:2d:3a:6a:73:c8:23:b7:69:7e:db:c6:
07:7d:b3:41:59:c9:f9:07:fc:c4:18:6e:4b:d2:71:
1a:2c:68:68:89:c2:a6:b5:b3:f0:05:77:dc:b1:6e:
25:42:b2:c8:ea:01:93:63:90:9c:98:fb:0f:75:ba:
4a:2e:a7:fa:10:13:8b:2c:4f:eb:6d:54:73:8b:52:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A7:D9:55:55:A9:DB:12:7D:96:C6:F6:F7:66:B4:21:67:F1:07:C1
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:56:47:3d:90:f5:38:d8:40:75:76:d5:d7:d5:cf:fe:55:0c:
48:c7:bd:88:30:c5:70:cd:3e:20:11:4b:07:a8:4d:8f:84:85:
ac:47:be:bb:c3:97:ff:61:69:2c:37:fb:cd:72:33:55:eb:af:
6e:27:ab:ee:9f:60:45:46:4e:1e:c6:b3:e7:13:06:cf:bc:5b:
f0:d0:28:e7:b9:26:60:e1:91:4f:73:e0:d7:bd:19:b0:55:a4:
e9:fc:1d:bf:50:93:b2:37:29:ff:4c:a4:95:9d:a1:bb:14:ae:
94:cc:87:b7:1d:0a:c6:a1:9a:d3:9e:57:c3:9e:a4:dc:dc:4d:
00:0e:5f:cb:28:6e:8f:d8:1b:7b:1a:40:9a:85:61:0a:04:02:
c9:5d:fb:12:2a:d7:25:43:1a:8f:3b:3f:3f:84:0a:e0:ae:26:
24:ab:f0:13:95:00:c1:1a:03:c5:75:54:a2:50:03:b8:8a:67:
56:0b:82:76:a2:ee:f6:73:e0:d8:70:38:f0:e9:d6:d1:e4:98:
7f:d7:c5:f1:ae:49:9b:00:e8:ea:47:37:d9:d0:73:f0:57:ca:
98:e3:dc:aa:5e:53:54:31:f6:61:7b:b6:b8:f9:a8:02:3e:eb:
68:7c:7e:33:76:3f:af:24:04:95:87:fe:6a:90:1d:1f:31:de:
16:de:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:06 2025 by rpki-client