Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: vc3CW/LhGXKSgx6bbzXxm3zt0XI+a7okkNDI1WTgziI=
Subject key identifier: DF:74:0E:DC:2D:FA:C5:FB:F6:CA:8D:C5:D0:09:6F:CB:CE:CF:AC:AE
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 0199FC8F67602C2F6B08AD50EE32B4C2EBDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0BC5
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: mUUFnwQttk3UdmlCDK3DAp0A3NSOsOATbS2J+nnqnZg=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:67:60:2c:2f:6b:08:ad:50:ee:32:b4:c2:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=df740edc2dfac5fbf6ca8dc5d0096fcbcecfacae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:9c:07:f2:1c:d2:39:36:51:8d:6e:4f:c0:
be:c7:90:ec:7e:0f:03:d2:70:d3:af:32:0c:4e:33:
03:d9:20:bd:96:9e:9b:57:5b:4e:c6:01:e9:f0:f9:
d8:e6:70:28:5f:7f:af:cf:a1:d5:4e:ee:03:de:26:
ad:f0:c1:62:4a:17:65:1b:7e:6e:0a:42:22:b1:15:
56:e1:72:dd:4c:92:ea:6d:ce:7e:52:40:94:33:c3:
63:1c:b6:94:95:78:29:a3:41:db:11:99:b4:f1:23:
f8:3d:96:3c:b5:82:45:77:70:61:81:54:75:74:35:
a0:5a:d0:4b:6b:88:d5:80:71:0b:7d:72:92:ba:75:
ad:14:35:de:0f:a1:00:12:75:55:d5:3e:ea:00:b1:
24:15:67:c7:70:5f:73:30:f1:32:3c:8a:7b:f3:ec:
3e:59:29:f1:ef:0b:b5:33:37:bd:11:cc:fa:5f:b6:
2b:97:54:0c:b0:6e:9a:bf:fe:dc:db:67:fb:92:53:
e9:3e:9d:d7:a2:d3:67:3c:34:47:b0:33:fa:bd:8e:
31:52:30:24:f0:3e:75:54:b0:d8:22:d4:c7:c3:8f:
6e:39:7b:99:54:89:12:19:d7:ba:0d:aa:c5:14:1b:
46:86:aa:24:aa:a5:14:9c:3d:be:b5:eb:a3:b8:3a:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:0E:DC:2D:FA:C5:FB:F6:CA:8D:C5:D0:09:6F:CB:CE:CF:AC:AE
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:a3:98:5a:2a:b6:6f:ca:8d:75:ee:32:5a:63:fb:26:72:58:
ff:32:07:b6:e6:9e:91:36:5d:3c:7f:5c:6c:3b:89:c7:2d:dc:
4b:ab:e4:63:fc:53:20:ea:2f:df:9f:51:bb:20:18:39:6a:23:
4a:9c:91:56:e4:30:e7:8e:47:14:bd:f5:46:e2:9f:55:c8:9c:
05:00:a5:ae:47:9c:41:6a:fa:06:54:cf:af:12:98:8b:f4:09:
91:ea:30:ad:30:ee:19:19:01:54:80:b0:cf:b0:f9:2f:1c:5d:
0b:3a:51:5c:4e:e0:96:45:4d:61:79:5c:02:49:51:f7:ee:63:
24:05:45:8a:f2:db:52:b8:57:6b:c0:ee:ee:16:45:86:50:c3:
49:68:4f:86:7f:f9:dc:8c:b8:9f:a5:ee:09:c5:48:98:d4:02:
d4:91:e9:1d:90:91:27:5a:e8:3c:d9:7b:26:fe:09:08:a5:f0:
04:e3:56:36:01:82:52:6b:db:ab:f0:49:75:40:4b:e8:62:6b:
dc:54:df:18:8f:d9:61:8a:22:f9:cf:40:00:26:93:50:a5:49:
2c:8e:fe:9c:4e:a2:97:fb:32:4e:08:53:8d:72:8d:27:d3:76:
c2:ef:e7:f2:5a:62:06:af:bc:69:4a:89:4b:9d:81:0a:f6:12:
28:16:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:45 2025 by rpki-client