Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: kLUhYxwiZZCkCOoPN8AP9ofU/x0vD056J7/8LXBmnO0=
Subject key identifier: 21:4F:8A:F3:36:67:65:38:47:38:BE:5B:8A:43:15:3F:57:ED:A9:3C
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 0199FD33EDF8BC4215FF93C492E12090B22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: 2cU_Yyosgv72VzuSZ-lEPM4bEA0.roa (hash: rOVsbZQ+258/yYvznSDjCoRvmCP4xDAfS/95mmV0VJ8=)
2: KhZxCrijEh6I5tUjdOiH08SDAlU.roa (hash: d7J/i0PvapKbq1ZXNQfO7tB9y3eyZqeGbgRInR/S46w=)
3: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: itJqWC0jy+rucm4Pwqv3iSWawTdt09T0F2HCvbBE8W4=)
4: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ed:f8:bc:42:15:ff:93:c4:92:e1:20:90:b2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=214f8af3366765384738be5b8a43153f57eda93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:22:00:47:ba:cf:6c:98:06:70:45:5e:b7:
f8:14:48:bf:d6:24:99:e3:0b:16:2d:dd:ec:eb:97:
fd:c2:f2:aa:45:9b:97:09:8d:14:f0:f7:61:90:5c:
b8:72:87:7a:98:3a:de:18:00:85:b5:34:7d:6b:8d:
67:69:e4:c8:96:1a:be:c4:8d:0e:19:c8:60:53:8d:
05:a6:5c:7b:ad:06:ed:ba:44:d9:5f:0e:b1:f1:d9:
f7:d7:7d:b9:ed:2c:a3:30:fe:a4:07:eb:79:4b:db:
ee:1a:75:70:bb:a5:47:e2:e6:d2:17:8f:a0:5b:ca:
9d:24:bf:e5:4e:64:e1:64:b9:92:cf:4a:d3:62:91:
b1:56:23:b7:db:f8:6d:e9:d5:2f:93:15:e9:64:af:
26:fb:24:01:7a:80:48:d2:2b:c8:fd:88:ac:18:9f:
10:48:bd:19:fb:73:8c:14:6e:79:4c:4a:a9:60:8e:
d7:5b:e0:94:2a:5f:02:e1:3d:8f:14:09:dc:38:b9:
a3:49:f0:7f:43:b5:35:c1:8d:e8:cd:5a:6d:df:34:
c8:4c:a3:07:29:85:90:b3:29:34:db:8f:d1:8e:9d:
69:db:68:48:d5:22:58:ae:6a:ba:c5:ae:e2:c9:1e:
11:14:11:76:24:1d:57:3d:e9:2a:a8:71:7d:85:ac:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:8A:F3:36:67:65:38:47:38:BE:5B:8A:43:15:3F:57:ED:A9:3C
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e4:70:25:83:2e:fa:b6:cf:9c:97:9c:05:a7:63:5a:5b:ae:
b5:14:33:5c:34:a2:9f:32:17:a5:e7:2b:39:58:9d:58:7e:d4:
75:62:a7:1f:82:7f:23:7c:ff:a6:96:78:ec:23:79:60:74:a5:
d5:58:2c:7b:57:74:bf:40:7a:fa:9c:00:52:4e:57:7b:cf:d0:
01:aa:9d:9a:cd:bf:25:31:68:bc:74:16:a3:fd:05:41:ab:90:
15:85:0a:c0:77:fe:15:16:9c:d1:f4:d0:ba:a7:f1:fe:72:b8:
7a:82:35:83:8e:4b:d8:d6:a5:bc:50:45:8d:c5:ee:5a:f4:8a:
40:79:76:d3:af:9f:f2:5b:0f:a0:ab:ae:9d:9b:cc:a3:c5:00:
bd:85:9e:88:34:21:36:58:7f:07:0d:b0:4c:b5:5c:9a:8e:2c:
f8:cb:f0:11:41:05:41:0c:a7:d1:8c:50:1a:53:6f:f3:39:84:
51:17:f7:5c:6b:73:cd:7d:99:a3:87:47:68:3f:b6:8a:2e:97:
af:41:63:c1:51:6d:ce:d8:94:e6:8e:c0:f1:bc:0b:79:3e:e0:
db:9e:e7:83:5b:94:44:69:24:51:d2:4f:4d:0e:26:c3:1b:bf:
e4:23:a6:be:76:49:eb:52:9e:da:4b:6b:a2:bf:ac:f3:db:c3:
de:1f:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:41 2025 by rpki-client