Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: KEfRVk/EqkH43ARcpepE4tmljh0RVNHRXWX/j6W0prI=
Subject key identifier: 90:0B:ED:7C:E1:89:02:34:96:28:68:D4:BF:66:66:42:99:1F:A5:93
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019A50077A10C67B52B3504FD45EE883D609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 16B1
Signing time: Tue 04 Nov 2025 18:00:58 +0000
Manifest this update: Tue 04 Nov 2025 18:00:58 +0000
Manifest next update: Wed 05 Nov 2025 18:00:58 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: klepYNUSMmGejmDnqkgSUaGO++MHv4KNtspmnrkt4yw=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7a:10:c6:7b:52:b3:50:4f:d4:5e:e8:83:d6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Nov 4 18:00:58 2025 GMT
Not After : Nov 5 18:00:58 2025 GMT
Subject: CN=900bed7ce1890234962868d4bf666642991fa593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:37:58:d5:22:aa:9f:f7:da:e3:ac:ba:5d:d6:
0e:ae:1d:ae:02:ca:92:94:27:36:0e:ed:1f:88:ef:
dd:30:90:03:ec:e6:4e:00:46:12:a0:cd:5a:47:77:
03:e7:f0:fe:b5:be:db:a9:6b:dc:cd:c4:c5:46:47:
2c:40:48:84:51:f2:d9:f2:a6:4a:27:1a:3f:5e:3a:
6b:b2:41:2a:83:83:cd:74:34:43:60:31:e4:73:40:
20:77:c8:f3:42:d0:41:3b:0e:98:53:fe:b9:9b:27:
f3:11:63:6a:ca:9e:32:e3:25:9e:f8:aa:7b:b1:f9:
ae:e1:d3:19:45:d4:3a:a1:61:ed:e4:99:cc:5f:ce:
ef:5f:27:95:de:8b:1d:7d:d8:9a:9a:cd:fd:87:de:
b3:84:bb:71:cf:09:1d:67:98:5d:c4:f6:4f:cc:27:
2f:f4:ba:ac:bf:f5:55:00:e2:1a:8b:86:ca:42:43:
de:c0:5a:05:42:09:3a:ee:50:1e:66:52:42:38:67:
e9:6c:72:6f:42:2e:8e:02:ce:a5:4c:9c:47:c8:a2:
88:58:94:d1:42:7f:65:0a:26:27:cf:98:30:b1:46:
1d:cf:9f:92:d5:99:69:39:b2:9e:96:2e:2e:85:37:
7a:8a:8f:45:dc:4f:5a:7c:c0:97:a2:d7:b7:79:8e:
9d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0B:ED:7C:E1:89:02:34:96:28:68:D4:BF:66:66:42:99:1F:A5:93
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:03:71:e9:a0:73:9f:a8:05:da:78:46:31:55:b2:11:82:31:
61:ff:5b:fd:a6:3f:40:e8:db:36:c3:7c:74:19:29:3f:29:e8:
96:03:84:11:a7:0c:af:54:08:69:94:42:74:6c:ea:99:66:f8:
26:8c:f8:19:3d:a1:cc:e7:57:ff:03:58:3a:1c:fa:a9:ed:2e:
f5:94:6d:bd:96:7e:e1:7e:b2:6d:b1:bb:93:04:b5:d3:e2:1d:
ce:75:5c:7d:b0:bb:25:01:e5:76:4e:35:80:8c:14:f6:30:6a:
73:89:a8:d0:72:d0:fd:1f:d5:7d:1e:1f:5a:07:89:fe:6f:52:
2c:3d:32:ae:c4:76:53:70:d4:c5:97:6b:7b:1f:40:16:26:94:
a2:8f:7a:1c:ad:15:2d:59:be:23:af:e4:76:ba:81:42:37:4e:
b6:c5:02:81:c3:4e:f4:19:b6:32:8f:f5:45:e1:bc:1c:b9:0e:
21:68:57:b0:68:8c:8d:87:98:ca:f9:15:a1:a8:0c:29:ab:76:
5a:5a:80:9b:18:27:f7:0d:23:43:f2:88:69:ae:e6:1f:0d:be:
b8:af:9c:6d:a3:ea:fe:7d:85:09:ba:d0:22:d0:0b:72:e2:eb:
c1:c0:52:f3:b1:39:81:bb:ac:7f:e3:84:26:b5:ae:6d:48:c3:
15:7a:9b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:22 2025 by rpki-client