Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: UHB+aBoJ5mry+aSSYMwZheJoCAC20FitKVAk1/2egOI=
Subject key identifier: DB:3A:DC:E5:9E:F2:8C:5C:8B:9A:FD:7F:C7:89:05:91:19:2C:14:1A
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019A4F626D39A900325F9247D71345C08A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 15:00:41 +0000
Manifest this update: Tue 04 Nov 2025 15:00:41 +0000
Manifest next update: Wed 05 Nov 2025 15:00:41 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: KQXBQmB29wpCoiD5H4yvN52sTu3TjWACGDbOXmGuFjQ=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6d:39:a9:00:32:5f:92:47:d7:13:45:c0:8a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Nov 4 15:00:41 2025 GMT
Not After : Nov 5 15:00:41 2025 GMT
Subject: CN=db3adce59ef28c5c8b9afd7fc7890591192c141a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:01:ed:ed:39:17:01:22:04:8f:ab:a8:09:
33:ad:2f:4c:e9:cb:27:6a:90:db:1b:aa:b1:98:cc:
6d:cd:46:f4:08:f5:a8:f9:35:a2:68:2c:a1:ba:08:
50:74:8f:ff:e6:1a:c2:19:3f:97:5c:4a:3a:fe:38:
73:ca:a5:87:69:1d:3c:73:ab:09:48:20:96:5c:e4:
d3:29:6b:79:81:f7:f4:b9:7f:b0:0d:83:d9:45:84:
54:2e:8d:90:c9:95:ff:ef:dc:36:c6:f3:49:71:49:
05:00:b2:3b:f6:93:de:73:33:25:08:10:f8:ac:f6:
31:e1:85:ce:6b:be:60:6a:0f:61:d7:f7:cd:22:75:
ee:50:4f:b0:c3:ae:d4:41:d4:13:5a:54:d7:5c:1e:
19:d7:da:a6:7a:5a:6a:4e:b8:69:99:91:71:e3:a6:
1a:5c:07:c0:b1:55:a7:eb:83:88:8f:4a:d2:ab:a4:
c4:d3:bc:74:8b:dd:c1:41:73:84:c7:84:ac:94:bf:
d5:c4:e6:b7:c2:c8:b0:c4:f0:59:39:0b:e2:b5:b5:
62:a3:5a:e1:b8:ee:99:52:39:4a:a2:91:38:06:a5:
0b:46:f1:64:cf:06:67:24:d1:9a:71:25:db:93:0b:
65:80:b1:db:2f:24:21:56:cc:ee:ee:c7:f9:f2:ef:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3A:DC:E5:9E:F2:8C:5C:8B:9A:FD:7F:C7:89:05:91:19:2C:14:1A
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:02:88:9e:34:28:37:d6:96:68:fb:88:64:20:38:68:83:73:
88:9c:d0:5f:85:88:87:4e:68:73:08:91:cf:46:70:4f:36:23:
ef:21:97:bc:73:5a:3e:83:d3:0c:b8:4d:06:2b:a8:be:96:df:
62:6f:9b:f1:d7:aa:22:75:79:ba:ef:18:99:98:1d:94:ad:a3:
e8:27:df:7a:35:79:17:23:7b:a6:1b:8f:52:fc:8e:6d:ed:30:
9a:42:4c:04:c8:7b:e9:70:34:d2:70:c3:b8:6f:4e:9d:3d:73:
41:29:06:84:67:cc:39:3a:05:0e:e8:96:ed:6f:a8:84:d4:04:
1b:1a:c4:c4:c8:d1:8f:94:c3:b6:b4:c8:d7:66:dc:d3:1a:71:
81:a8:a2:2f:b4:97:f8:23:de:80:a7:f1:d9:d6:a6:b9:15:98:
c3:d4:96:bd:92:ef:8f:99:d3:0f:3b:17:75:d5:53:2a:03:02:
d1:4d:c8:30:91:a4:2f:db:a8:ad:a5:a7:85:5f:66:99:0b:75:
c3:32:26:b1:eb:2a:7f:4a:52:3c:39:4e:6a:84:e1:59:3e:09:
27:15:88:06:9c:62:bb:fb:7d:73:e5:ee:ec:bb:02:67:3b:bf:
fd:3d:9e:ae:4a:92:74:5e:54:99:8a:5e:b2:bc:9d:17:2e:41:
e2:b6:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:56:53 2025 by rpki-client