Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
File: QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft (raw, json)
Hash identifier: pLLKsfb1GZPlyLO8pB4dqs6YK9gVKfTBpk+Kn7ddLog=
Subject key identifier: 00:79:2A:37:A2:0C:A6:54:27:37:C4:F2:6F:2E:07:B1:15:DD:40:A6
Authority key identifier: 41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
Certificate issuer: /CN=412abb114f32570c5dd52066259bdc80c98768fd
Certificate serial: 019A51197AB3FF4109A967FD8CCB562666FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
Manifest number: 0E4B
Signing time: Tue 04 Nov 2025 23:00:15 +0000
Manifest this update: Tue 04 Nov 2025 23:00:15 +0000
Manifest next update: Wed 05 Nov 2025 23:00:15 +0000
Files and hashes: 1: QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl (hash: rcpZVW30tiU0/vbCi7j0xb6niZVN2o6e/sk1yoEmjM4=)
2: WjHlxqu14v8phrZRkyuwZHi4tA0.roa (hash: OgrQu5S4ReMsliJzFxYO2+I1LQQpOGuq17K/+Bl2UJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:7a:b3:ff:41:09:a9:67:fd:8c:cb:56:26:66:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412abb114f32570c5dd52066259bdc80c98768fd
Validity
Not Before: Nov 4 23:00:15 2025 GMT
Not After : Nov 5 23:00:15 2025 GMT
Subject: CN=00792a37a20ca6542737c4f26f2e07b115dd40a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:61:ee:ea:ed:fb:31:9a:c5:be:f5:62:04:
40:01:30:3b:9b:ab:0f:f4:a1:16:f4:13:81:e0:1d:
2b:6b:7a:27:42:1b:49:01:2c:7f:8c:58:ae:5a:f0:
68:11:cc:e6:27:42:e6:06:82:f7:a7:aa:c1:aa:f4:
c7:c4:4f:ce:64:ba:a8:bc:60:79:04:95:61:9f:61:
0a:d1:31:f8:b8:93:9c:0a:64:bc:a9:8a:83:df:5b:
9e:5e:97:0b:28:8e:4f:58:a5:c3:f6:fa:4f:29:ed:
b6:f7:99:fc:7a:df:9e:66:a6:a4:44:d6:dc:dc:79:
4f:f8:2e:19:0c:b5:8a:18:a3:4c:f7:3f:a0:c0:dc:
ac:5c:3d:2f:0e:84:51:8d:6c:4b:bd:ab:fe:00:a4:
3a:b7:d8:09:ee:40:ca:35:a1:6c:ba:bc:f8:22:bd:
20:a4:60:ff:86:e6:d9:1e:33:6b:7a:00:30:71:31:
79:09:97:82:ed:9d:47:17:1c:08:03:f6:c3:29:36:
26:17:46:0b:b9:68:00:97:78:7a:9e:5e:1b:6c:a4:
10:14:f7:9e:82:33:20:dc:df:3b:cc:9f:70:61:42:
d7:af:62:7a:87:31:78:22:9e:0f:ba:40:d1:83:72:
cb:42:8d:69:21:66:a0:ec:3f:ca:0c:6f:8f:2a:7f:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:79:2A:37:A2:0C:A6:54:27:37:C4:F2:6F:2E:07:B1:15:DD:40:A6
X509v3 Authority Key Identifier:
keyid:41:2A:BB:11:4F:32:57:0C:5D:D5:20:66:25:9B:DC:80:C9:87:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSq7EU8yVwxd1SBmJZvcgMmHaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/931278-9c5c-4935-a4f1-a3507dc674c2/1/QSq7EU8yVwxd1SBmJZvcgMmHaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:66:d5:b0:13:1c:83:75:dd:de:c7:b6:e0:62:e0:5b:b9:
fe:f1:b7:42:82:4a:df:7f:7d:9c:75:2b:be:db:10:fc:84:1a:
6e:d6:17:44:87:a2:dc:50:3c:4e:21:26:79:a3:a9:7e:dc:61:
d6:92:4c:a2:4a:3b:d1:49:7d:dc:7f:6c:6e:c9:22:72:5b:31:
4a:cd:fa:c6:1d:23:a5:d2:7c:42:8b:b3:3c:26:b0:a9:ef:b2:
d1:cc:31:2e:65:16:34:16:3b:a9:47:b2:c8:49:b6:1a:b7:26:
bb:19:54:9c:fd:3d:54:3c:7e:58:c9:0c:31:27:47:d3:6e:ec:
27:84:49:3a:b8:23:66:50:45:c0:ee:17:02:53:c2:a3:eb:1c:
56:02:85:30:e4:fc:f4:1f:93:0d:54:a1:8a:11:e8:6f:55:81:
b8:ea:9f:a2:d4:79:8f:78:f2:cb:f2:78:0e:d4:6e:7c:aa:c1:
7c:aa:49:92:3d:1c:55:97:53:2f:92:1a:6f:e5:2a:c8:9b:80:
d5:42:42:5b:6e:32:2a:13:d8:e6:b1:9d:43:91:34:cb:c8:fc:
c4:0d:dd:8d:b2:51:d5:96:78:27:05:97:cc:a9:67:70:49:cb:
9d:8e:41:91:38:77:6b:52:07:97:4a:f7:c9:19:fb:88:7e:3b:
fe:8a:2b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:24 2025 by rpki-client