Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: w8gekxHEZ1Le7DpkCIUeENf+v7IrJBlXqMu9ODgM3rs=
Subject key identifier: 51:1D:CF:5B:0D:86:09:AD:B4:FB:AC:29:0D:3D:29:DA:B7:71:F8:1A
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 019A51873FD3ED8C76FD035039E50EFBA4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 01:00:09 +0000
Manifest this update: Wed 05 Nov 2025 01:00:09 +0000
Manifest next update: Thu 06 Nov 2025 01:00:09 +0000
Files and hashes: 1: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: O0i9o3wRFBOqy3ppBs1MB5BXVFLZK3179avMKb9xpb4=)
2: RWXMqjkV2JSmE_jNgsIntDAZ40E.roa (hash: JlOZyqtU1Xw8rdg1LgiJgni//bw4mMZ1Qt4Pvh5z6tE=)
3: VWg3f0Gbf8sa5f2R-1SRG52r7-8.roa (hash: /HyVmsWd+2rMbD1GgNRa5CoP6uMJQMzjsYwposvYEw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:3f:d3:ed:8c:76:fd:03:50:39:e5:0e:fb:a4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Nov 5 01:00:09 2025 GMT
Not After : Nov 6 01:00:09 2025 GMT
Subject: CN=511dcf5b0d8609adb4fbac290d3d29dab771f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:52:3c:9b:32:ad:69:3a:e9:5a:dc:e4:21:
d6:b1:0c:bc:84:d6:c1:8a:45:ae:b9:2b:34:f0:9f:
30:a5:a6:41:18:1b:d2:72:39:9e:8f:61:45:88:19:
d0:81:f5:c2:87:02:7b:80:3e:f5:fb:4b:d5:f6:35:
87:92:84:8b:8f:f6:d6:fb:fa:17:b8:28:5c:18:ca:
34:82:ef:bb:62:d3:1c:53:65:f3:5e:26:a2:e4:3c:
bd:43:29:bb:34:76:53:aa:3e:61:ec:fe:4a:aa:60:
0b:1a:7f:a6:12:ec:e9:3a:d8:5f:c1:2d:df:07:8d:
74:ab:19:0c:dd:c6:4f:fc:fc:29:16:c5:31:b0:ec:
9e:fc:dd:bc:19:d8:69:b0:eb:10:13:b1:7a:26:e6:
d3:bd:b6:c0:aa:72:6b:f5:8f:1a:46:e5:9e:9a:b3:
aa:9c:af:02:80:ad:d2:8d:f8:d0:d4:0f:fa:61:4b:
0e:0c:a6:eb:45:7c:97:fe:11:7b:04:65:0f:c4:d4:
d5:e8:07:00:03:65:f6:d2:c2:97:58:9f:e4:b9:ab:
71:a1:9c:a9:73:02:05:8f:26:71:9a:81:07:03:c3:
2b:1b:32:1d:ea:4e:20:91:c0:f6:24:46:b6:fd:b5:
7d:af:72:5b:9c:1f:16:ee:b0:3c:a9:9d:65:65:57:
77:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1D:CF:5B:0D:86:09:AD:B4:FB:AC:29:0D:3D:29:DA:B7:71:F8:1A
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:84:6a:cb:3e:40:5e:83:72:35:7e:ce:dc:bb:be:a5:af:ce:
87:94:c2:c4:a3:56:13:e4:5e:a1:5f:0e:3a:89:f9:69:20:c4:
96:ec:b6:20:bf:b2:20:24:53:5a:fd:56:ad:2d:2b:5c:53:dd:
78:6f:f6:03:74:cc:74:2a:74:c4:59:d1:a9:5d:b9:4a:aa:7c:
ef:2f:dd:90:cd:a3:8f:5e:e4:41:76:dc:b7:4e:91:47:82:48:
7f:dd:02:6a:bf:bf:3f:a1:c2:24:81:7b:43:38:e2:73:4e:08:
a7:23:ff:6f:5b:32:ee:7d:2e:be:37:11:ef:38:49:7f:87:7f:
a0:dc:c5:ac:25:f6:54:9b:8f:f0:d2:11:bc:0e:55:0a:3d:bb:
75:dc:bd:46:d5:3b:ca:e6:95:c1:0f:dc:16:1c:d6:96:f6:16:
be:0d:40:ce:5a:95:ac:5b:ce:0f:ba:ca:d7:42:ac:b6:cc:4e:
7d:b3:4d:88:80:0b:53:fe:09:94:db:1c:3c:c7:8a:a2:f7:04:
25:01:f5:ae:1c:e9:e7:a0:07:cc:af:1f:c0:8b:72:84:95:31:
5d:e4:53:2c:66:02:a5:e2:54:76:47:f8:11:9b:50:a7:23:15:
fa:80:1b:0b:59:bf:7a:93:5d:e0:ef:0b:40:40:21:71:79:ef:
40:31:a1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:53:34 2025 by rpki-client