Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: i0DHU+rHXllQ+W+r3k5FrVKBwVeqnxBXR41h4++Fjr0=
Subject key identifier: 7C:04:4A:60:16:DA:CB:AE:73:C9:9E:BD:FE:D4:FC:B3:8C:63:34:48
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 019A4D745B853101DD5B754947CA27131017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 120A
Signing time: Tue 04 Nov 2025 06:01:02 +0000
Manifest this update: Tue 04 Nov 2025 06:01:02 +0000
Manifest next update: Wed 05 Nov 2025 06:01:02 +0000
Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: sbO7t+xUr8g2C6ztHJSQSuQkyT/sYymaoV4WYCwW9HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:5b:85:31:01:dd:5b:75:49:47:ca:27:13:10:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Nov 4 06:01:02 2025 GMT
Not After : Nov 5 06:01:02 2025 GMT
Subject: CN=7c044a6016dacbae73c99ebdfed4fcb38c633448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:6c:c0:92:d6:aa:44:26:db:8d:31:32:d6:
2f:b9:b2:26:d0:a9:44:98:d1:89:14:94:18:c7:54:
55:b0:3c:eb:7d:e2:8e:b3:fc:d6:b8:93:90:02:8c:
0b:f6:86:5a:d8:2a:a5:ed:32:eb:27:a9:d1:66:5e:
31:2c:4e:1c:e8:cb:29:1a:e5:eb:ba:04:79:74:a7:
b7:70:d8:ce:dd:64:02:1e:ee:26:26:e4:27:c9:7d:
1c:ff:85:ed:0d:97:35:8c:97:c6:26:8b:13:80:46:
8a:13:7e:2c:d7:ba:ac:50:45:8a:83:2d:5c:2b:48:
60:28:29:6c:43:cd:ea:be:33:a4:7c:75:4d:f4:83:
0b:14:78:81:fa:e9:01:6d:95:e5:89:bf:ac:1a:f8:
d0:2b:fe:62:eb:f0:46:eb:f4:4f:f1:48:31:78:39:
50:c4:b8:52:f8:95:25:69:00:20:9a:d2:5b:86:6a:
92:19:f4:41:99:92:e7:e4:23:e9:11:f3:aa:01:6f:
be:a8:73:e8:ef:f6:74:a4:0c:cb:ad:e5:89:16:39:
c3:a3:b2:c2:ad:cc:8c:96:38:34:db:ab:71:e1:e2:
b4:ad:e5:3a:0b:7a:96:16:56:1b:16:09:01:80:4a:
aa:4a:b2:55:15:98:63:e4:3f:dd:01:38:21:57:95:
3b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:4A:60:16:DA:CB:AE:73:C9:9E:BD:FE:D4:FC:B3:8C:63:34:48
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:05:28:94:03:b0:af:49:a2:d8:96:61:95:42:26:b6:39:ab:
ad:84:04:fb:a3:8d:61:be:64:88:42:ff:bc:ef:a8:2f:a5:38:
f6:bf:09:c9:5d:bf:60:47:bd:b2:2f:15:42:b6:8a:5c:6f:93:
a2:ac:ff:eb:71:3a:e4:3c:70:16:0a:bd:2e:36:d1:62:c3:90:
8a:bf:3c:d5:ff:70:a7:41:77:fa:a6:91:12:c3:42:93:85:5c:
48:3b:62:ec:b4:4d:ea:a9:ba:a8:4b:93:b5:a5:42:0c:45:00:
eb:6e:57:17:5f:92:91:8c:81:57:f8:7b:50:74:43:9d:d8:03:
33:e3:7c:49:3f:94:d5:be:63:eb:88:ae:61:a3:a7:c5:f0:64:
93:f0:d3:69:2b:c6:da:47:04:d2:68:c3:d9:13:ee:6f:60:8a:
45:2d:29:9d:96:57:ee:00:b8:f2:57:4c:19:0f:e6:ae:fe:d3:
f3:be:be:9a:c0:1a:a8:b4:b7:83:19:0f:5c:bb:de:47:88:c9:
c6:bb:88:b5:96:9c:98:af:bc:95:fd:ca:f8:59:dd:9f:94:ef:
09:11:dc:f1:76:28:28:c4:61:9a:c5:4f:58:50:7e:2c:25:b2:
4b:82:25:ca:07:2d:5d:2e:af:ab:76:30:01:5b:9e:e3:0c:a0:
9b:a4:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:13 2025 by rpki-client