Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: ld+IDd9S2H+FZ62nrL5M0tOtD02YdXkgC2kJv1/jgDc=
Subject key identifier: 91:3C:D9:6E:C4:57:2F:37:EE:56:D2:DF:0B:78:15:8F:29:65:35:77
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 019A503E6366401E4A41C338AC906BBE91B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 19:00:57 +0000
Manifest this update: Tue 04 Nov 2025 19:00:57 +0000
Manifest next update: Wed 05 Nov 2025 19:00:57 +0000
Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: OkkoSddE/vLKHhkYOdb5on57OjhdvG8BrkLKUdXWE2E=)
2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:63:66:40:1e:4a:41:c3:38:ac:90:6b:be:91:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Nov 4 19:00:57 2025 GMT
Not After : Nov 5 19:00:57 2025 GMT
Subject: CN=913cd96ec4572f37ee56d2df0b78158f29653577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:42:61:15:00:a0:7f:01:50:7d:bb:88:56:
85:ee:92:49:cc:80:a7:2d:f5:c6:eb:4f:9d:a7:df:
b4:ea:e7:a0:f6:fa:96:84:98:19:9f:47:78:84:a3:
4d:9a:a7:45:de:57:40:2b:5e:9b:45:cf:ca:af:49:
f0:05:d4:59:d8:46:e7:3e:08:85:35:0a:00:fc:47:
a6:df:96:c0:02:f4:70:f9:a4:11:fb:cb:4b:08:3a:
e3:0f:d5:2f:54:74:6c:22:f5:ed:5c:59:60:81:df:
f7:e9:36:96:06:e9:6b:cc:5e:50:fc:99:78:b3:a6:
af:8a:17:6c:0c:a5:12:41:67:41:bd:c2:34:3c:4c:
4f:87:92:11:e1:ea:b5:cc:f9:09:98:3e:d9:fa:6b:
63:5e:6a:6d:f3:53:55:9c:f5:6d:9d:1f:80:ff:e7:
8e:1b:b5:fd:23:51:c2:5d:b9:29:07:6c:55:b8:13:
08:5f:5d:55:90:48:32:2a:31:2f:e4:6f:d1:15:29:
7f:b2:6b:25:cc:41:92:c7:dd:c1:a8:ac:65:62:75:
19:9a:32:f6:21:2e:5a:da:f6:10:d6:6b:f4:0c:9d:
4e:77:b9:ba:00:a1:f6:b2:b1:af:1f:9c:c5:96:f0:
e2:2c:ad:8c:ec:17:80:70:db:b3:8b:10:ca:6d:d2:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:D9:6E:C4:57:2F:37:EE:56:D2:DF:0B:78:15:8F:29:65:35:77
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:07:15:f5:18:f4:53:2d:67:fa:ea:3c:ea:c7:8d:44:8a:
31:5c:6e:2e:2f:6a:41:84:bf:85:13:35:09:eb:71:7d:15:8a:
88:f4:7c:c1:2d:c9:7b:78:24:a8:22:52:4e:f0:7b:7d:c3:cf:
6a:29:7b:98:d5:93:64:fa:eb:6c:b8:3c:47:e8:91:5a:e6:a8:
22:88:0a:46:8f:23:e6:16:1b:53:e6:75:02:c6:23:70:7d:39:
2c:53:9d:63:61:94:97:8c:c0:e3:88:a5:f7:f2:e3:18:b2:ba:
19:78:f3:fe:93:b7:cf:af:7d:cf:37:13:c2:20:e3:30:d5:8f:
c2:8b:82:6b:82:86:2b:33:8b:3b:a8:6e:65:0c:6f:ec:b1:ac:
cb:77:6f:d9:53:d0:9a:9f:3a:ed:1c:30:47:51:cc:30:16:e5:
af:9a:e3:f5:66:40:29:85:6e:33:eb:36:16:c6:68:b5:3a:bf:
f2:1b:33:7f:66:67:90:d0:ea:49:49:e2:9e:36:5e:f2:c3:c2:
d9:47:fe:55:01:5f:7e:6d:2a:f5:ee:01:6b:a0:e9:1b:47:f1:
3d:33:02:a0:7f:46:e1:ca:91:1e:22:1d:a2:b6:5b:02:dc:ea:
12:b6:96:69:71:bd:ae:82:1f:64:6c:95:9f:97:a4:03:2d:de:
6a:94:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:29 2025 by rpki-client