Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: JigWW4Y8i5Vgiwm777OBOQx+Hnd/1FSK3TaUv9qDJ84=
Subject key identifier: 95:62:D5:6F:1F:62:57:D5:B4:EF:8C:7C:67:2B:AA:22:FA:F7:21:3A
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019A503E5DE228F374E49B24309661DCB011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0B09
Signing time: Tue 04 Nov 2025 19:00:55 +0000
Manifest this update: Tue 04 Nov 2025 19:00:55 +0000
Manifest next update: Wed 05 Nov 2025 19:00:55 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: PGL+hPH4KAELC6Wx30MaqPwmaqc1JmCxJzJR0cfuVz4=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5d:e2:28:f3:74:e4:9b:24:30:96:61:dc:b0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Nov 4 19:00:55 2025 GMT
Not After : Nov 5 19:00:55 2025 GMT
Subject: CN=9562d56f1f6257d5b4ef8c7c672baa22faf7213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:22:7e:69:1a:96:dd:dd:5d:19:01:07:1c:
e8:21:d4:78:39:17:2c:a6:d3:20:e6:ea:e7:c1:2e:
83:95:10:d2:ff:be:a5:cf:2a:58:7b:10:b2:0b:1a:
92:f2:99:67:39:ac:58:e1:2d:95:76:fd:19:56:50:
13:33:22:31:58:60:c1:8c:53:fe:0e:8e:72:ba:7f:
94:39:6c:64:66:29:2c:94:bc:78:7d:26:f6:02:f2:
7b:e1:ba:86:88:af:f8:5b:48:c2:8c:18:f1:e8:fc:
fc:92:de:5c:68:7f:a9:25:6b:35:72:36:3b:73:7c:
51:ca:fc:59:fd:bd:64:0d:81:8f:20:f7:5f:25:6d:
75:e0:8e:dd:c8:59:0a:45:ee:9f:ab:f1:c3:d4:56:
8b:2a:d8:f4:99:05:87:37:05:ea:fd:b4:89:d2:f4:
ee:7b:e5:3e:28:9d:84:ef:a2:81:6f:ee:c5:b7:8c:
12:8e:2d:09:9a:99:91:10:60:29:5b:ad:41:9e:ee:
c1:a8:b5:21:52:15:0e:ee:a7:03:24:af:94:d4:3c:
f5:be:8d:b2:05:20:16:24:e4:02:1c:ea:3e:40:0a:
bd:6d:7a:7c:1f:38:56:9b:71:27:23:10:b3:db:8e:
ae:ac:bf:f5:60:3b:09:cc:91:8a:ff:60:a9:6d:76:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:D5:6F:1F:62:57:D5:B4:EF:8C:7C:67:2B:AA:22:FA:F7:21:3A
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c8:b5:57:cc:cc:a5:d4:57:c5:d3:ce:4c:ec:e6:04:24:94:
e9:da:04:e0:63:76:de:10:20:f8:dc:93:df:74:84:5e:d5:76:
b9:ed:d4:4f:c4:b0:e8:bb:de:6d:53:68:b7:e8:63:32:96:2e:
e4:18:f8:24:d8:52:0d:05:af:44:6c:99:3b:83:6c:e4:df:91:
82:3b:c5:65:4b:aa:c3:43:50:f2:e7:f3:89:89:02:28:c4:75:
cb:91:e8:00:ef:55:3e:dd:a7:95:54:68:49:1d:72:7a:8a:51:
29:6b:25:a9:e5:19:13:68:bc:6f:cf:94:e3:1a:2a:58:f8:5f:
7d:18:7e:95:0a:e7:63:42:0f:62:af:b6:ad:d3:ad:0c:2e:1b:
f3:96:69:55:9d:5d:2e:bb:0b:59:4e:43:70:dc:08:99:c5:67:
7d:11:f7:27:ac:e8:20:18:4e:01:47:e4:7b:81:61:dd:29:0a:
84:d5:f1:b5:bd:48:57:cf:2c:59:d8:9b:c3:50:8c:82:39:cf:
f8:1c:23:70:e2:8a:b7:d1:85:31:76:ed:ec:95:6c:ee:c1:a1:
1e:03:04:23:55:9d:bf:92:97:6a:b5:fd:37:e1:32:7f:98:4c:
a0:07:48:64:ee:ab:7a:b9:f0:38:3e:cc:16:1f:49:1c:3e:a6:
d9:e0:f6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:49 2025 by rpki-client