Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: bwJzeotR6kMopUb69/kwtizaNIZwf89Ht9eFXq7rE9U=
Subject key identifier: D1:83:D5:3F:C6:9F:0A:96:2A:B5:0D:DF:89:9E:5A:22:27:1B:04:85
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019A4DE21A0CBFC2732FD0C38E94D6778CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:54 +0000
Manifest this update: Tue 04 Nov 2025 08:00:54 +0000
Manifest next update: Wed 05 Nov 2025 08:00:54 +0000
Files and hashes: 1: 7kOLb5agTvJNiZmHbg7oPOSBoq0.roa (hash: 0jza8HkowMAhNdk3rHbioNC6hwm48YtOGKmOL8x2OVw=)
2: OltzXJJiE9XyxoEWZKwac5KxNNc.roa (hash: MXwRj0eiEFB7lamZjGpRz17XKhXqe6VMpTtPXa7Dwss=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: hBBo2Btf0NuvKsTZpyeww+2Xhl5e9JzFTx1HkuOGX7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1a:0c:bf:c2:73:2f:d0:c3:8e:94:d6:77:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Nov 4 08:00:54 2025 GMT
Not After : Nov 5 08:00:54 2025 GMT
Subject: CN=d183d53fc69f0a962ab50ddf899e5a22271b0485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:2f:4f:e0:3f:0c:ec:f8:5f:9b:f6:49:47:
68:7f:a7:79:14:ca:8a:a2:c9:54:81:e7:01:64:2b:
ee:1b:89:a3:66:8f:25:2b:d9:7f:fb:31:b8:1a:fb:
63:9f:49:7a:fe:0c:5e:e3:b6:56:ed:64:b1:dd:e9:
2f:59:17:0b:58:6a:c6:64:cb:46:2d:86:0f:93:0e:
93:d3:49:3f:90:28:2d:e1:49:3d:78:c4:7a:15:ad:
b5:4d:15:57:77:d8:67:b2:d6:3e:a6:b4:5e:d8:3a:
c6:88:ef:23:a4:49:aa:02:93:9f:37:7b:3a:b2:dc:
82:bf:e1:c7:3f:32:50:23:64:65:0c:90:aa:09:29:
12:f8:da:5e:96:57:a4:a3:cd:01:18:49:9e:a3:c4:
f3:c0:77:31:d6:f2:ff:f7:36:77:a3:e5:91:a5:e7:
d1:94:6b:61:f1:06:7d:4f:d2:5f:69:ac:2d:43:5c:
14:98:9f:dc:71:6c:89:8e:56:ba:da:b6:39:51:7e:
d7:2a:42:7e:89:5e:22:81:d1:20:70:91:39:66:fe:
d1:a8:5d:f9:91:71:4e:57:69:47:a1:a9:d1:8d:3a:
20:a5:9c:8a:e4:2e:a8:c8:e3:d1:c9:51:05:5b:93:
45:75:ea:4e:02:38:b9:f4:03:6b:90:36:eb:a1:6b:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:83:D5:3F:C6:9F:0A:96:2A:B5:0D:DF:89:9E:5A:22:27:1B:04:85
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:69:a1:13:bb:8e:d6:4d:2a:f7:27:60:97:e4:5b:15:91:9a:
73:c2:b7:e4:c0:6c:46:30:21:a5:a0:51:12:a3:2a:bb:f3:87:
2b:4e:24:6a:e1:0f:19:40:d3:fe:f6:32:cb:55:4b:8a:9e:38:
b8:2f:6b:a6:f5:01:9f:68:92:ad:dc:66:a2:45:6f:b9:cf:71:
31:35:1e:49:1b:d6:c4:c9:74:93:f7:e0:54:0e:99:20:0a:22:
35:0b:78:a2:74:fd:c5:43:e6:ea:c4:73:f2:56:51:03:c5:ec:
b3:c3:e1:7b:33:87:5c:51:33:b7:ef:3e:85:5b:27:e5:ef:19:
0d:44:42:6c:30:fd:0e:66:38:f9:c1:ef:2f:20:28:c8:b9:d6:
b7:34:a0:37:be:c4:ee:79:e0:c9:e9:61:8f:ee:d0:fe:be:96:
e7:dd:b1:8f:9c:67:ec:26:2a:53:e2:9b:bc:44:3e:3d:4c:9f:
b8:53:d7:8f:a5:6c:46:fe:d9:da:4b:72:67:39:43:08:5a:0c:
b2:f8:0c:27:d0:d2:f1:0a:72:a0:78:23:b9:f2:7b:d1:02:66:
bd:9e:01:70:4f:64:bf:0f:4e:97:f2:1c:25:75:9a:15:fb:62:
23:fb:3c:ca:2a:b5:c9:8c:90:a5:81:21:77:ff:13:80:f9:ba:
07:ba:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:48 2025 by rpki-client