Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: TbahHEd+Un/bZ7qjrgS82Y/3uq46HSfUaCmhp3PILpQ=
Subject key identifier: 15:E1:04:C6:AF:99:18:A2:96:5C:23:07:06:22:09:2C:95:C1:0E:05
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 019A4E18766EC6A4747EDCEA7CBD43F75B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 135C
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: Oy4xQ1UFgT+Ozi3Ciop7Hj4e0rlQnLWmmIVMrBG8oZE=)
2: v4w1l1in0yr2EsXsMhwK7smhe5c.roa (hash: 7H5QERbsex398Y/VCrt/sp2Qpj6rfwjWtrt7q4PvQAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:76:6e:c6:a4:74:7e:dc:ea:7c:bd:43:f7:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=15e104c6af9918a2965c23070622092c95c10e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:73:b9:c9:9e:5e:0c:e1:2f:af:57:5d:be:
63:6f:35:4d:be:14:a1:14:92:0c:04:42:61:60:46:
2b:a9:ef:ec:39:da:51:f8:58:e0:f9:24:63:08:e5:
b7:91:35:92:c0:11:bc:ab:54:c0:1e:0c:1a:d8:b7:
8d:d7:e6:35:d2:21:b7:dc:f4:e3:9b:a0:2f:ca:e2:
8e:85:98:b8:79:a0:d4:6e:ff:28:e0:3f:f5:c9:57:
43:a6:52:a7:5d:52:8e:6b:84:41:9d:d5:74:47:34:
88:ff:f8:5d:34:98:c8:8c:e6:3d:29:ae:9d:2d:21:
44:5c:09:c2:7b:19:55:79:a0:67:9e:95:f5:f8:da:
ce:c4:95:d8:fa:25:f8:10:3e:6e:17:14:6a:e9:e0:
7d:6d:03:b9:ae:16:b5:51:80:3e:3b:98:16:6d:e5:
d2:cc:8f:11:37:6a:9f:e6:3a:dc:cf:cc:67:ad:cb:
4c:8c:39:89:76:be:64:fa:37:5b:54:2c:55:d9:64:
da:84:e9:ad:07:3b:59:21:ea:5e:c6:dd:80:a5:14:
47:65:5e:ff:93:cb:cc:7f:20:a8:fc:30:c8:9b:88:
54:7e:c4:24:c4:87:75:93:3e:44:fa:6f:65:4e:c8:
b4:d5:06:1e:4c:c0:a5:8a:0f:b4:0a:ab:d8:48:7d:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:04:C6:AF:99:18:A2:96:5C:23:07:06:22:09:2C:95:C1:0E:05
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0a:d8:59:31:a7:35:5e:19:39:70:25:1f:c5:d8:a7:5c:8b:
b9:ce:c7:9d:3c:8b:91:ff:d1:32:5d:df:56:f1:aa:e3:6d:fb:
f1:8c:d9:2f:e9:f6:fa:da:d7:0e:16:a8:12:3d:0f:47:6d:7d:
2b:9e:ef:f0:f7:b1:4c:24:1a:04:e4:00:76:57:45:c3:51:eb:
b3:0f:35:33:fc:d2:40:91:5d:65:3e:36:58:0a:02:fd:6d:2a:
2b:27:af:cc:d8:f1:b4:73:82:2a:0a:a3:fd:1b:eb:66:ab:77:
36:b1:a6:44:a5:bb:e3:23:9a:bc:c8:db:67:65:ab:91:ca:da:
1b:12:63:da:8f:2f:5a:d2:d3:59:35:41:ae:c6:b4:e6:86:0f:
8f:e0:75:8b:6e:8f:f4:61:59:c7:94:f6:20:6b:49:b7:93:0b:
53:b9:ad:80:d7:b7:8d:53:3b:aa:a4:36:b8:44:90:d9:78:62:
5b:82:85:f1:31:8d:8c:16:87:a0:64:c7:72:e2:25:50:86:34:
04:97:c7:bf:53:1d:9b:94:83:c4:88:f2:d5:5e:02:d7:3f:41:
ec:14:42:cc:34:f0:86:48:04:83:cf:a4:e1:4c:5a:6b:ca:2c:
04:59:d7:0c:02:77:30:46:63:fc:6a:6c:0d:0b:5d:e1:4a:46:
46:82:98:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:58 2025 by rpki-client