Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: gz2+SDUp1/gJZ4Yvk3in0GvZca2JV7vtFxBy+VeG5/0=
Subject key identifier: C5:B7:E5:59:30:8E:14:C2:41:E6:05:78:93:C0:66:33:1D:44:65:E1
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 019A4FD05E46776617D2B4F298AB62C7564A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 11E7
Signing time: Tue 04 Nov 2025 17:00:46 +0000
Manifest this update: Tue 04 Nov 2025 17:00:46 +0000
Manifest next update: Wed 05 Nov 2025 17:00:46 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: 33wiYkjQZRgnioIoIYWq0I5I2hGc57EvYl2THKOJCzk=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:5e:46:77:66:17:d2:b4:f2:98:ab:62:c7:56:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Nov 4 17:00:46 2025 GMT
Not After : Nov 5 17:00:46 2025 GMT
Subject: CN=c5b7e559308e14c241e6057893c066331d4465e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:93:aa:8a:6e:d9:c1:be:9c:52:8b:14:2d:
7a:80:1c:6b:26:c9:a3:4c:a2:b0:a7:66:6a:71:56:
1a:05:31:4a:df:c7:9d:bb:6e:56:60:be:6f:ba:5e:
4a:a9:87:7e:80:5a:b4:14:da:30:27:1e:94:dd:3a:
61:ab:f7:ca:ec:cb:5a:4c:b3:9c:54:0c:86:4d:38:
65:d5:56:ab:9d:db:87:44:a1:81:b6:89:95:95:63:
d3:71:59:ea:92:44:93:57:be:23:7c:81:82:92:3a:
5a:1d:16:fa:6b:1c:25:19:b0:8a:2e:7d:89:a1:f7:
a8:01:cd:d9:f9:87:80:14:2b:bb:ea:7f:ce:15:d4:
d1:cf:a1:6b:4b:dc:16:2a:2a:b3:93:7c:56:4d:6e:
64:8b:15:2f:10:e0:73:b8:ca:3f:05:f6:fb:f6:d9:
ac:67:aa:fe:d8:68:a0:66:07:7d:a3:f0:75:65:f4:
93:7e:59:fc:7f:68:7e:e9:ce:53:3c:8c:4f:8d:d3:
60:4d:a4:2b:0f:1a:97:a3:eb:df:7f:ce:37:05:6f:
8c:1f:95:b5:7b:00:39:48:c1:6c:ec:10:0a:f2:e1:
88:7f:85:8f:07:d3:df:4b:06:ad:cb:5a:c9:0f:c2:
42:12:9b:d1:83:31:36:7a:ed:23:21:3e:06:7d:4a:
db:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B7:E5:59:30:8E:14:C2:41:E6:05:78:93:C0:66:33:1D:44:65:E1
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:90:65:a2:51:54:8a:71:94:c4:eb:e5:d6:b0:f4:a6:28:f6:
57:cb:81:c3:2f:99:f5:36:e2:4b:f7:bf:de:23:bd:85:72:42:
fc:6e:a4:dd:be:4e:33:e0:0c:0b:20:5e:37:4f:2d:d1:b2:b1:
8a:c4:01:b2:f5:d6:2b:de:90:40:8f:9c:df:38:ab:8b:cf:f1:
62:85:9a:67:3d:c8:40:a0:e5:bc:fd:bb:a8:61:b5:b7:4e:b0:
9c:d1:7d:40:64:de:80:e6:63:6d:f2:7f:db:98:d7:97:23:79:
95:20:24:5f:d7:6b:11:63:c7:52:d8:e4:d5:c7:ed:7b:bf:8e:
56:24:69:35:e7:9c:df:50:e0:7d:ec:90:99:2b:78:3a:ee:ec:
28:91:fb:57:2b:c4:22:3e:e8:99:f4:4f:f7:7b:93:68:b5:03:
a0:14:7b:92:cc:8e:ff:d5:fe:91:41:c7:26:21:96:c1:d3:9c:
92:6b:c1:71:9e:23:7e:ad:da:1c:a8:23:2d:6f:95:be:b4:c2:
fd:ef:38:d1:24:5b:f3:8c:30:84:68:ff:64:23:cf:13:bd:b8:
19:71:28:ac:4d:bb:a8:df:61:bf:df:88:b0:ae:83:8c:5b:46:
54:60:b1:b8:9f:fd:d8:19:f5:d3:fb:70:96:08:4e:d5:81:d4:
a0:af:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:59 2025 by rpki-client