Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: o+Ki0akrT0LbzLUtuafa/+bA8SxAow1y5Ze8sj0dw0A=
Subject key identifier: 73:47:96:AC:48:52:FD:5E:C8:F0:AF:FE:D4:2D:01:81:21:18:3B:78
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 019A503DAC674C815EF67259B168CAD7DC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0D8E
Signing time: Tue 04 Nov 2025 19:00:10 +0000
Manifest this update: Tue 04 Nov 2025 19:00:10 +0000
Manifest next update: Wed 05 Nov 2025 19:00:10 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: KndKSsYSq45j3RnCSp5imOX/EKSdkQF79Wm59oT8tl4=)
2: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (hash: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ac:67:4c:81:5e:f6:72:59:b1:68:ca:d7:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Nov 4 19:00:10 2025 GMT
Not After : Nov 5 19:00:10 2025 GMT
Subject: CN=734796ac4852fd5ec8f0affed42d018121183b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:36:fd:98:52:a9:5a:ed:8b:c8:8e:fd:a9:92:
9b:f4:99:da:d3:63:33:41:b5:e6:df:a8:21:81:d6:
e8:2d:11:62:01:1e:57:3c:b7:8f:b7:eb:20:60:aa:
bc:ff:07:4f:8e:6b:c1:fe:17:ac:33:16:89:f8:c5:
0b:bd:5b:8c:84:5b:ac:22:7b:89:01:f9:23:4d:44:
86:3e:41:83:3f:1c:f1:62:8b:6d:85:b8:0c:dc:3a:
9e:81:c3:bd:c3:8a:7f:19:d8:83:3e:ed:a3:00:48:
7a:73:2b:a6:2b:cd:fe:4e:27:cd:22:d1:7e:a7:66:
28:8c:f0:b3:55:35:3a:80:f4:68:f9:fa:5f:4b:f5:
2e:81:cc:c1:4b:bd:d6:c9:f2:40:11:47:4d:d0:54:
16:a5:28:67:88:af:b0:d9:34:cd:45:92:38:4f:8a:
80:7a:bd:ba:ee:9f:e1:4d:b0:2f:d8:4f:e3:a3:eb:
f3:d8:06:69:66:34:3d:af:13:8d:b5:f1:3b:0a:6c:
0d:8f:72:65:0e:62:9c:4e:21:43:5d:da:f8:ce:11:
be:1c:58:ad:1f:cb:da:9f:9b:8a:1d:82:cd:82:b7:
02:9a:12:8b:b2:13:48:95:e6:2b:ef:d8:66:57:27:
e6:71:f6:fb:2d:84:65:68:82:5a:d2:69:47:5a:20:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:47:96:AC:48:52:FD:5E:C8:F0:AF:FE:D4:2D:01:81:21:18:3B:78
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ae:29:11:c7:37:83:86:d6:35:19:30:0d:5a:09:33:76:b0:
e5:63:66:75:17:9b:ef:9e:59:e1:21:36:34:66:3d:cd:04:9e:
09:c3:23:b7:aa:84:82:4a:db:ea:2b:09:45:53:92:6a:6d:64:
1d:83:3b:ff:f5:bc:3f:9e:16:37:74:92:d2:fc:1d:bf:5a:e5:
d5:95:83:b9:2d:9d:7c:1c:97:7d:2f:09:68:0d:b8:b3:3d:fc:
fd:27:4f:f1:44:25:17:15:11:05:f2:87:44:51:20:85:c2:70:
5a:f2:c1:30:d5:31:5a:fe:23:40:f6:86:6f:96:10:1d:3d:36:
93:78:ad:d3:ba:57:dd:dc:c7:85:8c:4c:a9:23:9b:56:59:77:
73:c4:cb:c0:b2:f1:20:c6:33:8b:2e:47:95:c6:0e:a6:57:63:
fd:34:8a:47:ea:4e:3e:59:19:16:9f:88:b3:25:8f:53:62:f5:
d1:20:bb:e4:ff:03:ea:ab:33:69:af:56:f5:76:d9:37:5e:a3:
95:6b:cd:f1:d8:f7:53:dc:61:28:14:c3:72:24:c5:9f:7d:2c:
54:58:bd:a9:32:7e:a4:b0:e5:15:37:d2:f7:69:51:71:8a:fe:
a7:f9:7a:d0:f0:fa:b0:17:4b:2e:33:46:0d:15:74:d5:57:54:
b4:d8:d6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:02 2025 by rpki-client