Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: KLoH34vtH128yHUrQ9zNQPWywVhrxN9LTjEJ4Tm2+3M=
Subject key identifier: FD:88:50:C3:1A:D6:CD:C6:AD:5C:29:98:39:BE:9A:6E:5F:96:05:C2
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 019A4F625434B0F4E5C3ADF83BC5F142E821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 1380
Signing time: Tue 04 Nov 2025 15:00:35 +0000
Manifest this update: Tue 04 Nov 2025 15:00:35 +0000
Manifest next update: Wed 05 Nov 2025 15:00:35 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: P8r0bc3cljmCfBx136KPQShS3O8.roa (hash: zmPirJcGZiuowifL5CV0/efp4MLtVscwhTPAYNjTuUI=)
3: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: qQ85uR01Hzh6z14S5AO3cBaQJ/pdyP5SmBKWokn4nr0=)
4: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
5: Z4jvQpNliqhDur0DLqjSiIw-Y0A.roa (hash: DfQMPGoZNssvuxBrhCXJLfOHeuzlWhIa//2s8bwFkhw=)
6: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:54:34:b0:f4:e5:c3:ad:f8:3b:c5:f1:42:e8:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Nov 4 15:00:35 2025 GMT
Not After : Nov 5 15:00:35 2025 GMT
Subject: CN=fd8850c31ad6cdc6ad5c299839be9a6e5f9605c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:63:cb:79:ff:5e:45:c6:8a:50:6d:e5:23:60:
07:cb:0d:b9:36:c6:f6:d4:a5:42:83:b4:e9:8e:3f:
21:b6:e3:01:ef:93:b6:de:91:6c:18:f4:f4:c0:48:
40:e5:c1:ee:22:6e:8c:10:81:46:a5:bb:a4:25:f6:
a4:21:71:1f:7b:32:0a:86:fc:71:1d:2a:5a:e6:c1:
1f:65:17:6d:2e:db:90:7e:3c:cf:3b:4d:e8:dc:a4:
42:e0:ee:e3:e2:ae:e4:fa:2b:ec:3b:a3:6b:f3:4b:
7d:d0:c5:0c:3d:80:69:dd:c9:02:80:80:3b:88:91:
e9:a5:b4:36:48:65:13:7f:75:1b:39:9d:86:8c:8c:
26:7b:3a:3a:db:4d:6a:c8:85:84:12:c4:78:bf:71:
c3:98:6a:a6:d7:95:cf:fd:58:47:6e:5c:6c:a0:0c:
64:fd:85:c0:9f:6a:9f:7f:f0:de:d3:d9:56:32:75:
e3:dc:14:be:57:66:7a:7a:26:a3:ef:7e:dc:5c:9e:
37:a9:a3:14:56:01:a6:f2:22:84:91:98:0e:ff:c2:
6a:e1:e4:b1:ae:07:2b:b3:9e:0d:35:d4:61:78:42:
f0:e5:cb:3a:e1:38:70:1f:71:ac:63:13:6a:40:d3:
b2:cc:9a:fe:01:d7:9f:c7:c0:d4:0e:85:85:fe:71:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:88:50:C3:1A:D6:CD:C6:AD:5C:29:98:39:BE:9A:6E:5F:96:05:C2
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:22:3d:7f:58:ea:6d:31:dc:ba:8b:9e:5f:03:27:41:5e:
5e:a1:88:ff:ef:e7:a6:7a:12:05:47:3d:4d:ff:07:4b:d1:69:
30:25:f8:23:c8:4f:fb:f4:89:a2:92:da:93:66:5b:1d:37:af:
5e:c1:98:46:54:ab:22:28:39:f2:c4:c3:0f:0c:0f:04:3c:68:
dc:d7:1f:15:ae:34:22:a1:90:f5:33:49:a9:fe:4b:45:00:f0:
85:8b:ba:67:df:1b:01:e2:f8:e1:3f:e5:8e:1c:ad:1e:5f:61:
37:cb:9f:b0:9e:bd:80:66:81:38:cb:43:81:be:5a:61:a4:8a:
1b:fb:70:46:7c:17:ed:09:a6:b7:ef:80:b7:1d:22:d6:31:0f:
81:12:34:0e:6c:af:7e:5c:3b:05:ba:c9:f1:41:26:9c:7e:ae:
99:24:62:53:cd:73:64:54:7f:9e:1f:95:be:6c:42:1f:de:5a:
8d:f4:2c:79:b2:71:bf:64:17:bf:80:b3:0d:73:66:48:20:e8:
56:52:14:4d:65:f3:8a:ce:ed:40:77:19:e2:20:f0:74:d4:f0:
d4:02:b3:38:ba:ff:a1:a8:90:a6:3b:95:e5:5b:67:3c:7e:c3:
70:d2:0c:96:82:f1:c9:fc:6a:3d:82:b5:74:15:46:16:54:f3:
cc:15:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:30 2025 by rpki-client