Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: A0bPT5SPP80HKBO1XPBpLtfj1PBTgpjE2a20ruHVslc=
Subject key identifier: F2:DC:E2:D1:65:9A:97:67:32:7C:7E:9E:75:DD:BE:A7:11:53:7D:C1
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 019A533F3E6205645D6B1D249E3BD4C365E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 09:00:44 +0000
Manifest this update: Wed 05 Nov 2025 09:00:44 +0000
Manifest next update: Thu 06 Nov 2025 09:00:44 +0000
Files and hashes: 1: BriG5n_d334rZ6dRB6OmkxalNXQ.roa (hash: gR3OKMrFwiMtW4+rQqu+QkKInRaAYo99fA48hRcfRho=)
2: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: 6DPf0tTjuyPkvhjQMq8fJfiJQCfly4VmlGe4CUkE3oo=)
3: fFU1nOvAp1rSs4Piya9lGEHH2qQ.roa (hash: 2ngeI6kdV66tUb5OqMLCCP5yBBWk//A11XWcWwTz/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:3e:62:05:64:5d:6b:1d:24:9e:3b:d4:c3:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Nov 5 09:00:44 2025 GMT
Not After : Nov 6 09:00:44 2025 GMT
Subject: CN=f2dce2d1659a9767327c7e9e75ddbea711537dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:c6:a0:25:cc:d0:ad:f7:e3:c8:c6:06:df:
d2:21:09:67:cd:c8:3a:0f:c3:5e:46:e9:b4:4d:56:
55:b3:8a:3a:2b:41:ff:4c:69:5d:02:e4:fe:27:39:
22:e9:a0:e1:23:d3:8b:2f:34:32:6b:e0:b3:0a:38:
d1:4a:e7:4e:62:52:17:87:85:fd:ea:44:33:a0:4c:
66:0e:66:a0:08:e5:e6:3c:59:96:10:2a:7f:5b:50:
cb:a0:d8:c0:a0:43:3e:01:a1:79:de:7c:3a:8b:e9:
75:21:5c:a4:20:80:ca:b6:e1:ce:ab:7d:39:0d:16:
6d:b0:74:88:18:f7:9a:d9:c3:38:9f:78:b7:47:47:
52:c5:7d:ac:6f:99:a7:da:59:df:09:b2:f0:45:84:
e0:1a:c1:27:af:c4:63:20:19:d1:02:e6:3c:7e:26:
f8:5e:54:d5:c8:c1:5a:86:a4:8f:bd:29:f7:f1:52:
49:5e:e7:3a:bf:cb:7b:0e:a7:b1:3e:26:9b:c0:e7:
6c:3a:9c:2f:3b:f3:0c:ec:b1:87:bd:ea:0b:fb:42:
0c:5a:a3:a9:8d:b0:de:28:08:ef:2c:38:bc:eb:40:
ec:57:ef:12:01:6c:8a:51:e0:3f:9f:9b:ac:a6:7e:
d5:d9:7b:d4:30:3a:fa:7f:6f:d4:65:a6:db:e5:91:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:E2:D1:65:9A:97:67:32:7C:7E:9E:75:DD:BE:A7:11:53:7D:C1
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d9:fb:a6:fa:6b:cc:4a:80:b6:a8:60:0d:ca:ed:62:4e:32:
87:5f:a0:92:f6:f3:d4:f7:c3:44:95:99:89:7f:4d:a2:c9:df:
c1:9d:f5:c6:98:91:be:cc:5c:e7:7f:79:3f:d2:2f:16:10:50:
2c:1b:78:f9:61:25:70:c4:66:a5:3b:65:57:55:b7:ec:e3:9d:
ae:6d:d1:e6:de:ee:07:50:ad:d7:40:2b:ed:af:c8:58:1b:63:
f9:fc:b4:46:48:35:c9:57:93:e1:c8:67:c1:8c:48:a5:ae:55:
7a:6f:6b:db:cf:23:47:42:b9:ab:7b:3c:9b:56:22:ee:9f:11:
26:9a:4d:62:90:99:61:92:81:f1:c1:d6:55:f2:d7:15:8f:4b:
0f:18:fb:a4:7c:c2:af:c4:97:2f:a5:f2:b7:a5:37:e3:76:d2:
e1:5d:b6:f5:65:65:91:da:2e:d5:86:82:ec:9b:63:ea:f1:cc:
2c:08:28:01:83:76:18:47:3b:f8:e6:f4:cf:01:8c:17:e6:33:
28:ce:78:45:cd:a8:0b:7b:5a:ef:d2:c1:b2:6e:03:39:e4:a8:
ad:8a:51:89:97:dc:64:21:78:14:1c:44:51:1b:8e:da:ed:a2:
3b:24:c5:ff:f0:8f:6b:43:15:3b:87:06:10:b6:57:a2:01:5a:
3d:e3:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:24:16 2025 by rpki-client