Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: w4IHiIKb5DvaFhMlvsk/16JxgPj9lywuoDTnBonUJJQ=
Subject key identifier: 2E:03:EB:4D:3C:74:2D:9F:4B:82:4F:75:13:19:17:52:F4:0F:FA:87
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019A4E191A43BD8E24674E39390093C130E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:59 +0000
Manifest this update: Tue 04 Nov 2025 09:00:59 +0000
Manifest next update: Wed 05 Nov 2025 09:00:59 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: XsdRdCf/y/BvlKntXHZ5wKUWKcgL2ucKMLPM/zNeqH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:1a:43:bd:8e:24:67:4e:39:39:00:93:c1:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Nov 4 09:00:59 2025 GMT
Not After : Nov 5 09:00:59 2025 GMT
Subject: CN=2e03eb4d3c742d9f4b824f7513191752f40ffa87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:68:31:fd:83:64:a9:49:79:4c:90:7a:44:
73:64:53:84:14:1e:b7:07:e7:e3:47:a6:f0:7a:5f:
c4:cc:6b:89:9a:34:2c:f4:6a:8d:bc:dd:10:47:f4:
5b:6f:7b:9e:ef:e9:eb:fb:14:9b:13:67:05:ce:9a:
57:4e:b3:0e:bb:23:cc:64:93:2b:d0:b7:3d:71:7a:
07:27:13:85:63:af:52:f8:3d:14:9a:37:f1:ec:2e:
da:3e:9c:50:af:b2:f5:b0:90:9e:31:d4:e5:8b:4e:
3f:bf:0e:2c:e9:7a:c3:eb:3d:7a:55:11:4c:0a:c7:
3c:7d:2f:54:f1:15:ec:69:a7:0e:53:a3:af:50:e4:
40:41:58:6a:a0:ab:eb:a1:0a:91:f5:30:ad:ad:ed:
e0:6d:0c:dd:87:10:fc:0c:66:94:79:a3:63:85:b5:
b5:29:8a:7b:09:b1:bd:60:9a:99:5d:2b:fa:7d:6b:
65:01:9c:31:e8:e7:5c:8c:1e:94:eb:3f:f1:a7:0c:
0e:eb:37:2e:36:27:68:72:0e:5b:c4:87:f7:6c:3d:
d1:20:6d:34:62:26:c5:d5:b1:4e:93:f1:b3:aa:3d:
7c:5d:79:b8:81:4a:9a:4a:f1:7d:6f:d3:8b:82:ee:
3e:35:9c:eb:b6:0d:a5:b7:15:90:ea:e0:47:78:68:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:EB:4D:3C:74:2D:9F:4B:82:4F:75:13:19:17:52:F4:0F:FA:87
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:50:2e:a2:97:4d:41:a1:fe:9c:3e:a9:2f:1f:a9:e8:76:2f:
8f:94:72:30:b8:72:58:4f:c9:17:ae:34:6b:05:23:47:67:84:
d8:ff:e2:00:e1:9c:97:ed:f1:51:ce:9c:f7:b8:bb:f3:d5:ae:
59:45:26:4f:c4:42:d7:82:31:aa:21:9d:b4:40:04:3d:40:aa:
1c:f2:41:4d:64:e7:d8:ce:2d:e2:76:49:d5:79:11:56:37:28:
ad:88:5b:ad:f2:14:68:af:81:e4:19:2f:da:d2:9c:33:61:00:
5a:17:f1:00:4d:19:85:cc:a7:06:c1:b0:72:d8:12:76:74:81:
75:0f:ac:f9:e2:38:63:c2:da:a4:b4:61:b0:df:d0:9c:b7:3f:
b6:6b:e7:61:88:28:f4:c4:f2:9a:e1:af:34:ea:7d:a6:6b:e2:
3c:72:62:e3:00:41:b1:8f:3f:96:65:a5:e4:2d:6d:50:c8:80:
e6:08:fd:d1:67:e9:05:2a:80:26:79:cf:67:92:e5:9c:36:85:
53:09:f0:4b:6d:eb:2e:3e:9d:7c:8f:ae:59:29:ff:4d:d4:23:
25:7a:1e:1a:21:3a:b1:a6:20:19:00:d3:62:d3:f5:3c:65:04:
2c:74:52:21:91:9b:ee:8f:a6:f7:1e:32:05:77:88:73:63:bc:
12:77:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:50 2025 by rpki-client