Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
File: QZHlgmJw9J6umZ1InoXezMhHc4s.mft (raw, json)
Hash identifier: AlTscWTFoKcXr30CxtKGTZ+RDNGuH+Subyp5Oq0+OWU=
Subject key identifier: BF:B4:43:D1:43:55:72:1F:AB:D6:BC:20:91:16:AC:72:DA:E7:46:AC
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 019A51BE8FEDABABAAFF45FA5922418F5E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
Manifest number: 122A
Signing time: Wed 05 Nov 2025 02:00:34 +0000
Manifest this update: Wed 05 Nov 2025 02:00:34 +0000
Manifest next update: Thu 06 Nov 2025 02:00:34 +0000
Files and hashes: 1: 5a04uRMLuLPqwpXzKrFBWV5ma_s.roa (hash: pqBMscBUXLlLFYQmwhp2Q/lEjdKvHVjvXqUWPX0LeGM=)
2: QZHlgmJw9J6umZ1InoXezMhHc4s.crl (hash: oiEs6qoFsWGnZJNBri/rZALLD62ZqBc2u8MkiW5nAh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:8f:ed:ab:ab:aa:ff:45:fa:59:22:41:8f:5e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Nov 5 02:00:34 2025 GMT
Not After : Nov 6 02:00:34 2025 GMT
Subject: CN=bfb443d14355721fabd6bc209116ac72dae746ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:a3:43:48:6d:ff:5a:22:6a:16:2e:cd:f7:
28:df:5b:c9:3f:46:28:43:fc:c5:3f:b5:8b:f2:0f:
f9:e0:96:e0:b7:ff:be:01:c3:80:44:a8:35:6d:77:
a9:1d:1e:d8:cc:d7:9c:f3:c2:3a:85:20:f7:01:b5:
22:7c:33:ad:e7:6e:75:61:ff:c9:42:ce:9a:a9:dd:
85:e3:d4:bc:df:9f:17:33:33:a3:01:e2:ee:70:3e:
ac:3a:98:82:d7:52:2b:40:e7:86:a7:b6:73:e7:e6:
7a:fe:2a:a1:48:09:9c:b5:97:65:31:96:45:56:c3:
89:88:fc:1c:f4:06:da:e7:d9:a9:cd:f5:0a:df:65:
ca:90:af:31:04:61:fe:dc:a1:b7:b4:ba:3c:08:1c:
8c:e8:d0:0a:d2:2d:ae:9a:af:2d:0d:e0:5b:f0:c0:
7f:4e:5c:76:7d:60:9a:51:d9:d0:30:86:93:46:a1:
ba:ea:b1:d4:4c:fb:aa:36:90:83:9b:34:99:ba:23:
5e:0e:9b:60:7c:28:fc:19:70:62:4a:b8:b2:7e:27:
da:54:00:0c:d5:3d:43:54:de:b1:0a:33:57:15:4a:
0b:a4:24:08:ac:5c:13:e4:c7:7c:e8:9d:75:60:bb:
69:3e:00:5c:a4:45:cd:d2:06:e6:9f:de:c5:69:04:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B4:43:D1:43:55:72:1F:AB:D6:BC:20:91:16:AC:72:DA:E7:46:AC
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7e:ef:57:8f:1d:70:80:0f:2e:66:b0:3f:33:76:ba:bd:3e:
a2:61:ec:6a:aa:b0:68:26:c2:34:60:2b:d8:e8:8e:32:c7:f1:
52:6c:e2:c4:0a:d1:12:bc:42:08:46:7e:6f:a2:8b:1a:0c:4b:
36:8c:5f:4b:ef:64:3f:4d:95:f9:c7:cb:a8:c8:7f:a0:92:32:
e3:6b:5f:a9:05:bb:d8:bf:df:25:e1:41:02:9a:17:f0:f7:fb:
8b:ac:4e:47:20:9a:7c:78:6c:58:12:7c:02:5d:87:24:65:de:
7d:f9:b0:78:9c:ed:39:9a:b1:25:53:85:1f:a1:13:39:ff:48:
ed:ad:a2:39:72:42:b7:ec:0a:8e:49:a1:44:85:75:6f:39:b2:
26:92:91:b9:75:bf:01:a2:00:98:34:e3:42:59:0b:02:e7:be:
d5:7e:8e:b8:1e:10:8e:0a:33:77:d6:b3:17:94:96:e2:af:50:
68:fd:d2:79:e3:97:2b:bc:77:d2:b2:7c:a2:c7:19:6e:1c:43:
dc:fb:0a:0c:67:8b:a0:e9:be:b9:0f:77:ba:f3:66:58:2f:4a:
4d:6c:33:e4:f9:6f:b2:40:cd:16:fd:d6:82:86:12:ef:cf:1c:
41:88:6a:a0:5d:98:7c:d5:ad:7e:ef:c5:15:1c:95:cf:a4:dd:
89:03:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:30:08 2025 by rpki-client