Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: Pqd6jPNhtIfdYUYNs00tP1Wcp1UrnVZ5QahhfVN9oU8=
Subject key identifier: 91:CC:03:84:A4:EF:8C:67:88:A9:1B:14:3B:A3:96:D4:51:A6:E6:2E
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 019A4DAA9FC16426DDE2B8EAB9C6C67653CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0DF3
Signing time: Tue 04 Nov 2025 07:00:18 +0000
Manifest this update: Tue 04 Nov 2025 07:00:18 +0000
Manifest next update: Wed 05 Nov 2025 07:00:18 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: F7bRkom5jYW4zz5qszlxqyMJVMRYodQTfq+wTzgStFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:9f:c1:64:26:dd:e2:b8:ea:b9:c6:c6:76:53:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Nov 4 07:00:18 2025 GMT
Not After : Nov 5 07:00:18 2025 GMT
Subject: CN=91cc0384a4ef8c6788a91b143ba396d451a6e62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:77:dd:58:01:51:43:2d:c3:74:d9:6e:06:
47:63:5b:17:a8:46:b6:6a:4d:e9:3d:76:74:cc:7b:
d0:00:27:94:ac:d0:54:7b:cc:bb:13:f4:45:f8:65:
29:f5:d3:51:84:7c:9f:0d:e1:b1:2e:74:fe:54:3e:
49:e0:8d:86:e3:d6:f5:64:b3:e6:b3:9c:93:af:e2:
1b:2e:a5:53:ad:22:34:2c:6b:ca:d5:aa:9f:37:03:
c3:73:06:0d:e5:f5:22:a0:69:54:aa:42:87:d2:bf:
1b:fd:61:59:5b:28:42:13:11:2b:62:19:1a:03:d0:
7e:21:bf:ff:23:4b:e2:0a:4c:bc:e0:7e:3a:52:94:
d7:04:93:d5:a1:88:04:41:48:17:87:2c:1e:4d:1c:
54:2d:0b:87:91:b6:12:25:85:cd:90:a7:46:5f:df:
12:81:4c:a3:aa:6b:f9:e9:e2:33:1b:ec:4e:53:8e:
f9:26:04:54:e8:e3:9a:65:86:5d:c8:19:18:05:4f:
58:28:4d:a9:a2:7d:7c:6e:37:20:f8:be:a7:2f:1c:
d1:a1:12:71:8b:eb:8c:41:8e:33:26:30:04:f2:0f:
d7:d9:09:56:7e:bb:62:e7:de:94:66:cc:19:1c:de:
17:c1:b8:88:b8:4e:84:9b:ff:2d:51:60:28:9e:3e:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:03:84:A4:EF:8C:67:88:A9:1B:14:3B:A3:96:D4:51:A6:E6:2E
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:c4:b2:45:bf:0a:32:50:cd:c4:04:2b:40:c6:ea:27:d0:
c2:ee:0c:94:47:1f:46:7b:ee:d1:11:e3:d0:b3:78:3d:b6:57:
ac:1b:e4:a4:6e:a5:e2:78:87:5a:6d:03:ed:e2:d1:d7:41:7e:
fa:3d:e4:b4:59:2d:3e:57:c0:41:05:d5:53:7c:a6:ff:7a:1b:
c7:cf:fa:ba:ec:4a:f7:77:ec:82:93:75:9b:64:f0:7e:17:26:
f3:f9:cf:20:8d:a3:90:38:ee:03:0a:86:da:f7:1f:5c:5f:4c:
b3:62:98:ef:f8:5d:74:95:08:07:40:f8:08:8d:bf:e6:a9:f4:
a7:25:6c:f1:ad:1f:82:03:ad:73:31:96:1a:2d:2d:01:cd:f5:
ff:15:70:7d:0a:96:e3:51:83:f8:1e:f7:2f:64:dd:ea:ca:f6:
de:02:b7:2f:bd:54:81:71:db:25:aa:a6:1c:ba:5e:1c:c1:78:
9d:3d:17:09:cd:58:84:8f:08:3a:dd:12:6b:9e:76:01:71:db:
6a:a1:44:a7:53:f1:7f:1d:0e:a5:d7:61:11:d7:7d:d9:18:6d:
bb:ce:61:c9:75:9a:40:6c:28:6c:c9:56:11:d6:45:6e:70:42:
11:e6:f1:84:04:81:66:a7:5e:b7:13:3a:a3:ab:1b:11:17:3b:
3b:6b:58:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:57 2025 by rpki-client