Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: xQjRz1fyGxUtSeybTpvZNUFer8j5fsN0zYgreT6Pdp8=
Subject key identifier: 26:57:61:91:A9:A7:8A:1B:8C:7C:05:67:CE:02:76:B6:54:14:10:82
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 019A4D73A1E666DD6581AA4197312B09C25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0F9F
Signing time: Tue 04 Nov 2025 06:00:14 +0000
Manifest this update: Tue 04 Nov 2025 06:00:14 +0000
Manifest next update: Wed 05 Nov 2025 06:00:14 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: CK54tzMr3bmlI5KFrDTWkVw1z45UJjMOJtXq1IQyCL8=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a1:e6:66:dd:65:81:aa:41:97:31:2b:09:c2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Nov 4 06:00:14 2025 GMT
Not After : Nov 5 06:00:14 2025 GMT
Subject: CN=26576191a9a78a1b8c7c0567ce0276b654141082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:9e:c9:25:d2:15:1a:af:8f:2a:93:03:44:
27:4b:d0:7a:7b:f7:8c:c8:79:68:35:a0:26:21:4c:
db:02:38:16:ea:b4:d4:fc:ed:a3:e1:b4:40:7b:ae:
05:1e:7a:1e:8a:df:26:3f:62:39:1f:b1:70:b9:1b:
ce:9f:8a:74:d6:0b:c1:16:fd:9a:4b:93:d5:06:bc:
60:39:9e:dd:f1:68:bc:b0:14:d9:cf:c8:69:b3:3b:
89:ab:b7:45:22:9c:70:5a:46:e8:80:d7:6d:d4:89:
92:f0:f6:af:2b:e2:8f:32:e1:8b:08:2a:75:11:17:
31:b7:4a:75:58:97:1f:04:ba:d3:50:56:65:96:7e:
97:4e:54:15:48:c2:22:47:c4:78:35:59:20:96:fc:
58:5b:57:44:3b:13:0b:50:21:f7:83:f3:d0:4e:ee:
c9:0e:de:72:8c:5a:82:88:6c:f4:af:53:80:cc:35:
ad:a8:18:3e:6c:f6:c3:5a:6f:50:04:3a:a6:1f:83:
e5:24:96:33:1e:6f:aa:99:3d:68:ff:1e:fb:62:f6:
ed:e1:7d:e9:26:70:a4:53:b1:7f:35:df:55:fa:e8:
d5:61:5f:fd:49:c8:b0:0e:54:5d:80:9d:93:0b:bd:
28:18:d5:d6:b6:97:c6:71:b4:aa:55:df:fe:5f:91:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:61:91:A9:A7:8A:1B:8C:7C:05:67:CE:02:76:B6:54:14:10:82
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:80:30:14:ba:73:55:64:94:0b:e6:18:03:44:28:d0:80:af:
5c:ac:9f:6e:dd:ff:16:2b:72:9c:f3:90:cb:50:22:a8:3b:e3:
c7:5f:c8:9f:3e:1e:8d:ab:50:77:a3:b4:c8:a3:1c:b6:54:c7:
55:f4:88:dc:1f:ca:5f:df:5e:1d:01:9e:17:7d:5a:db:34:ae:
f9:08:16:3f:4e:73:b6:4a:1b:08:bf:f1:36:b1:ca:80:f6:4a:
74:10:0a:4e:d5:44:fd:d0:c9:f0:49:e9:29:05:9a:a3:43:79:
ca:38:2f:98:7d:1b:3a:17:2f:9d:63:5b:95:12:0f:39:bc:a8:
41:8f:86:2f:4b:f5:2c:71:2d:f6:bf:b1:70:34:a9:ff:cf:ba:
d0:51:d3:69:df:2e:75:00:3d:f0:d4:04:96:b9:3e:5b:37:56:
e2:fd:56:1b:17:71:ba:bf:c9:37:59:f8:04:33:38:16:65:4d:
db:38:9c:2d:a3:8a:14:f5:84:7e:83:b1:60:fe:fd:68:8d:61:
90:e1:56:d8:84:19:49:15:25:29:5d:9f:c9:84:e9:c2:e0:e4:
ee:5b:5f:97:55:95:d2:15:73:57:ee:36:be:73:a4:e5:50:70:
11:56:86:0a:30:c7:fb:92:b0:27:17:7f:f7:57:77:84:c2:41:
a6:95:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:35 2025 by rpki-client