Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
File: QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft (raw, json)
Hash identifier: 21XIld19tqNyvd3tqhP0sVLQ/V+/2SLa6IDWP/p9ZDk=
Subject key identifier: 65:2C:7D:63:F2:7B:C8:E7:8A:10:A1:DB:BE:D6:0A:23:10:2E:98:70
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Certificate issuer: /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial: 019A503E36BF5EF63E311D3770194F712ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
Manifest number: 0669
Signing time: Tue 04 Nov 2025 19:00:45 +0000
Manifest this update: Tue 04 Nov 2025 19:00:45 +0000
Manifest next update: Wed 05 Nov 2025 19:00:45 +0000
Files and hashes: 1: KZYzQ7jFzWYYwYRhQ-ZJNAP7g7s.roa (hash: bwXn17r3CjUQeiw9goACwMSayH6c9Rjo8urDQ0LO3DQ=)
2: QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl (hash: 8oJrZ/iyNRhS8antD+ooPQjV99p7hIU2pEeODyzCLtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:36:bf:5e:f6:3e:31:1d:37:70:19:4f:71:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
Validity
Not Before: Nov 4 19:00:45 2025 GMT
Not After : Nov 5 19:00:45 2025 GMT
Subject: CN=652c7d63f27bc8e78a10a1dbbed60a23102e9870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:c8:51:af:5a:56:21:59:92:12:1d:1b:04:
b7:14:5d:44:40:6f:5d:68:fb:07:b2:96:84:ab:43:
b7:ed:33:0f:ed:95:04:5c:c9:d4:0c:45:15:aa:67:
21:84:0b:bc:f5:57:65:f5:0e:54:72:ca:03:cb:37:
55:49:63:b0:d5:5e:6d:bb:45:fa:cf:ef:b6:5a:d5:
6a:76:c5:e4:61:6d:43:c0:02:60:b0:b3:5e:44:cb:
7f:16:2e:ea:e0:81:82:e2:af:2d:c5:68:51:fc:0a:
a3:3c:37:fa:8e:6e:a4:48:0f:2b:d0:d2:35:0d:ef:
fc:e7:7c:3f:5e:13:58:e8:8e:21:42:b2:99:64:f8:
2d:4c:b1:69:9d:72:2e:b3:14:6c:6b:b2:0e:79:ae:
d6:1b:32:4e:34:fb:16:2a:cf:78:55:7a:57:29:82:
fe:50:07:52:e6:ad:2b:e6:7f:c2:27:ba:e1:c5:01:
07:16:1f:ec:2f:f4:5e:34:ea:2a:32:99:e9:7e:d8:
cc:f5:16:51:0b:13:1b:0e:41:cc:b8:9d:b6:36:68:
96:df:26:ff:d0:2f:36:13:42:73:95:60:64:01:f4:
5a:e1:95:8c:0d:f0:11:59:ad:dd:ee:ff:c9:5e:75:
d2:5d:07:97:ea:74:6a:a8:49:8f:e6:b9:e2:f8:72:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2C:7D:63:F2:7B:C8:E7:8A:10:A1:DB:BE:D6:0A:23:10:2E:98:70
X509v3 Authority Key Identifier:
keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:74:8e:9b:8b:12:6d:e6:84:c7:e9:1b:a2:f2:70:13:00:fb:
6d:2c:d3:9e:72:68:bc:32:44:92:28:ba:2d:43:08:aa:f1:5f:
76:30:3c:24:a0:a0:fb:15:f4:b6:3f:66:03:38:12:9b:4a:33:
d8:dd:24:e3:d6:80:5e:1c:88:f0:de:de:e2:22:b1:a2:20:00:
84:6e:30:62:3f:ba:f5:69:34:4f:a9:56:cb:00:20:72:8d:35:
ce:97:e9:4f:f9:f4:67:f4:2b:d3:8a:21:73:a6:2b:78:2e:8d:
ca:5e:a5:87:d0:e6:ac:98:e6:81:98:82:67:35:3c:90:a8:30:
ea:d8:27:44:f5:d8:96:85:18:e9:e3:3d:9f:36:07:76:cb:fa:
bf:a6:0f:10:ff:ba:0e:0b:6a:c7:65:4a:89:69:c0:39:4e:a5:
b3:26:30:e7:3a:49:f8:c2:ba:47:61:70:25:55:b8:d1:63:04:
20:b9:8c:6e:fb:c2:db:b8:d5:71:01:c2:9b:81:b8:bc:8c:4b:
6d:f3:13:25:61:58:1c:a1:cb:c1:cd:e5:44:ab:ea:7d:db:d7:
8b:f3:fc:b2:2a:e3:d5:2e:47:6c:54:8f:4e:12:1a:aa:30:ec:
93:e1:c0:ec:59:03:97:63:25:f7:32:78:29:76:f9:7d:97:d0:
87:19:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:06 2025 by rpki-client