Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: b+z/ziEhYB3I4eyQVQer/2jt15vx/BpN6vvKZi/0SI4=
Subject key identifier: 7C:CD:6A:C0:38:5F:2A:48:20:4B:77:F9:77:E9:D0:17:B5:00:67:7F
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 019A53E3BE20794D166317D95FB083966E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 036B
Signing time: Wed 05 Nov 2025 12:00:25 +0000
Manifest this update: Wed 05 Nov 2025 12:00:25 +0000
Manifest next update: Thu 06 Nov 2025 12:00:25 +0000
Files and hashes: 1: 1FIC0nlvvs7nCXCKFY67-y-Tcx4.roa (hash: RQASeiaMoVDZNGhkIy9OUB5XmVipcRP+d1vVqckV06Q=)
2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: Z7TnP8+xrFYk4QPztin/Y4YmYwAU55nNvJP5L9SOpqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:be:20:79:4d:16:63:17:d9:5f:b0:83:96:6e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Nov 5 12:00:25 2025 GMT
Not After : Nov 6 12:00:25 2025 GMT
Subject: CN=7ccd6ac0385f2a48204b77f977e9d017b500677f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:6d:90:33:c3:2a:f2:a5:1b:f4:68:d3:36:
08:29:9a:b5:0d:5b:d0:e0:fa:44:70:e4:db:c4:54:
94:e2:cb:69:d2:14:cd:4d:52:4a:f8:58:da:3f:3e:
25:65:ae:25:70:dd:f7:c9:5b:9b:47:cd:cf:1c:6a:
bf:43:af:79:ad:f2:6c:25:05:41:d2:fd:57:89:94:
9d:32:69:81:a7:cd:b8:4c:c0:21:06:95:13:31:a1:
bc:0c:3a:df:08:03:1d:5a:03:38:67:fb:3f:3c:fe:
57:4c:b4:83:d5:29:4a:ec:7b:af:ce:23:de:9b:ef:
cc:4e:4b:3c:4b:b3:29:aa:26:3b:92:19:6e:ad:8e:
5f:2b:cb:cd:22:09:54:b6:d2:bc:af:af:9f:cc:c8:
4a:58:25:be:1a:cb:18:ef:d7:02:9a:12:32:7f:c5:
8e:41:bd:64:e0:7e:bb:7b:1b:bf:47:9e:71:c5:4a:
2f:a2:db:12:5b:df:a0:e9:ac:67:7a:a3:fb:d1:41:
2f:9e:67:6d:3f:0d:e7:15:7a:b4:ff:eb:e5:89:35:
84:3d:ce:95:0d:25:6a:b3:65:4b:5b:b7:da:5b:a1:
93:2b:a3:6e:f8:23:bd:ed:1f:60:8e:5d:7f:1c:b3:
d6:83:52:a4:c5:e3:9d:0c:ce:32:35:b7:5a:c7:6d:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:6A:C0:38:5F:2A:48:20:4B:77:F9:77:E9:D0:17:B5:00:67:7F
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9f:ab:ca:27:61:aa:5c:d7:66:2f:0a:d3:20:c8:8f:5a:18:
18:36:93:a0:6c:48:0f:b4:6f:b3:c3:4e:04:0d:c6:af:90:e9:
c1:00:c4:c3:77:a4:bc:77:10:67:f5:b2:5f:31:53:24:11:fc:
33:b6:4e:b8:fd:f4:b0:6c:9d:56:b1:1a:d1:be:ed:c9:2f:1f:
ae:9e:a6:bd:cc:64:b1:27:ed:16:5d:99:50:2c:af:80:83:6c:
ee:56:2b:dc:c5:5f:e7:af:5d:26:63:64:2f:54:00:c6:24:ff:
6d:5d:30:b6:67:db:50:9c:93:03:8a:d1:18:41:57:99:9a:81:
2f:ca:7a:60:70:b5:40:1c:81:c3:3f:3f:50:7a:13:6a:c1:14:
d0:3b:50:a8:62:8e:f6:65:bd:8a:8d:13:fa:1e:27:a6:1f:f1:
d6:82:36:fc:d2:87:89:ce:88:20:41:10:d4:44:ae:53:6c:a9:
53:89:2c:f2:5f:41:ce:f3:dc:38:db:a1:c0:5a:83:85:c4:f3:
50:4d:16:76:96:0e:83:9d:cc:39:8f:59:8b:86:d6:8d:1c:30:
75:60:78:06:ba:ac:7f:9c:f1:f4:d9:b7:b8:ec:cd:5f:b3:24:
aa:c2:67:62:95:d6:89:25:10:4b:f1:a2:13:2e:ef:bd:3a:41:
8b:09:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:37 2025 by rpki-client