Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: 788f3cGcOcUKfWcHXpMud1i8Ds0t/i9QOMsIGO+HcCM=
Subject key identifier: 28:2B:BC:FD:9D:D9:D3:2A:CE:88:29:37:75:38:5D:57:7D:2E:69:38
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 019A51F59F8BC897574FCCD9D4B27213B71D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 163F
Signing time: Wed 05 Nov 2025 03:00:42 +0000
Manifest this update: Wed 05 Nov 2025 03:00:42 +0000
Manifest next update: Thu 06 Nov 2025 03:00:42 +0000
Files and hashes: 1: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: Vwftt4nqQBAu22yRvUqoX6tWSgF69ytltTF9cwB92SU=)
2: sEgqJVQsrJEI5D6KmALm-jn8fK4.roa (hash: wkSem0GjNV7CDayzITuhm9bdRNzF4MpUUCFS49t70yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:9f:8b:c8:97:57:4f:cc:d9:d4:b2:72:13:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Nov 5 03:00:42 2025 GMT
Not After : Nov 6 03:00:42 2025 GMT
Subject: CN=282bbcfd9dd9d32ace88293775385d577d2e6938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1f:06:cf:81:a5:b9:6b:e3:a1:9b:fc:f6:9c:
90:ce:0e:3d:ce:4f:99:bf:dd:ad:dc:ab:13:22:e5:
a6:34:7b:55:26:c8:6c:a7:98:b0:e6:6e:29:4b:29:
44:ce:bd:69:30:1c:b2:9c:9c:9e:37:70:f6:49:be:
51:ac:48:2b:b9:c9:84:a4:2e:71:aa:9a:2d:66:92:
28:a2:0c:72:99:77:40:81:df:7a:a8:f9:5d:82:cd:
dd:a2:8e:75:26:60:26:e6:b5:4b:31:c9:87:49:9e:
a4:f0:48:78:99:f7:ad:0f:97:01:07:bf:75:ff:8a:
e5:05:0c:ec:ab:c3:49:b2:5b:27:01:70:87:8c:21:
ab:db:d7:d5:0c:2f:ed:63:a3:3e:59:12:5c:d1:36:
88:fa:24:1b:36:38:db:26:b9:2d:00:2c:27:16:7b:
3f:ef:77:13:48:ec:a1:6a:8b:33:2a:75:f5:b2:8c:
a9:b2:36:90:84:0c:dc:3c:1f:27:39:d4:1c:0a:fb:
b9:9b:7a:d8:09:57:1f:c5:e6:18:b4:49:c3:44:a7:
66:3f:ee:95:b6:60:0a:d8:a1:fd:1a:ae:be:d1:19:
2c:43:d3:2b:c0:d8:af:34:3b:0f:00:83:cc:fb:a4:
d1:01:e4:60:e9:99:94:42:d4:23:54:e6:34:53:23:
5b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:BC:FD:9D:D9:D3:2A:CE:88:29:37:75:38:5D:57:7D:2E:69:38
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:64:f8:72:9f:10:41:c6:0f:ef:5b:ee:d5:05:fc:17:b4:f8:
44:26:0c:76:8a:24:b8:42:49:ce:2d:94:97:d4:27:81:d5:11:
01:a0:71:33:45:60:a3:c6:6f:8a:3a:2b:85:ab:9a:d2:b6:d7:
9f:b9:ce:43:90:c8:d8:4c:62:15:3b:40:15:d0:e3:65:97:75:
e2:71:9d:28:73:bf:41:f4:47:f7:36:27:98:0f:5d:78:df:77:
50:d0:98:62:01:dc:3e:c0:43:3b:27:ea:58:7f:24:9a:d6:93:
68:fd:c5:72:d8:62:34:d2:53:3c:79:b3:92:11:34:90:e0:cd:
45:17:c9:a6:74:c2:24:8e:90:67:6b:f7:8b:c9:14:86:d9:4e:
7a:60:3c:a8:30:52:09:b1:fa:00:ea:25:12:3a:56:19:4d:09:
ae:81:4e:ac:6d:1e:25:48:de:ae:64:9e:68:8e:d4:b6:34:83:
21:05:2d:ed:9a:ae:66:20:af:65:dc:69:9b:3d:d2:41:2d:e9:
67:a8:70:e7:0c:07:3d:b6:f9:d6:ea:03:2c:f8:b9:82:55:ec:
60:4b:cb:df:de:d2:81:d9:8e:bb:af:be:92:21:77:59:c9:0f:
2e:13:49:b7:42:e5:6f:6b:4d:8e:33:81:93:93:24:c6:28:7a:
e2:74:2b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:44 2025 by rpki-client