Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
File: QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft (raw, json)
Hash identifier: 6lEDKiHZa8FWSyJaB04xqLx3WhaQs+albqcGvj/ltDw=
Subject key identifier: 8D:66:BA:FC:11:C3:5C:49:D1:42:B6:A6:71:3B:5D:98:4C:F3:36:15
Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Certificate serial: 019A541B05F8E4A7BB2C2EA10180A7E4B186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
Manifest number: 0225
Signing time: Wed 05 Nov 2025 13:00:48 +0000
Manifest this update: Wed 05 Nov 2025 13:00:48 +0000
Manifest next update: Thu 06 Nov 2025 13:00:48 +0000
Files and hashes: 1: QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl (hash: jufp6OjrA+nVZX15il7PXPhHJVz7L2wtGpDzV6ySkyU=)
2: WibstNWW6k-lvYl4Qh5sNtmSYhw.roa (hash: E/2K/0j7Ly/9Z6jM3FsBVp9MBphb1aZ9lSBmqs0GOgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:05:f8:e4:a7:bb:2c:2e:a1:01:80:a7:e4:b1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4
Validity
Not Before: Nov 5 13:00:48 2025 GMT
Not After : Nov 6 13:00:48 2025 GMT
Subject: CN=8d66bafc11c35c49d142b6a6713b5d984cf33615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:c9:76:12:fa:e1:46:06:26:86:48:96:5b:
a0:20:9e:9b:01:9c:19:cc:d6:98:3e:ce:fb:f4:46:
28:7f:29:10:fa:a1:08:49:0d:68:b3:bb:11:f0:1b:
8f:c9:fa:a4:a3:c8:3e:e0:95:eb:0a:4a:8c:e5:b7:
6f:8d:d5:cc:ad:4a:e8:c7:dd:78:19:fe:a2:ca:2e:
31:1a:17:3f:f4:2f:75:26:10:a6:bd:70:84:b7:db:
39:72:03:03:a7:67:b2:75:b1:ca:b5:c8:03:98:08:
86:4f:9c:5c:c7:3d:7b:a6:26:e9:99:69:98:6a:21:
de:f3:28:e8:a6:3e:55:df:df:31:55:42:68:6b:7a:
03:91:8e:e3:88:78:9a:67:67:f2:76:9d:cc:2b:84:
02:ad:ff:52:7f:99:8e:f6:69:15:8e:ba:ab:80:d6:
df:e9:c6:4d:d5:4b:63:44:be:3e:0b:a2:03:04:30:
2c:4d:25:6c:2d:78:c5:93:09:b6:93:19:33:b3:5f:
51:c0:e8:39:27:0c:cc:7b:3f:87:dd:60:72:c1:f6:
1e:47:c1:44:d5:ca:21:70:c1:cb:28:58:7a:40:e5:
cf:63:b1:e5:84:44:be:ee:ca:d3:81:41:09:68:51:
9f:43:3d:49:d7:4a:4e:a1:4d:5a:07:53:5a:c9:75:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:66:BA:FC:11:C3:5C:49:D1:42:B6:A6:71:3B:5D:98:4C:F3:36:15
X509v3 Authority Key Identifier:
keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:65:4b:74:56:05:7b:cb:7e:17:dd:75:f8:b8:c6:93:49:08:
ab:ed:72:0f:34:37:3d:ef:06:99:a1:89:62:3b:bd:f4:c7:98:
be:0e:40:df:38:85:68:b9:92:f5:43:46:f1:13:c5:c2:01:c2:
ef:05:ce:ce:25:1b:b9:56:b8:e0:06:5f:72:d3:6a:31:96:41:
a0:91:64:40:87:99:3c:25:0d:6a:53:53:b6:17:de:19:61:4b:
94:41:22:ae:cc:d4:0e:ae:4d:26:66:d0:f3:f0:26:45:02:cc:
a2:25:c1:db:84:c9:61:3e:97:2f:3f:90:5a:41:2d:18:2f:8f:
ca:03:e4:59:34:96:0f:ad:b0:84:28:64:86:89:83:9a:a6:83:
59:f2:da:45:2e:16:3d:8d:04:aa:e1:85:7a:90:f6:6c:41:31:
11:ad:49:f0:7e:37:b6:a3:c3:84:90:e4:2f:46:ee:92:ac:ff:
35:c5:df:9d:ff:d9:42:8d:1d:3f:2f:1e:32:de:8b:9c:04:b7:
e6:ea:a4:ea:db:36:14:a5:1c:c6:8a:c5:57:88:94:db:99:89:
bd:6b:cc:61:2c:27:85:25:a7:d5:8f:ac:63:58:44:f4:d0:4e:
65:15:86:12:27:10:d2:03:c8:69:4a:9f:c5:5c:5b:d1:ae:42:
cf:b2:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:05:38 2025 by rpki-client