Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: eFnNsy1RBx2DmfmjZn7zDlfZ6DIjRS9j1vfehIvwbb8=
Subject key identifier: 88:BD:30:F7:BA:B5:9B:77:C4:F9:52:88:F8:94:AB:69:47:92:00:96
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 019A4F2B55C1D83BC71E05BB57B5E7B07E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 13E8
Signing time: Tue 04 Nov 2025 14:00:31 +0000
Manifest this update: Tue 04 Nov 2025 14:00:31 +0000
Manifest next update: Wed 05 Nov 2025 14:00:31 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: 6u+tBap3whvSMjtQDbYfYFm508d2SxE+rPrTE/98e38=)
2: oQC9sPpcZyPZwpQuNTqhI-X9Nlw.roa (hash: vCUpk6P/EjQs3Tpm0wCNehcuCpZGGg9z5aDmzRFQJKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:55:c1:d8:3b:c7:1e:05:bb:57:b5:e7:b0:7e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Nov 4 14:00:31 2025 GMT
Not After : Nov 5 14:00:31 2025 GMT
Subject: CN=88bd30f7bab59b77c4f95288f894ab6947920096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:10:31:25:05:4b:ec:c5:ad:e9:94:05:08:
7d:6f:a8:5b:00:3a:d9:c6:4c:fe:60:84:b5:41:3e:
21:8d:cb:59:ef:9a:f6:9d:b3:c8:e4:0f:e2:e5:13:
b4:20:0d:a4:2a:bd:ec:09:2d:ad:a6:78:8f:77:bd:
87:35:6c:13:5b:c0:8a:87:02:71:cb:f6:97:66:14:
93:b0:cb:cc:d3:1f:f1:a1:77:01:2c:de:43:ea:0c:
6c:08:57:ab:7c:bb:c4:31:b5:fe:03:99:4f:2b:3b:
20:0e:87:21:d0:ef:8b:fb:80:de:18:a9:53:fe:cc:
e8:b2:7a:20:d4:ec:6b:a5:5e:51:23:b3:1f:49:bc:
81:81:1d:41:c1:72:82:78:eb:8a:78:3a:35:76:7a:
0b:4d:33:44:77:bb:b3:a0:62:fd:07:d7:fe:fa:cf:
c0:e9:d9:df:2a:f1:46:71:ef:dc:85:08:28:13:6e:
4c:75:97:ba:e6:e6:4c:78:89:bc:bf:e5:93:64:61:
d0:32:30:45:1b:7c:9b:b3:de:76:a2:3a:d5:28:b9:
5b:49:53:29:f6:8e:73:d2:ba:01:45:c9:18:47:90:
7a:9e:ab:0c:9e:aa:20:74:9e:5c:a9:e4:01:f2:ea:
9e:db:f8:22:5f:7d:db:60:35:34:e4:47:f6:11:2e:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BD:30:F7:BA:B5:9B:77:C4:F9:52:88:F8:94:AB:69:47:92:00:96
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:59:85:3c:86:9f:30:24:f3:df:3d:af:8b:e8:2d:b1:7d:68:
cb:15:3b:07:d4:ec:de:c8:96:4e:4f:21:4b:9c:37:b1:55:4b:
70:71:f2:69:1c:07:20:f1:54:63:e7:ae:aa:b4:ec:b9:b1:19:
b3:a9:dd:db:4c:22:a2:8d:82:e5:23:3d:03:8b:7c:e0:f8:a0:
f1:ee:2c:95:ff:c6:a6:86:22:31:1c:44:cf:9b:41:04:65:ac:
a9:5e:5f:ef:f8:af:e4:8c:3d:99:91:eb:bd:a4:3d:37:8c:8d:
f3:36:f0:73:00:2f:43:ac:eb:8e:08:72:0c:b6:90:28:30:fd:
72:0b:42:52:f0:45:6d:56:c8:27:e3:7a:f6:3a:6f:69:46:e6:
2b:33:c7:56:99:24:29:87:31:6c:f1:c4:14:ed:d5:6a:b4:af:
26:58:ec:f8:b8:2b:8d:c8:a4:29:2e:93:12:af:1b:3d:89:52:
a6:2e:51:d1:0e:71:cf:d6:1a:6b:a1:82:39:2b:3c:9c:d0:78:
19:5c:d3:3a:3c:c3:1c:6d:30:21:48:35:ff:48:a2:9b:06:c6:
ae:0f:b2:b7:a6:a2:87:f5:97:5a:db:72:14:d4:31:3e:b8:ed:
8e:66:1d:a6:2f:1e:f2:19:75:42:d5:c9:d4:42:4d:49:24:63:
35:93:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:32 2025 by rpki-client