Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: 9iUh5+Y4twtlIld5WwI+noFN9OdktMBUqDFjkX9YENk=
Subject key identifier: 7A:3D:A6:84:EF:98:B6:3F:52:35:DC:C2:F3:F1:E4:EA:3A:14:5C:86
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 019A5150EF3400F76690F4479C6D0B2F230A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 07F7
Signing time: Wed 05 Nov 2025 00:00:49 +0000
Manifest this update: Wed 05 Nov 2025 00:00:49 +0000
Manifest next update: Thu 06 Nov 2025 00:00:49 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: EeOdDQh5FoB3JC3837GxS9MNIBSQghMWuDopiuhz23s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ef:34:00:f7:66:90:f4:47:9c:6d:0b:2f:23:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Nov 5 00:00:49 2025 GMT
Not After : Nov 6 00:00:49 2025 GMT
Subject: CN=7a3da684ef98b63f5235dcc2f3f1e4ea3a145c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:e9:e0:26:30:d7:87:3e:68:5d:98:ec:dc:
d8:05:b6:ff:55:d0:11:3c:bb:e6:8f:7f:3f:2d:c0:
54:2c:12:8d:91:c6:1c:09:d2:00:7d:48:4a:6e:2c:
cf:0d:d6:4c:bb:bb:b4:61:bc:8f:4c:91:40:22:43:
19:00:b3:56:d7:0d:27:71:de:2d:f7:e0:eb:c5:fd:
4a:bc:e3:02:d9:85:5e:4d:1e:ca:cc:76:03:2b:1a:
89:40:90:2a:3a:9e:a8:69:f9:bc:58:69:15:72:b6:
7e:45:47:b2:09:be:24:65:bd:96:38:a7:29:e8:16:
9e:59:8a:bc:e6:b2:6f:e2:47:f8:69:f4:2d:0d:9d:
4e:f1:42:72:0b:fc:6e:e1:65:3a:df:b2:7e:0a:66:
16:83:8b:b9:61:9a:1a:6c:af:f2:7b:63:b3:b8:3c:
4e:06:e5:04:a8:1b:35:22:56:92:3f:bb:72:24:97:
fd:78:10:bb:1c:0f:d2:e8:8c:3a:0f:ad:09:4c:f8:
4c:c1:d4:7c:05:fa:b3:07:29:fa:6c:a0:e7:25:6b:
13:9d:dc:87:c5:31:38:52:eb:82:13:5e:1c:aa:61:
e7:2d:bc:8b:d4:a7:fd:8f:83:bd:8d:4b:03:9f:db:
d7:26:dc:82:89:c7:65:9e:ab:97:ad:53:e8:60:e1:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3D:A6:84:EF:98:B6:3F:52:35:DC:C2:F3:F1:E4:EA:3A:14:5C:86
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:96:4d:d1:93:3a:ec:7f:df:62:db:6c:aa:31:c9:e0:e3:ee:
38:31:2d:82:6a:80:6d:9c:02:d0:6e:04:81:8e:12:1a:7c:d0:
02:a4:d5:f4:7e:2c:15:39:7f:03:c0:a6:a4:3b:28:15:70:82:
3d:1a:a7:0f:b6:6a:75:80:9a:dd:3c:ca:e5:84:49:c8:3a:b8:
c4:a4:58:26:cc:50:59:d6:75:31:03:b4:f6:93:fd:5f:31:32:
da:d2:6c:77:0b:bd:6b:5a:22:b7:09:31:87:b1:7d:59:91:8c:
f0:b8:c8:7d:0d:89:60:3a:65:8f:27:1c:15:99:b8:d2:ed:cf:
a5:22:e9:21:ac:94:1e:09:6e:2c:d1:d9:3f:9c:c1:73:b6:df:
55:bf:c9:8f:66:57:36:8f:97:d0:a2:85:89:de:f5:26:89:7b:
af:69:f6:f1:17:b2:2b:9b:8d:56:4f:29:64:fe:d5:bc:16:b4:
90:12:5a:cf:be:98:ce:98:f7:af:0e:07:be:37:27:96:2f:0c:
3a:67:3e:7d:ac:9d:23:8c:ce:ab:c1:54:bc:83:99:ee:30:e6:
13:1f:96:56:b1:5b:40:8d:9e:73:5a:f4:23:21:3a:01:e3:05:
63:82:4d:3c:d6:5f:86:96:67:e8:58:eb:ec:8a:49:41:66:6f:
09:3d:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:18 2025 by rpki-client