Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: YjcvMg3DNOdGR3FQW0TIoM6Ezw1v+FvsjE1rqmKGNF4=
Subject key identifier: EC:16:30:79:1C:23:83:3E:B6:A1:BC:A7:35:AB:DF:DD:CD:B6:3C:61
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 019A51BE1AC762CE93A2BBFF13710AE5EB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 0F11
Signing time: Wed 05 Nov 2025 02:00:04 +0000
Manifest this update: Wed 05 Nov 2025 02:00:04 +0000
Manifest next update: Thu 06 Nov 2025 02:00:04 +0000
Files and hashes: 1: NiWsr1aAeWW2oN08xcS5Irqnn3Q.roa (hash: 2xUbIvKWWmEdUess43urc5rTq8I0ZstZadOhJMax4HI=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: GKk4g+6MxIaD1Lwc9Fibkk/UF3bpYgDIM3aQU5DVe04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:1a:c7:62:ce:93:a2:bb:ff:13:71:0a:e5:eb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Nov 5 02:00:04 2025 GMT
Not After : Nov 6 02:00:04 2025 GMT
Subject: CN=ec1630791c23833eb6a1bca735abdfddcdb63c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:53:41:ad:4a:21:11:50:95:de:c7:fa:a2:ff:
0d:9d:d3:c6:8d:8d:78:40:54:60:37:f7:72:c7:8d:
28:74:7c:71:0f:3e:0d:fc:87:6d:31:53:61:95:d7:
2a:3a:d0:c5:58:fe:9f:af:34:37:b7:61:d6:e0:b2:
6e:1f:7c:71:ea:dc:d4:d5:e5:ce:e1:18:0e:a3:ff:
e7:d7:16:d1:aa:34:f2:9e:60:fb:f2:3c:db:27:ad:
59:c0:d5:96:40:4d:f6:09:17:ff:17:a4:9a:7b:bc:
ad:27:3e:71:4e:f1:65:ca:4f:fe:03:1b:c3:a8:53:
82:8f:69:c3:e9:1f:8a:e4:07:d0:0a:2a:26:4a:fa:
00:d2:9f:10:d5:4c:32:78:88:9d:07:61:fd:e1:aa:
b6:30:1b:e8:d8:06:de:c8:7b:64:0a:3a:07:c2:cb:
9c:aa:64:91:c2:62:93:93:91:58:17:85:84:19:86:
57:3b:d1:ba:ec:8d:70:5b:93:cc:a2:58:c9:05:ee:
f9:c1:71:93:d7:af:a4:d7:a9:78:86:38:af:fe:43:
06:87:b8:b5:57:c9:d7:20:ef:a6:f2:9f:14:92:49:
f3:a5:57:e1:7f:eb:77:82:e1:b1:a9:a5:03:a7:92:
86:fb:c0:4e:8d:e4:1e:96:6a:db:3c:58:f6:bf:00:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:30:79:1C:23:83:3E:B6:A1:BC:A7:35:AB:DF:DD:CD:B6:3C:61
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:40:6c:31:84:a2:87:a5:32:9f:77:5e:0e:d0:eb:c4:8c:74:
24:b2:44:95:12:32:17:05:e9:63:2b:32:27:95:c7:10:45:08:
1f:a5:f2:ee:47:cc:bc:10:e8:ed:c7:d1:d6:30:cf:5d:37:cf:
59:06:7f:7b:93:90:17:52:84:c1:d8:82:57:76:68:3d:83:b6:
1a:34:6b:3b:f9:6e:25:2d:ac:7a:0f:87:f0:cf:1c:c8:b6:73:
45:80:f8:e1:6c:73:c9:61:30:25:e0:87:0d:a5:e2:03:e9:c1:
40:7a:fb:88:98:76:a4:b4:b1:1a:c2:9e:27:e8:86:46:f7:1d:
8c:af:d0:b7:88:37:11:91:e0:af:d8:d8:6a:e6:53:44:9f:0b:
70:96:77:79:13:a0:19:5e:eb:7e:ed:48:9e:ac:f6:a2:38:9f:
4c:6c:00:9d:46:f4:c5:2d:fc:fb:1b:76:3d:e3:6a:c1:c3:86:
61:0e:66:98:23:36:2b:c3:3d:fd:b2:62:b9:38:15:34:cc:39:
b1:66:cd:fc:e5:96:50:0d:02:1b:8a:7e:6b:ed:45:94:2c:76:
25:fa:82:49:6e:5e:73:44:65:c8:d5:6c:90:0a:6b:68:99:44:
7f:66:ae:f6:b8:74:18:44:6c:80:16:76:71:11:fd:af:e1:79:
45:69:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:05:54 2025 by rpki-client