Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: OYIFxYypELAJKqh61OFMusUYs5GqHMBU2Ise3cZZBIo=
Subject key identifier: B4:4D:F1:F6:DF:78:21:C5:E4:E4:97:29:AF:EA:10:A4:C0:23:67:62
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 019A4EF58776798CE891D4F213AA9905EEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 05FC
Signing time: Tue 04 Nov 2025 13:01:45 +0000
Manifest this update: Tue 04 Nov 2025 13:01:45 +0000
Manifest next update: Wed 05 Nov 2025 13:01:45 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: KmgzVBxp9ErDiOFFll0g5U9STmJiIFN2Isw9GmXD/j0=)
2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:87:76:79:8c:e8:91:d4:f2:13:aa:99:05:ee:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Nov 4 13:01:45 2025 GMT
Not After : Nov 5 13:01:45 2025 GMT
Subject: CN=b44df1f6df7821c5e4e49729afea10a4c0236762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:af:31:b1:22:ad:f1:ae:6d:e8:e1:b1:eb:
63:46:3e:87:56:5f:70:00:bf:b6:6a:f9:da:55:24:
6f:cb:07:f7:36:73:10:86:d2:e3:3f:4f:e1:0a:98:
d1:a8:d0:e5:38:a1:41:30:f3:c8:78:fb:e4:f1:49:
1c:82:d2:f1:b4:9f:d6:62:bf:d8:d8:1f:17:b4:d3:
1f:67:54:70:1e:be:2c:2b:38:7c:6e:fb:6b:8b:59:
63:5f:6b:0d:01:57:a0:8f:f4:fc:08:db:69:f3:cd:
81:8d:46:a9:19:95:ac:8a:23:d5:c3:c8:1b:57:ea:
2d:27:10:17:02:d6:df:36:11:04:9b:4d:a5:24:15:
aa:59:cf:57:8e:21:86:83:92:96:c6:c5:53:03:0d:
82:20:79:be:16:76:9e:0d:24:0c:08:02:1a:27:dc:
6f:eb:b0:5c:88:aa:29:71:90:1b:f2:c4:6d:49:a4:
51:ae:4b:2a:f2:d8:3c:4b:e5:df:88:8b:b1:95:90:
e2:82:8f:12:72:0f:5e:24:42:0f:10:73:9b:37:54:
15:28:85:d3:0f:a3:0f:fd:41:36:24:1e:68:51:7c:
e2:63:9e:de:78:b0:1e:e6:fc:e4:9e:55:01:f6:86:
56:a6:75:97:f8:48:5a:34:f3:93:6d:14:70:cc:08:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:F1:F6:DF:78:21:C5:E4:E4:97:29:AF:EA:10:A4:C0:23:67:62
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e7:ae:c9:36:e9:6c:64:0d:c9:cd:f0:09:72:04:17:d3:04:
82:81:94:9d:57:ef:0c:d3:06:24:3a:b2:89:da:d0:74:ae:ad:
98:0f:95:64:64:e5:0b:60:de:d1:41:f8:d3:5f:84:23:62:23:
37:9d:6f:85:6e:21:83:d4:f1:c7:1f:15:08:53:59:4e:f6:cb:
ab:7f:72:97:28:c4:9c:28:b8:97:8c:64:cd:54:46:ac:71:42:
3a:0c:2c:4d:dc:47:f3:7b:6a:6b:40:66:c6:04:48:b9:c2:3f:
22:de:d0:26:ec:53:19:b1:9e:68:b1:1f:1f:40:2c:7c:6c:29:
14:ad:13:0e:ef:de:ef:63:b2:f4:af:a6:63:9f:89:16:d6:d7:
9d:55:fa:d7:6a:01:09:0d:62:a1:6f:a7:c6:ac:e6:67:43:e9:
9d:90:b2:11:6f:a9:94:c9:63:0c:6c:6f:3a:a1:b2:76:9a:82:
7a:a8:1a:d9:b2:c5:25:09:97:b4:11:06:63:01:9d:f7:29:be:
3e:f8:b4:65:7a:3f:69:c3:82:29:04:05:2b:bf:78:43:f0:32:
00:82:b8:a1:8a:55:32:ba:df:c0:6c:80:60:57:fa:b7:c1:f7:
31:3a:2f:b5:82:ae:36:20:19:67:3d:8c:e8:b5:50:ed:55:75:
2d:08:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:05 2025 by rpki-client