Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
File: qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json)
Hash identifier: h8KzQaSLlN7ugEcYiGAMGIDzq+OhDh0BpbpcOGqTSGE=
Subject key identifier: 07:92:F7:BD:A7:F1:2B:5E:C3:4A:EB:72:32:B5:BE:45:57:50:ED:A1
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial: 019A4EF4CFC8D4C9162F5836B6FFD8D82138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
Manifest number: 0E1E
Signing time: Tue 04 Nov 2025 13:00:58 +0000
Manifest this update: Tue 04 Nov 2025 13:00:58 +0000
Manifest next update: Wed 05 Nov 2025 13:00:58 +0000
Files and hashes: 1: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (hash: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=)
2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: Ryq2Gjk8/Ltnd/7euVEEpOZHkExOpX39fZLf8f/3Cas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:cf:c8:d4:c9:16:2f:58:36:b6:ff:d8:d8:21:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
Validity
Not Before: Nov 4 13:00:58 2025 GMT
Not After : Nov 5 13:00:58 2025 GMT
Subject: CN=0792f7bda7f12b5ec34aeb7232b5be455750eda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4d:28:ff:96:7b:f8:a4:b7:b5:a4:70:5e:ad:
e4:8b:71:fa:bf:d4:43:63:66:7b:0b:24:20:2c:2a:
9b:ae:25:d6:27:57:b4:be:81:62:e5:a7:15:5f:0d:
b6:12:b4:0f:47:44:ae:31:7a:db:d5:1e:9e:63:e0:
60:26:e7:5f:ba:09:ba:49:15:88:75:ba:55:4e:a3:
ab:3e:9c:b7:76:f3:b3:9b:c7:f2:96:6d:f7:50:7c:
82:0c:8d:b8:07:19:a8:ef:0d:c4:61:54:50:ab:de:
ba:12:83:46:dd:ae:9b:61:5d:27:a9:f2:69:1b:1f:
b9:1a:b5:90:c1:26:a2:3f:1d:97:4a:43:db:1e:8b:
94:bb:ac:1f:81:3a:4e:f5:5c:d7:48:1a:ca:25:c7:
2d:70:79:a8:bb:e7:86:6e:e4:08:b9:bb:18:b5:ef:
16:85:1f:81:71:ba:89:be:11:ef:4e:f7:09:c8:b9:
8a:d0:6d:a2:80:af:35:9a:75:45:aa:25:00:23:16:
26:23:ea:f9:9e:66:ef:e9:5b:d3:7e:50:a3:36:ff:
86:70:30:9b:01:62:df:49:54:cd:d4:4c:ee:5b:82:
4e:d9:c9:32:31:e8:34:7e:94:28:c6:06:73:5b:a9:
87:a1:27:8d:f3:52:9c:07:63:3b:51:5e:af:98:5c:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:92:F7:BD:A7:F1:2B:5E:C3:4A:EB:72:32:B5:BE:45:57:50:ED:A1
X509v3 Authority Key Identifier:
keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0e:84:a8:2f:a2:6e:77:c0:3a:48:b5:3b:79:49:53:57:1a:
77:63:08:b8:ab:e5:f1:97:cf:a2:7a:23:74:69:38:76:1b:d2:
e4:31:71:38:1c:6b:90:75:d7:c4:02:57:a7:7c:6a:8e:e1:2a:
98:04:03:c9:56:5b:a7:b2:50:06:50:d5:95:f1:93:d1:f3:8f:
bf:02:5f:f6:94:d5:b3:47:8a:2d:cf:25:3a:11:66:b3:df:5e:
db:46:52:c1:7a:8f:35:1e:59:7e:d5:e0:0e:74:d6:a6:aa:44:
85:38:6a:a6:ea:6f:c6:9b:51:02:9c:84:61:51:57:5c:17:16:
f0:04:0d:7f:ba:0e:d1:5b:f4:d2:10:b2:51:01:da:3c:65:bc:
34:1f:af:0f:2f:25:92:30:3d:cb:66:76:12:74:21:63:a6:76:
cc:07:7b:c0:5d:44:05:49:84:9d:9d:e5:8b:b9:95:2c:e3:64:
97:ab:a8:ae:b9:0f:65:30:31:d9:0e:c7:2c:04:6f:7e:38:e0:
25:f2:48:01:7c:33:af:d6:6a:64:81:5a:2b:09:f9:9a:05:7f:
d9:f0:ad:c4:e1:c5:7d:0e:ee:9d:66:7d:04:37:11:41:27:16:
c2:9d:a8:ea:1a:0b:c9:09:3f:34:6a:d3:6d:96:7c:4f:bd:48:
d1:c1:99:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:06 2025 by rpki-client