Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
File: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft (raw, json)
Hash identifier: cIAj8+7a3wASOgOEexytNJGJBmWG1WgHUMuIq5RWZVE=
Subject key identifier: A2:09:31:D0:32:0B:7E:75:22:96:12:CF:5E:76:22:A2:75:87:07:89
Authority key identifier: 40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
Certificate issuer: /CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Certificate serial: 019A4E86CA95391C6D4FC701A5B8D14DEC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:47 +0000
Manifest this update: Tue 04 Nov 2025 11:00:47 +0000
Manifest next update: Wed 05 Nov 2025 11:00:47 +0000
Files and hashes: 1: QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl (hash: ulcXLnbQKvfe4Eu3NoakYroQdku1ip5SW3NFqXkFtEw=)
2: ybs61exhN0sYw1YgpfqdbmCmhqk.roa (hash: PW/e8DJb4WqsNiI0ODBUiDNLr0vhf0OlyJoAR5NWnhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ca:95:39:1c:6d:4f:c7:01:a5:b8:d1:4d:ec:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ea5e39f8635736e48df53822a5cacc10b43a1f
Validity
Not Before: Nov 4 11:00:47 2025 GMT
Not After : Nov 5 11:00:47 2025 GMT
Subject: CN=a20931d0320b7e75229612cf5e7622a275870789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:af:81:e8:2e:42:0a:b3:33:71:08:65:22:e6:
d5:73:94:d0:17:17:9e:ea:ab:90:c6:8e:84:b0:0a:
e6:82:00:a2:f2:90:bf:a9:3c:58:54:90:53:a3:08:
21:ba:92:e1:7e:82:af:4d:13:93:6d:f8:eb:3d:2c:
c4:9c:27:a4:bc:a7:71:e3:80:37:56:38:f1:fb:2e:
71:fb:74:93:dc:81:35:c8:58:0b:80:57:2e:2c:78:
9c:4d:d3:3e:29:41:e8:78:bb:7a:27:35:a8:51:83:
62:ee:f7:85:ec:33:45:bd:82:c1:5b:06:9a:88:ce:
2a:3a:dc:3b:b0:76:9d:d2:3b:ba:21:8c:cf:22:eb:
67:9a:bc:cf:c5:9e:5c:98:e9:ad:9b:3b:94:00:dd:
3b:af:7e:87:dc:7e:87:fd:db:e9:0c:0a:38:01:f3:
52:3b:41:ac:1b:30:0d:c4:24:9a:d4:14:2c:8d:91:
9c:b3:bc:6b:ae:2b:79:6e:c1:9b:c9:e7:d6:8f:38:
d3:7a:80:24:97:9f:57:36:b4:92:d4:07:7e:a8:70:
cf:b2:a8:f4:2c:a4:7d:3b:19:11:c7:7c:2c:9e:92:
96:22:6d:fd:79:50:33:50:f2:e3:f0:d2:d1:9c:dc:
91:b1:08:ca:ca:15:ce:0c:94:a8:f4:f6:2a:a9:ee:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:09:31:D0:32:0B:7E:75:22:96:12:CF:5E:76:22:A2:75:87:07:89
X509v3 Authority Key Identifier:
keyid:40:EA:5E:39:F8:63:57:36:E4:8D:F5:38:22:A5:CA:CC:10:B4:3A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/b62439-7e47-42e1-8fdc-18e91296022d/1/QOpeOfhjVzbkjfU4IqXKzBC0Oh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fe:04:2e:8e:e1:fa:51:e0:a2:15:e6:39:03:f3:07:83:ec:
12:ba:b2:48:a7:b7:bc:c1:de:15:80:69:03:00:ac:c8:7c:04:
06:ce:5f:1d:0f:d2:ba:0d:24:a5:bb:a5:ef:7d:c9:d2:31:b1:
00:67:eb:b5:8a:86:b8:1d:59:a2:3a:70:85:66:c5:4b:65:a7:
17:cb:43:0c:d5:c0:23:bf:85:02:13:48:af:0c:2d:3b:ac:88:
1a:71:52:a3:58:61:f8:07:d6:ed:a8:95:92:60:b4:30:86:e8:
5a:a2:cb:85:ae:a7:10:59:a3:e9:1e:1c:ad:6e:99:ff:e6:05:
7c:40:23:d1:0c:d5:3d:81:b2:2b:bd:d8:b3:de:4d:a6:ee:15:
63:a9:83:8a:6d:c2:e3:b7:15:1d:08:0f:cc:5f:7d:91:49:6b:
f4:e3:9a:42:5c:b1:a7:40:f0:0b:f9:65:e6:af:b2:6c:dc:8e:
ea:1c:09:1f:02:72:9b:10:52:1c:73:6e:db:f5:59:58:da:ca:
cb:82:67:45:70:71:c2:54:81:a4:d2:6c:5a:45:75:bc:26:05:
ce:99:e9:0a:a2:c7:e9:8c:db:08:61:47:4e:64:24:4b:82:f7:
9a:cc:40:c1:36:dd:37:51:df:c9:87:ba:c2:36:7b:7f:48:85:
34:b1:7d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:13 2025 by rpki-client