Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: eFOVQh7JvA9dNmNSBqG0lY49OcWTZns1TOrk8b9bcMk=
Subject key identifier: 1F:92:60:0F:08:5D:EF:64:1C:DB:22:7C:73:96:DF:30:30:9B:1F:9B
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 019A4EF5CDD9E9F54000C32D16090F9818F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: NBg3vRxXmVQq1e5c+/M78G5IkqRiKd626c013WRiQ+g=)
2: wQqY6GzbDftcPzXJa8kVYZmeUUk.roa (hash: JDvmaY6VGQlVNt+ZPlklOrTqgJ6a+KsUqH/Pcr7SIcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:cd:d9:e9:f5:40:00:c3:2d:16:09:0f:98:18:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=1f92600f085def641cdb227c7396df30309b1f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:c7:2f:3a:11:31:f3:a7:59:4f:9e:4f:de:
20:8c:0b:af:f1:03:63:a3:fc:69:72:f6:67:2b:7c:
53:b9:d2:97:ad:56:27:66:80:fc:6e:fa:8f:4f:cd:
4a:e5:4f:11:68:ff:48:d3:51:60:00:47:aa:55:f7:
a5:6f:94:f0:d3:a1:79:6a:da:c3:2e:70:bc:04:a2:
50:82:48:b1:43:00:b1:10:e6:24:ec:07:f0:5c:8a:
95:a4:ed:7c:ab:b1:df:88:dd:a5:6b:47:30:51:00:
c1:3f:71:c1:34:9a:2d:55:b2:7b:2c:6d:08:05:6a:
2a:65:c4:c8:65:ce:e6:7b:11:69:a3:e2:81:89:e4:
ba:fb:df:34:17:bf:86:ab:b2:39:df:3d:ac:f8:67:
66:df:59:58:a4:5b:b1:43:0a:06:9d:95:81:ea:c2:
50:13:5f:09:b4:8f:57:fa:19:60:c0:a2:94:66:de:
bb:b9:e8:99:d2:ba:b3:5f:b8:60:76:79:b4:d8:ab:
22:7a:52:db:b7:92:c9:9e:e7:4a:7a:22:d5:dc:a5:
de:7e:93:c7:6b:f7:ba:be:b7:d8:94:9d:9f:97:29:
ab:a7:ee:4f:e5:5e:ed:c6:9b:d0:68:97:0a:79:ac:
ab:da:51:4f:64:62:4a:18:e0:85:76:f0:98:79:75:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:92:60:0F:08:5D:EF:64:1C:DB:22:7C:73:96:DF:30:30:9B:1F:9B
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e5:62:d1:20:5a:ab:86:66:31:58:90:90:21:51:03:43:19:
5b:25:a9:29:17:b5:09:e7:fe:be:b0:b7:89:8c:f4:0c:2a:1b:
a9:cf:f0:17:f7:4d:32:9f:b4:0a:f6:22:a6:8e:05:f4:17:86:
a8:56:da:4d:8d:3d:2b:dc:7d:3a:ca:4e:aa:1d:fd:03:00:cb:
96:33:3f:59:d3:33:ff:a3:5e:7b:3b:f0:46:e9:fd:d3:cd:e5:
92:18:e5:3b:81:54:e0:5e:80:b0:14:d8:5c:95:81:29:bd:40:
2c:3a:f8:f7:b3:78:81:31:90:e8:13:ca:5f:f7:35:50:52:a9:
43:23:94:8b:45:e8:93:71:41:24:21:5e:d9:dd:6e:83:6d:44:
c5:0a:a5:df:e3:31:06:f6:d3:06:6a:f8:7d:0c:a4:c2:aa:97:
ba:d2:cf:27:85:e3:74:f3:43:fa:b9:c3:46:25:e4:c7:41:20:
5a:52:17:55:80:02:b0:8c:9b:6c:c9:8e:d8:bb:5f:ef:b9:3e:
a7:4f:81:06:58:ce:19:97:3a:4b:f8:56:a3:78:54:1e:67:a1:
1d:32:1f:25:f7:0c:c3:b8:9c:6f:cb:56:0e:67:eb:bf:4e:e7:
cb:ac:38:d0:14:66:dd:98:cd:5e:da:02:b5:a4:2d:51:08:49:
0c:fd:f5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:11 2025 by rpki-client