Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: l9ezcBWIeSVkWllwJfUBS7tQRvem+SfI6bV2WhoPrOI=
Subject key identifier: C0:A4:A9:70:0A:30:A3:1B:61:C0:C2:E4:96:06:EB:5D:3E:C3:88:C2
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 019A4E4FCBFBFF77ADA313A062E82D0A9B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 14DF
Signing time: Tue 04 Nov 2025 10:00:43 +0000
Manifest this update: Tue 04 Nov 2025 10:00:43 +0000
Manifest next update: Wed 05 Nov 2025 10:00:43 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: PC5PEi0PVTOwgnb2ae5L4KNGMmKMVfRsMEFbfBn3HXU=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:cb:fb:ff:77:ad:a3:13:a0:62:e8:2d:0a:9b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Nov 4 10:00:43 2025 GMT
Not After : Nov 5 10:00:43 2025 GMT
Subject: CN=c0a4a9700a30a31b61c0c2e49606eb5d3ec388c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:73:28:e2:2c:bd:47:45:31:c0:68:cc:d5:
76:9e:0d:61:56:8c:11:e8:95:e5:df:6d:52:df:d3:
51:ef:65:ef:b8:60:46:5a:bf:6d:ad:27:36:6f:8d:
18:0d:42:73:1e:97:b9:24:97:d4:70:fa:3c:2b:07:
93:b1:c6:0f:5f:5c:59:1f:72:2d:c5:ed:80:83:f2:
1b:ce:9b:07:fa:39:77:4b:1d:4e:5d:b1:9b:ab:8a:
ab:c8:00:ce:d4:91:21:cb:9b:10:29:38:af:0a:90:
bb:9d:02:66:96:c6:c5:a9:42:20:2d:d6:a8:57:be:
4b:51:ad:6f:fd:73:62:6c:30:67:1b:61:55:2e:3b:
0b:96:ce:42:bd:9c:e2:3f:5a:1f:c4:2f:c0:ce:6c:
29:37:64:e7:4e:c7:92:cf:08:9f:3e:d7:00:fc:fb:
67:51:0a:85:c8:e0:c3:89:92:0b:82:a0:d1:ba:38:
3b:12:78:ac:06:3f:44:77:f4:35:8e:f5:79:27:e5:
e5:e7:c4:5e:9a:01:31:31:02:d1:31:f6:46:8d:b0:
22:23:df:cd:6d:34:24:d5:c7:15:f2:a3:bc:db:52:
21:40:a1:b7:0e:a3:d1:d3:12:c9:6f:0d:41:b0:be:
47:c8:58:a0:08:aa:a7:a2:21:51:6e:43:fe:3d:6c:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A4:A9:70:0A:30:A3:1B:61:C0:C2:E4:96:06:EB:5D:3E:C3:88:C2
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1c:09:51:d8:5d:33:40:57:ec:5f:04:7a:bb:54:70:21:8e:
9a:c7:5d:33:07:79:9e:56:29:29:e7:f3:62:fa:cd:c1:ca:10:
a6:a2:14:74:67:6e:8e:a4:da:87:9a:ed:6c:c3:58:83:1d:e0:
09:19:5e:de:61:f9:1b:d3:b8:b9:db:6d:95:17:3d:87:6b:cb:
5c:eb:f8:c9:f9:30:99:62:a1:c3:1c:9e:2a:1f:1f:64:ab:7a:
ca:c7:89:2a:cd:86:dd:ba:32:46:1a:0f:d6:fd:10:5e:db:34:
04:58:b4:2a:29:11:5c:b8:df:fe:52:43:91:06:ba:53:91:c1:
03:38:64:2c:25:86:a5:4b:6b:7d:c1:be:cf:0f:d7:10:81:3e:
2b:6b:26:a0:23:0d:12:5a:d6:40:61:1d:ae:33:42:89:c8:2e:
89:15:9c:32:af:90:43:52:37:4c:d1:24:60:e6:f4:ee:54:95:
82:b8:08:3d:e4:af:27:3a:3d:8e:67:15:ee:ed:f6:c4:fd:b7:
07:d8:6d:1e:18:4f:4c:69:a2:70:d9:11:56:d3:a3:c9:65:46:
c7:82:cd:fe:d0:9d:98:8e:b9:92:35:53:f6:61:be:5e:ae:97:
00:d9:46:44:ca:6e:9a:dd:65:98:82:e7:0b:66:5f:24:e8:be:
d5:28:e1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:25 2025 by rpki-client