Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: olUfcwu3QQjFS5WvcBBISogljs9lkGAyf+hF+QWHBAk=
Subject key identifier: 27:01:E5:0C:3A:CA:D5:94:82:FE:FD:10:5F:9A:A1:93:21:D2:68:7E
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 019A5187C21592706623BE8F0CA8D850733A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 02EC
Signing time: Wed 05 Nov 2025 01:00:42 +0000
Manifest this update: Wed 05 Nov 2025 01:00:42 +0000
Manifest next update: Thu 06 Nov 2025 01:00:42 +0000
Files and hashes: 1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: aMXxjBKQLM1qm498PZCETe/TUK+MLoM7+QFZ9bg/P1E=)
2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:c2:15:92:70:66:23:be:8f:0c:a8:d8:50:73:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: Nov 5 01:00:42 2025 GMT
Not After : Nov 6 01:00:42 2025 GMT
Subject: CN=2701e50c3acad59482fefd105f9aa19321d2687e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:9c:7f:f6:e8:34:d1:2a:94:cc:3b:3d:ba:
f3:85:60:de:c4:6e:39:49:87:7e:37:2e:d6:56:ed:
c0:34:11:0a:4c:62:ff:e3:af:27:40:f1:1a:71:08:
5a:ee:36:cb:f0:9d:0d:1b:0d:93:20:44:68:e3:e1:
a6:29:c3:17:52:0a:58:ac:34:fe:a1:e2:60:81:98:
9d:f0:c1:82:91:2b:93:94:7d:c8:a7:14:4b:5f:b1:
f5:10:87:6c:7f:73:d0:bf:7b:fc:31:96:b9:6f:a0:
8b:3a:c2:01:aa:2a:16:8c:f5:46:9f:65:16:fa:1b:
c4:5e:20:bc:6c:90:4a:ef:c9:ef:6f:2d:0a:14:aa:
96:2b:a4:b9:45:05:2b:ce:17:5e:ec:e6:93:37:da:
ec:a4:28:db:c3:1f:d0:cd:a2:cb:4f:43:5f:b1:14:
1a:d3:aa:44:0b:3b:7d:ba:2b:28:8e:45:2b:84:0d:
4e:17:96:fb:f8:a6:e2:95:97:8b:6d:e3:07:1b:b2:
0e:e4:17:2f:90:81:6d:5f:44:ad:a0:63:86:da:6e:
bd:74:67:02:63:05:78:03:67:d4:44:80:9d:9e:eb:
df:95:50:9b:1d:57:98:8c:b3:6f:b2:91:b2:a2:a4:
42:83:da:b3:8e:73:95:e2:84:a3:af:5a:16:6e:1d:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:01:E5:0C:3A:CA:D5:94:82:FE:FD:10:5F:9A:A1:93:21:D2:68:7E
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:9f:fe:05:9b:aa:21:f8:dd:1f:56:37:75:f2:61:1f:58:
ac:99:58:bc:0a:fe:8c:9d:93:f7:70:d2:e4:1c:d5:79:5a:15:
88:67:8e:9c:14:7f:53:22:89:d1:17:ca:db:5b:e8:88:e8:ea:
c5:9a:f3:de:da:5f:32:9c:44:ca:95:7f:78:61:81:0d:35:61:
4a:45:a5:13:22:9d:34:63:ec:96:a7:68:61:a5:e5:63:18:c9:
9d:9d:db:d8:39:5c:21:14:b2:ed:f9:ba:23:ce:38:33:e4:55:
95:c9:e8:b6:f1:49:97:86:70:24:d1:4d:df:4a:45:a4:12:d0:
a5:8c:b3:3a:d2:13:23:ad:bf:79:89:0f:ca:ff:35:31:d3:e3:
0f:bd:18:ab:0f:cf:c2:90:12:41:12:d6:49:3c:3c:73:16:ad:
e3:60:01:f4:74:be:83:c9:98:62:22:a2:e0:1d:8f:ff:40:59:
4c:fa:78:58:9e:78:18:ff:fd:d2:44:e2:cb:08:af:0e:9a:cc:
ff:77:2b:02:d2:0c:5b:f5:1b:c1:ed:d8:35:7a:d2:08:45:8e:
68:04:3b:f5:c9:6f:e4:67:d5:bf:76:ce:ab:18:a8:ee:b6:11:
99:af:5b:3c:2b:6f:c4:31:25:75:fd:d2:f8:15:d4:31:c2:55:
2e:c1:0e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:25 2025 by rpki-client