Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: gpAIYW23qHp5b7UOaWnlnfLeeMQw6CCHrnvBodhsdig=
Subject key identifier: 4E:54:2E:C0:E7:46:17:0A:8B:31:0A:96:76:F9:38:22:73:D6:94:E0
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019A4E8653C891ECCBF5532D324EA35D2296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 12B7
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: 4LiTUjwXcNYVafdM65pwT0SBtHo.roa (hash: aRRcAkpdwNbRnG0Mp4QvYoZmqIPlW1QZ3Z9Gc0YUkqo=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: npxTBNWtp0EA/L5lSM6p1JooHNzFdcznxxFyom3skMY=)
3: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (hash: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:53:c8:91:ec:cb:f5:53:2d:32:4e:a3:5d:22:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=4e542ec0e746170a8b310a9676f9382273d694e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:bc:1a:54:aa:55:25:b1:af:6c:03:f1:8a:
c8:8e:12:20:f5:a3:3b:bc:0c:8c:8b:7f:f2:e7:0b:
cc:8f:e1:80:26:04:7a:25:02:49:f7:9b:a3:b3:8c:
00:bb:68:7d:43:29:da:17:52:e2:c8:49:da:46:63:
2b:ed:4c:48:4f:cd:53:c1:d4:c5:b4:26:53:6f:10:
5a:f1:97:60:50:4a:da:23:c8:2a:5d:a1:a5:87:b5:
28:41:f3:8d:06:53:23:60:e4:a7:5d:62:dd:33:c4:
93:d0:66:34:ea:69:ac:2a:a9:da:b6:50:cf:76:7a:
b1:81:69:d2:62:d5:0b:d5:e6:b8:d1:ec:36:46:8d:
81:d4:5a:e2:71:83:b6:fb:cd:3d:3b:24:fe:1d:23:
9d:be:2c:9b:32:1e:d2:89:49:a3:da:0c:42:a5:a8:
12:b3:15:46:2f:ce:ea:c0:a0:0a:71:cd:3f:4f:ea:
fe:f3:5f:07:42:43:1b:ad:3b:dc:3d:8e:0a:8d:10:
28:c6:cb:a5:33:0c:c5:83:46:d7:7b:22:c4:63:84:
9f:a8:fb:9e:a2:ff:e7:3d:03:ff:e7:97:7a:c6:a3:
fd:c0:29:a7:d7:6d:2e:eb:55:69:c9:a5:97:c7:7e:
26:fa:62:8e:2c:c8:6e:f8:ba:56:90:52:a6:c4:af:
f7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:2E:C0:E7:46:17:0A:8B:31:0A:96:76:F9:38:22:73:D6:94:E0
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e1:ca:8a:41:e1:fb:45:9d:f9:28:f6:34:eb:87:51:27:3f:
b3:7c:1e:26:14:21:10:61:4d:34:7a:52:1e:36:84:f7:78:2d:
25:0f:b3:66:b3:2f:aa:f0:2a:3e:55:28:71:6c:1a:78:f8:56:
3c:00:b2:e2:76:5c:51:e7:1d:71:75:46:c7:94:be:6a:1c:2b:
14:64:5b:af:91:b6:4f:35:4e:66:1a:e9:3c:ad:32:70:eb:91:
d4:d9:a6:ae:3f:83:fd:99:4d:bd:d6:65:11:f0:73:0c:8c:e2:
55:80:ae:47:96:03:8d:f8:cb:69:58:7d:b5:98:18:3e:c2:b0:
ab:f0:b5:63:45:2b:ac:d1:e4:03:85:1a:93:15:22:df:7e:fb:
f7:68:2b:db:2a:3e:24:75:4a:48:60:c1:ba:55:1d:d6:93:f0:
cf:f1:f9:0a:2f:5a:63:86:0e:b6:2e:7e:a8:bb:e0:ff:76:80:
aa:a1:9f:79:e8:21:27:45:74:14:fa:df:8a:45:4a:0c:fb:d9:
ff:69:db:93:6e:a7:1d:f0:1f:3c:32:05:54:d2:48:1e:65:b5:
cb:d8:c9:0c:11:6e:b7:a8:b7:03:3a:65:e1:ee:50:fe:90:d3:
99:b3:af:61:43:dc:83:1f:ae:8b:10:21:c0:cb:2c:bb:32:91:
aa:3c:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:48 2025 by rpki-client