Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: 5YZ9KKTb7L0nuymLcZ70tHB5MBtjzmAEezbApBhaATM=
Subject key identifier: 45:55:5B:3F:FF:54:0C:37:F8:E9:E7:33:2C:26:8C:F9:29:CC:C7:35
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 019A4EF5CD57D06A178457D95CAD8DB7FDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0B7B
Signing time: Tue 04 Nov 2025 13:02:02 +0000
Manifest this update: Tue 04 Nov 2025 13:02:02 +0000
Manifest next update: Wed 05 Nov 2025 13:02:02 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: r0d7eM5habQW94gwoX6cF2abLQN61/TO6t3gcKXlM+0=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:cd:57:d0:6a:17:84:57:d9:5c:ad:8d:b7:fd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Nov 4 13:02:02 2025 GMT
Not After : Nov 5 13:02:02 2025 GMT
Subject: CN=45555b3fff540c37f8e9e7332c268cf929ccc735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4d:f0:da:b8:f3:b7:33:76:ab:e7:35:d6:83:
8d:58:ef:85:a5:f5:7d:33:7c:f9:33:6a:d3:1d:34:
98:4b:ca:b4:69:13:87:79:53:20:c4:da:a9:4d:ba:
15:44:f0:e8:e1:63:ad:09:90:e0:f9:05:28:b3:71:
c9:d4:b9:05:dc:1d:4e:64:20:c1:b9:93:de:16:67:
cb:d3:d0:1f:cc:20:fb:cf:f6:3e:1c:39:b0:5a:ac:
b7:45:c0:72:13:4e:29:74:66:b9:f8:20:53:dc:e3:
56:f8:41:fc:e9:b6:71:13:78:24:c6:28:28:d1:9f:
48:0b:8b:bc:3f:da:5a:42:7e:36:20:1b:35:37:39:
be:26:47:b0:77:54:c4:9e:3c:23:6b:78:e9:27:c3:
71:f3:a7:56:41:f4:6f:33:75:fc:cd:20:46:76:61:
0a:77:bf:47:e2:05:80:2d:28:14:01:3c:e2:b7:3e:
30:91:95:34:01:25:f8:47:40:d6:bf:39:f5:ff:94:
3a:64:98:57:42:56:bf:bf:b2:01:6d:85:4a:0d:4d:
4a:af:7f:c4:d1:91:03:3f:1b:62:6c:9f:df:f7:14:
09:dc:ff:b6:47:2f:fa:91:05:ef:c8:55:3d:78:dc:
97:3a:87:1c:28:81:c9:66:12:24:5e:4e:e3:af:a4:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:55:5B:3F:FF:54:0C:37:F8:E9:E7:33:2C:26:8C:F9:29:CC:C7:35
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:40:a8:a8:7a:a7:be:d5:5e:fa:db:eb:d9:a4:12:42:21:c9:
3b:fa:68:e1:50:44:5b:a1:4c:48:a7:bd:63:4c:8d:32:d4:a4:
f5:78:15:cd:c1:2f:a1:fe:2b:6f:ff:8d:fc:14:24:42:2e:2c:
0a:83:92:d3:95:fe:27:c0:51:c7:81:0e:65:de:68:e9:64:ef:
66:ba:33:e1:7a:67:af:02:89:9d:71:be:43:ff:4e:22:97:3f:
33:7a:55:73:70:be:6a:a6:dd:ce:9d:99:cd:0c:66:88:50:f2:
81:9a:dd:c7:75:3e:a2:3b:bd:d8:3d:a4:ab:14:e6:00:b0:71:
b4:90:47:aa:3b:84:99:ff:13:da:84:2f:d0:cf:e1:4f:76:a8:
44:66:ec:f2:3a:54:6a:c5:d1:c8:2a:5d:9d:4b:9f:c3:54:a5:
9c:c6:07:0e:a6:fc:b3:26:6a:e5:c3:94:dd:65:d8:bf:c2:13:
f4:3e:8a:9b:d2:d8:11:50:da:cd:83:d3:31:bc:d3:3d:88:be:
44:66:87:2f:38:5f:5f:0b:a7:9e:86:1f:93:b4:e2:98:52:8f:
41:92:7c:33:b4:70:3a:fb:8b:83:55:ce:91:7f:c7:35:d5:5a:
0c:0f:62:3d:22:4c:a4:04:e8:ea:7b:3d:15:d4:5e:80:51:4f:
1c:c7:c9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:15:01 2025 by rpki-client