Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
File: QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft (raw, json)
Hash identifier: 3B8Kw+dD7nm1k+ImPDUxcmgv2+U9kvmVNw5MTmnVgXg=
Subject key identifier: 03:8E:8A:F7:72:8C:F4:C9:95:53:DC:CE:E5:98:22:94:01:07:E2:5E
Authority key identifier: 41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
Certificate issuer: /CN=4100e4b4a97882c1798c470e3abd805e325dd595
Certificate serial: 019A4E86684ED079BD42EEA32F5EC233E376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
Manifest number: 0C19
Signing time: Tue 04 Nov 2025 11:00:22 +0000
Manifest this update: Tue 04 Nov 2025 11:00:22 +0000
Manifest next update: Wed 05 Nov 2025 11:00:22 +0000
Files and hashes: 1: QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl (hash: UOgu0AsEPpcFpWI/kyb7bOlFpk2Q3+qvnF5al33X0zM=)
2: dKp1x4AjnPUcfIO_WrYQasCbX4c.roa (hash: BBLyfF5z+X1cauuxHi1cH0OZMMJW5dshnRCgSvteyno=)
3: uBNZ4MqXESz6xGHzQdhbKOD3CeA.roa (hash: Xvf1KJxZcyYU4khA0juJ7NXfjXv9HKqoCzWln+BqLrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:68:4e:d0:79:bd:42:ee:a3:2f:5e:c2:33:e3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4100e4b4a97882c1798c470e3abd805e325dd595
Validity
Not Before: Nov 4 11:00:22 2025 GMT
Not After : Nov 5 11:00:22 2025 GMT
Subject: CN=038e8af7728cf4c99553dccee59822940107e25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:06:78:41:d1:4f:a6:10:56:3d:f9:f1:3d:
8a:94:97:fd:fe:78:e5:0a:5a:af:58:cb:c3:7f:cf:
92:5e:29:4f:04:4f:20:ac:33:1e:be:6b:55:5c:3e:
7d:81:d4:5d:54:ef:22:a6:af:7c:f2:b0:55:87:86:
58:05:b5:f7:6f:53:c3:18:a0:3d:60:da:8e:1b:e7:
c3:5f:d9:cd:eb:54:9d:ff:71:31:6d:a6:57:cd:43:
bc:ef:11:9b:66:69:dd:16:0f:63:cb:dd:1a:92:93:
d4:eb:df:5c:83:d7:80:a4:10:17:0e:e7:1f:44:d1:
b0:c7:1c:59:08:7a:46:84:7d:84:7d:45:7b:d0:3e:
85:51:9a:f3:b7:2d:f5:3c:cb:4b:33:05:12:04:72:
20:a2:cb:4b:ce:85:3e:9b:e7:83:44:79:8b:0b:1f:
79:bd:5c:28:bd:77:8e:a9:28:0f:4a:96:19:bc:58:
c2:1d:31:71:fd:d9:ad:7e:78:85:78:b0:ea:2c:eb:
82:11:e7:70:17:44:8f:f2:23:b7:b9:76:10:2e:57:
9c:d8:df:d1:a6:73:41:58:72:0d:1c:ab:e8:fc:c0:
30:da:2c:ab:e5:33:e6:4e:43:9a:63:ab:1d:15:03:
29:42:95:f3:46:3f:ee:c9:f3:3b:62:c1:f8:98:3a:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8E:8A:F7:72:8C:F4:C9:95:53:DC:CE:E5:98:22:94:01:07:E2:5E
X509v3 Authority Key Identifier:
keyid:41:00:E4:B4:A9:78:82:C1:79:8C:47:0E:3A:BD:80:5E:32:5D:D5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQDktKl4gsF5jEcOOr2AXjJd1ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/beb97e-0957-4480-8b40-daa9f2a33baf/1/QQDktKl4gsF5jEcOOr2AXjJd1ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f7:02:b5:66:8e:71:7b:87:21:e8:0d:bf:d8:4d:6a:be:c2:
37:a5:1e:d2:f6:9c:d2:38:a7:f6:fa:d7:10:68:00:8f:89:09:
20:d6:b6:0d:5d:f9:35:3b:17:89:e8:33:69:cd:5f:d8:0a:c3:
6c:ce:23:c5:87:46:cf:81:70:2b:42:72:fc:07:6d:93:6c:e5:
ad:94:93:13:fe:9a:7a:03:cb:d9:f5:f6:0c:3f:90:55:89:2b:
dc:a4:8a:e5:5b:c1:84:65:76:b1:fc:70:71:80:ab:36:7b:de:
4f:2a:88:77:78:80:06:4c:74:5a:ef:a6:21:58:70:d4:69:91:
48:3c:aa:88:71:0d:5d:d2:16:13:b4:02:52:87:16:ad:a4:d0:
b7:b8:dd:b4:18:8c:d5:d9:b9:80:81:8b:81:09:5e:4f:c9:af:
7d:05:78:00:eb:ca:ca:1a:ac:02:b7:f2:d2:63:be:ca:68:c7:
3e:42:66:7c:0a:4e:4e:61:4e:de:3a:65:ee:34:db:25:90:1a:
12:07:af:ab:08:9e:b8:79:20:aa:2d:17:57:1d:30:70:df:12:
c4:e5:ea:a7:22:e1:14:63:f0:3d:30:22:cd:a5:b6:7f:cb:0a:
e5:86:e4:e8:35:2f:3a:73:59:61:20:b9:79:a3:d3:c3:1e:d5:
c8:70:ed:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:23 2025 by rpki-client