Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: srPWZj65eGhlk06xOrt3QtSHOm+q6bsQB6PzV7RyXI4=
Subject key identifier: F5:32:0B:DB:29:BD:16:4C:41:8F:82:66:04:37:B7:EE:38:F9:14:F5
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 019A4D73BFFB0D1F1B5E448E7C415826247A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 09ED
Signing time: Tue 04 Nov 2025 06:00:22 +0000
Manifest this update: Tue 04 Nov 2025 06:00:22 +0000
Manifest next update: Wed 05 Nov 2025 06:00:22 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: Bnex/RcaBVHtEQbBB+uAaZgoMI2Udztye02bIQMdQH0=)
2: lwAKLfcPZutkbCs3l1rr65okU8U.roa (hash: wQe65FAh279EvNyxsiAbyzzON1scOJGqaft13LngWyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:bf:fb:0d:1f:1b:5e:44:8e:7c:41:58:26:24:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Nov 4 06:00:22 2025 GMT
Not After : Nov 5 06:00:22 2025 GMT
Subject: CN=f5320bdb29bd164c418f82660437b7ee38f914f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:b5:ab:54:f7:41:96:ae:e8:64:e9:29:7e:
c7:ee:56:c3:78:9e:a2:01:8a:05:5b:02:54:de:b5:
ec:b5:a3:9a:d7:17:e3:9a:e4:d9:a9:43:ba:79:18:
61:74:97:c9:46:1d:eb:cc:63:49:33:06:35:0b:15:
57:82:5e:d2:fb:35:38:1b:83:cb:a3:3d:97:06:00:
b4:cd:a8:50:64:13:1e:18:da:7c:b2:98:28:6b:6e:
5d:44:60:f7:b7:4b:ee:e0:26:63:a4:4f:e1:d4:3e:
cf:d0:a6:3f:ff:0b:5b:7a:89:08:4b:a7:ee:62:ab:
e4:31:38:79:6a:35:4e:0d:fd:dd:d8:2a:ae:0c:c9:
6f:0d:c5:42:c4:1e:be:00:2c:05:ff:24:7c:86:91:
a8:80:7e:c1:a0:28:1a:4d:b7:b4:66:ab:15:ca:63:
1a:3a:11:a3:8c:8b:e1:09:60:d7:56:f1:b0:e7:ae:
2c:8e:21:da:e4:ee:7e:d6:7c:a5:98:73:32:b8:f8:
e4:82:cb:5f:fe:f7:dd:d2:6f:90:08:71:17:f8:59:
c6:7f:10:33:44:62:ac:1f:c1:dd:31:8f:2b:c9:b0:
4a:7e:73:44:cf:d6:6d:74:4c:ba:bf:ca:ba:b1:85:
15:f3:b4:fc:66:50:4c:b8:88:60:31:ec:53:b8:76:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:32:0B:DB:29:BD:16:4C:41:8F:82:66:04:37:B7:EE:38:F9:14:F5
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:17:87:70:33:b4:48:0a:3b:2b:df:78:63:ca:04:fd:5a:4c:
99:8d:7a:42:a0:95:e0:86:5b:57:9c:00:98:86:7f:45:da:22:
7c:ba:d6:fe:de:a2:61:d3:29:e9:a2:48:7a:e6:4a:b5:00:fc:
eb:7b:4f:5d:5d:91:8d:dc:71:89:58:e7:4e:0d:7f:2b:6a:20:
c9:e2:a6:a5:75:7d:20:3a:8c:15:22:aa:2e:72:62:d6:24:c6:
4d:a5:66:62:e0:3d:d5:33:81:48:47:bb:4f:0b:e9:01:e6:24:
a0:50:d6:0a:83:b8:f8:a7:32:cb:4d:10:13:a3:56:f2:18:b2:
77:f2:84:1f:13:8e:02:7b:de:72:74:87:09:ff:b5:16:99:00:
c6:13:db:85:9d:04:b0:18:4b:0b:64:08:a7:25:14:c7:8d:68:
a5:7e:d5:17:12:62:07:35:27:24:65:32:3a:38:a3:b3:22:2a:
c5:7a:b3:e3:f2:04:0f:f0:66:d4:66:58:a7:d6:77:ba:af:ff:
44:46:61:3f:9f:f4:7b:4f:7b:ee:d8:f2:c6:1c:b9:01:71:d0:
0d:e8:c4:64:6b:b2:17:0e:78:bc:b1:7f:4f:0d:5f:c4:f5:f7:
25:e7:e7:c6:52:c3:bf:4c:4f:98:00:78:b9:e2:d7:14:a2:72:
01:db:f8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:40 2025 by rpki-client