Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
File: QpxUvh2n5zjjyW_7QfHqOQCme-g.mft (raw, json)
Hash identifier: E/lg5SzrsahHhKDYW0hkY4AeY26jCmdz8bP9ajNO5yU=
Subject key identifier: 3D:E8:B3:C8:4B:BC:95:22:80:AA:0F:FF:04:54:82:69:1B:99:49:A7
Authority key identifier: 42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
Certificate issuer: /CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Certificate serial: 019A533F05D7E617B212744CABA3EC1AF6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 09:00:30 +0000
Manifest this update: Wed 05 Nov 2025 09:00:30 +0000
Manifest next update: Thu 06 Nov 2025 09:00:30 +0000
Files and hashes: 1: QpxUvh2n5zjjyW_7QfHqOQCme-g.crl (hash: 3gf7rCTRP/BXI5n435dZHo/0rOYOMkMSALJVRKX+k7c=)
2: S6s1MZvjGFTRPk9vZPziFkYY6qM.roa (hash: ToU3MZhIjvRp74FUEtCCsRrFPES+LOdbmLPRk+Oahhc=)
3: dsWRyZzKIXE-_o05dhzwQLK-Lbk.roa (hash: VWsGICYRCZ2YCd/cztWs6r3W91Apf8NSGDgQ7RjrOcc=)
4: g-0mYXlZCCbY8bUpprXLVbOiC9A.roa (hash: hFmcyS+hXU9/y3wiy+mf+wC/haCuFA1o+qKC1n/PUV4=)
5: o1EPY-XxVbxJyaIoWSUC8RQCjcc.roa (hash: Kquty1N0A29MJH0xvyL5yuCvTt71jZz0jcczxSEKzL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:05:d7:e6:17:b2:12:74:4c:ab:a3:ec:1a:f6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c54be1da7e738e3c96ffb41f1ea3900a67be8
Validity
Not Before: Nov 5 09:00:30 2025 GMT
Not After : Nov 6 09:00:30 2025 GMT
Subject: CN=3de8b3c84bbc952280aa0fff045482691b9949a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:46:61:1a:7b:23:ca:76:c5:ce:44:e0:81:
4a:ac:5e:ad:76:c8:51:a9:93:a6:6f:4e:e2:23:06:
dc:67:59:b3:2c:eb:bc:5c:b0:98:e7:d7:1a:e6:38:
a9:7c:0f:48:fe:59:15:94:98:71:cc:93:67:ab:dd:
36:3b:56:8a:4f:0a:57:ec:69:4f:1a:e9:aa:ad:af:
86:31:26:1d:6b:be:65:d1:8c:48:79:4e:4f:00:77:
17:e3:83:b1:b4:0c:b2:ab:dd:0e:0a:8b:2e:b9:52:
e0:7c:1a:02:51:33:b3:76:54:40:d9:5f:1a:e7:df:
bb:cf:fa:be:d4:25:6f:ed:30:a2:96:bc:de:ac:64:
34:33:38:74:b7:f3:50:58:3f:1f:f4:a0:ec:ee:46:
df:a1:cd:51:de:2f:69:5e:34:6b:d3:3b:f2:5c:c0:
02:45:96:1b:39:f1:f2:df:77:25:a6:42:d8:70:93:
c9:ce:04:9a:6c:0c:33:26:f0:d9:8a:31:1b:80:0a:
aa:b2:ae:24:4f:4b:24:48:00:1e:c6:09:03:8d:48:
a3:1f:28:ad:a5:34:de:06:dd:ee:57:de:ce:b8:cb:
5c:5d:82:c9:98:9d:e3:7e:01:ee:f1:d4:b3:c9:b6:
78:0b:da:ff:b8:3f:04:06:83:5a:2b:84:9c:1a:98:
0b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E8:B3:C8:4B:BC:95:22:80:AA:0F:FF:04:54:82:69:1B:99:49:A7
X509v3 Authority Key Identifier:
keyid:42:9C:54:BE:1D:A7:E7:38:E3:C9:6F:FB:41:F1:EA:39:00:A6:7B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpxUvh2n5zjjyW_7QfHqOQCme-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f6f5c3-6146-48ca-affa-3d8584cf53fe/1/QpxUvh2n5zjjyW_7QfHqOQCme-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2c:2c:fc:51:40:96:b2:30:65:8a:da:ad:17:00:59:e0:6a:
3b:9c:0c:2b:1a:37:e6:17:c6:3f:6f:c8:8a:1a:13:0c:89:2b:
7a:a7:24:5b:c2:85:0d:31:6d:6c:31:55:28:de:5f:55:57:38:
b1:b7:49:bf:e0:e9:6b:9e:31:aa:4e:7d:e8:09:a6:77:7d:eb:
25:b4:7e:4c:e8:ff:f6:a6:e5:0f:3d:23:a4:cc:2f:4d:a2:c5:
46:ba:7b:25:1a:8d:d3:a4:67:b5:8c:1b:0b:4b:23:b7:ef:9a:
a5:4d:57:60:3b:12:b1:56:ab:23:50:6d:38:9b:6e:b1:12:61:
11:c7:81:71:bb:54:30:cc:44:84:2d:7f:20:4f:f6:c3:e9:c7:
68:40:c6:65:35:34:7d:99:91:95:e8:fa:32:64:b5:1b:c3:74:
a0:44:45:20:22:f7:44:71:0c:6e:a1:a0:ff:b5:80:45:e9:51:
88:59:99:e5:35:23:06:92:c6:0f:e9:6b:76:8a:96:d8:b0:f7:
b8:4d:e9:03:56:04:73:c0:1b:1a:57:b1:d9:fe:7b:ee:b8:4c:
08:a9:a1:83:c7:5b:d6:53:17:47:e5:4d:ad:83:0b:b6:46:0e:
e6:f1:87:c6:54:c8:51:5d:55:e4:cc:94:6d:c9:ee:e0:b9:39:
f5:4e:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:24:28 2025 by rpki-client