Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: 8tAyycyiMVmm23tre8BFWZH71N+vfhI2/kZH3qHlM7w=
Subject key identifier: E6:4D:D3:39:47:5F:4B:7B:B6:2A:4D:E6:5C:48:8A:D1:BE:74:E9:57
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 019A4EF4B1936C2E82F4EFAEED1962578C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 0FE5
Signing time: Tue 04 Nov 2025 13:00:50 +0000
Manifest this update: Tue 04 Nov 2025 13:00:50 +0000
Manifest next update: Wed 05 Nov 2025 13:00:50 +0000
Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: IgBa+EHhKe8POOFHBL8Q/KmKbe2Enl6Yo+PGlv/RJB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b1:93:6c:2e:82:f4:ef:ae:ed:19:62:57:8c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Nov 4 13:00:50 2025 GMT
Not After : Nov 5 13:00:50 2025 GMT
Subject: CN=e64dd339475f4b7bb62a4de65c488ad1be74e957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:a8:d1:df:12:47:cf:66:1e:ae:6a:b4:e2:
4f:3c:9d:6e:0a:9f:99:0a:cf:cc:e0:bb:22:cc:26:
41:ad:9e:4e:c7:70:fa:e0:ee:06:a8:ae:b7:c1:d1:
52:ca:b9:64:aa:3a:72:33:79:86:23:c4:3f:4a:eb:
18:98:43:2d:5d:f3:dc:cd:e8:8b:2b:0e:28:aa:aa:
ed:bc:6a:0d:c4:d1:98:bd:0d:03:c9:6c:4c:56:46:
fc:41:6e:9c:a2:c7:d1:00:19:72:1a:d4:27:9c:75:
2b:f5:08:be:0e:d4:dd:84:a9:94:3b:4f:42:f8:92:
7d:58:9a:4a:a8:70:a3:94:de:01:5d:75:a6:39:f8:
a7:b2:d0:2b:93:30:b2:50:eb:db:2a:2e:92:d8:93:
4c:ce:f7:d8:95:d7:5b:7f:3d:82:25:20:4a:c2:8f:
c6:50:f1:7c:30:c0:bf:b6:00:f4:61:5b:2c:f3:2e:
5d:40:1b:2c:0d:55:9d:8f:7d:95:0e:4c:94:89:6b:
ac:f7:3f:57:cd:f6:8e:9d:d8:b3:27:20:1a:60:41:
86:48:e5:ce:c8:34:e9:4c:83:0d:3d:5c:73:83:31:
03:b8:fc:46:9e:4f:0e:29:09:36:ab:22:8f:14:b0:
09:c6:f1:49:a9:70:3b:60:aa:a2:18:75:81:2d:b3:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:D3:39:47:5F:4B:7B:B6:2A:4D:E6:5C:48:8A:D1:BE:74:E9:57
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b8:fd:9c:9b:c8:cf:d4:58:92:80:0a:d6:30:6e:0a:a4:a1:
c7:70:d4:5f:30:fa:0b:54:e1:1c:fa:18:fa:37:98:a0:d5:59:
d6:9b:9f:71:c9:a7:27:24:80:69:96:b7:6c:cc:c4:fd:26:a0:
b3:46:5a:67:cc:e8:0f:d6:f2:d1:bf:84:b0:2e:35:9e:02:43:
85:af:ba:cd:23:97:c1:54:39:64:e4:e8:3b:2e:7d:4e:27:58:
68:95:f6:17:8f:60:4e:fc:33:60:76:ea:a4:9a:14:09:b6:c7:
9d:98:13:4e:88:fd:43:4d:58:d9:94:39:37:54:c4:cc:d5:58:
56:de:9e:70:ba:93:ec:0b:8c:be:e7:8a:09:3c:b1:ed:86:dd:
12:b0:da:08:25:4f:fd:71:ee:ba:03:9e:36:b2:a9:d9:56:f1:
f2:89:f5:5a:23:3a:79:8c:2c:e3:c6:50:bd:1e:99:ab:5a:11:
6c:2d:cb:73:4f:ed:11:3d:59:e7:d5:ab:3d:0b:61:63:0f:95:
80:00:8e:82:96:8b:be:6e:5d:d2:88:d7:0d:83:0f:6c:7c:95:
1b:7e:be:6d:a1:26:0a:d2:96:d5:96:0a:94:8d:d4:c7:e6:62:
b7:fe:0a:e6:48:ae:c9:63:19:ce:d2:45:33:fb:6e:4b:16:b1:
48:55:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:07:30 2025 by rpki-client