Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: 9gp+KXtxPwGvImbr5aWuiJGW1sQZzJzfp6aLzLW528M=
Subject key identifier: 74:CB:DA:E7:7A:DA:1A:E0:00:2F:9C:10:06:24:86:8D:E4:30:AA:BA
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 019A4E4FBF8B1098B371704BDC86A121D109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 0612
Signing time: Tue 04 Nov 2025 10:00:40 +0000
Manifest this update: Tue 04 Nov 2025 10:00:40 +0000
Manifest next update: Wed 05 Nov 2025 10:00:40 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: pZVHlxrlku6WQVXc8YvVpS4H9xAZTlDcG/2A3f3KgAk=)
3: uQeNUYIWjnGmqaUBkySNvZayst0.roa (hash: D1PD2kgYkN2WlebqGG+7PVvzlHuHBwXlCjpZXbIItxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bf:8b:10:98:b3:71:70:4b:dc:86:a1:21:d1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Nov 4 10:00:40 2025 GMT
Not After : Nov 5 10:00:40 2025 GMT
Subject: CN=74cbdae77ada1ae0002f9c100624868de430aaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:00:85:65:41:b8:11:3f:75:8d:c9:b9:31:
97:28:c8:8b:d3:33:12:9f:d0:1c:04:ee:c2:d3:4e:
fe:ed:73:68:30:9b:70:20:6e:fb:8a:41:81:c0:65:
1c:71:3e:d6:b0:04:fe:30:40:3f:51:5c:13:53:4d:
1f:fd:f5:47:ba:07:b3:b7:a5:ac:aa:45:f9:7f:81:
ab:59:5b:79:5a:9f:f8:16:ac:f6:40:c9:58:17:b8:
bd:91:ec:52:c2:24:35:1b:23:a0:c9:40:05:d1:b2:
e7:52:0b:d3:e4:81:9e:fc:bc:53:fd:76:8a:f5:05:
bd:7a:dd:d6:d7:91:84:49:96:cb:98:1f:36:9a:2c:
e1:76:a3:88:27:bc:c7:76:79:0b:fa:a6:d1:0c:0e:
b3:07:3f:98:98:e4:ff:34:fe:dd:cb:60:8a:ab:3f:
ff:c5:09:67:d4:01:36:2f:42:f9:b8:e5:f4:0f:37:
94:eb:c4:30:57:f8:43:b7:a4:09:ca:cf:f0:35:06:
63:78:78:d4:1a:5d:ed:d4:17:73:bc:62:ae:e6:ed:
68:24:f2:72:06:a1:04:55:aa:49:27:e1:ae:f4:11:
a8:bd:13:8c:32:bd:ae:f4:76:4d:55:4a:eb:98:90:
c7:28:6b:46:6d:c9:fa:62:e7:0c:76:12:6e:9c:4c:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CB:DA:E7:7A:DA:1A:E0:00:2F:9C:10:06:24:86:8D:E4:30:AA:BA
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:06:7e:57:b6:b8:2c:c8:99:b6:75:1c:7b:b7:ab:4a:fa:8b:
ef:93:db:33:6d:77:0e:93:7d:26:79:65:b2:ca:ac:bc:05:6f:
40:1c:dd:33:23:78:7c:ea:e7:a0:87:98:cf:61:cc:eb:b0:d1:
1b:d8:50:b3:ad:24:84:fb:2c:8d:a5:ab:e9:6e:ec:b5:f8:9f:
3a:3e:74:db:06:0b:46:bf:e2:5d:e7:1b:19:13:44:c0:c3:1b:
39:d6:8a:ed:c8:97:38:38:ab:98:e7:78:9c:3c:31:79:bd:8b:
99:d1:70:08:6b:d7:6e:2c:d6:55:83:81:8c:80:c3:96:d2:56:
d2:29:00:c4:38:f1:87:30:74:81:4f:a7:bf:d8:72:73:1e:60:
e0:ae:9e:58:b5:8d:de:a7:02:19:07:c6:f1:25:52:c0:f3:17:
b0:76:55:1c:f0:92:b4:d1:f4:35:e6:38:59:f8:5d:72:1e:ef:
f8:8a:2a:61:fc:d6:5a:6e:3f:50:96:d8:90:29:c0:b7:52:8a:
5a:56:3b:a4:f9:b8:5c:2c:fe:fc:ca:c6:22:c8:43:dd:69:8c:
fe:6a:4a:1d:05:12:cc:73:f5:eb:68:fd:f5:dc:19:69:42:23:
fd:6a:fb:67:c1:29:4b:88:61:23:73:c2:01:4b:0d:dd:63:a5:
17:69:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:10 2025 by rpki-client