Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: u0wSA7X9jpC8h2avedUc6xJKV3KuXSqrFy0Wcu4TKbA=
Subject key identifier: 6E:33:A6:FD:E2:FD:69:27:DD:83:7B:EB:B3:9E:D8:CA:C8:72:CD:A5
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 019A52D28EC72E73FB4E7042A27BC8DC8479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:02:01 +0000
Manifest this update: Wed 05 Nov 2025 07:02:01 +0000
Manifest next update: Thu 06 Nov 2025 07:02:01 +0000
Files and hashes: 1: 1-OpArz-cvr3_w4LMxpPZzSxCtqI.roa (hash: p66SMlwKH8qksSnzyFy8M1MJ9eGvVUlsB0A2v++rXYg=)
2: BO2GxdENWf3nZf4IjS3W9dxIBdA.roa (hash: CoT9/NP4/6nCeDdnm6fFk7HZ3lUZardt1KwDlood7sQ=)
3: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: pVM8d8KTtLyvGmb0VuqCWLPPsy581epihrrTFUXLXlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:8e:c7:2e:73:fb:4e:70:42:a2:7b:c8:dc:84:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Nov 5 07:02:01 2025 GMT
Not After : Nov 6 07:02:01 2025 GMT
Subject: CN=6e33a6fde2fd6927dd837bebb39ed8cac872cda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a3:7a:2a:b3:2a:ed:b2:b3:11:8a:b1:f3:75:
c7:bc:a1:2d:bb:cc:1a:df:88:f5:d0:31:88:fe:48:
8b:58:f0:e3:e2:5c:b3:b2:ad:bf:75:f4:84:b2:2d:
51:31:da:b9:40:09:c5:4b:d0:7d:33:08:27:d9:5e:
76:3e:ee:a5:f7:dd:17:48:3f:75:19:ed:84:12:fb:
40:1c:88:e8:ae:99:b2:b2:42:ff:6b:8f:7e:29:4b:
4a:81:9d:ef:45:6d:28:37:6a:89:84:5b:25:b9:f7:
92:e3:e4:7e:70:90:53:1b:56:f5:42:14:63:2b:42:
64:13:1e:b6:da:a9:7c:be:7c:d0:79:d5:96:99:a8:
b0:f9:6e:67:79:d9:5a:fa:5b:62:b2:e1:77:eb:25:
15:03:1b:14:e2:04:2a:a8:cf:43:e7:0d:39:4b:ab:
fa:6b:ba:c0:f2:ca:f8:ae:11:71:24:51:9e:48:33:
ac:8c:23:4b:ed:05:6e:cc:c6:7b:54:e0:c8:e1:39:
64:dd:15:59:f0:64:a0:d1:25:94:47:cc:49:16:57:
df:d2:57:89:d4:74:ce:95:d3:e2:38:ab:e3:30:b3:
68:ab:5a:97:09:1a:df:e7:5e:28:81:1f:fc:65:37:
a0:9e:ca:ee:e2:0f:75:af:c0:e2:78:46:33:1a:28:
33:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:A6:FD:E2:FD:69:27:DD:83:7B:EB:B3:9E:D8:CA:C8:72:CD:A5
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c6:95:52:a9:48:aa:c2:48:d1:78:f1:79:2b:27:7a:01:9e:
c4:ff:d9:10:72:b7:1f:6d:88:ae:3c:b3:80:37:66:ea:5a:b5:
7b:c0:a6:25:60:50:49:e6:98:f5:cf:e5:73:68:9e:64:f9:d6:
78:5a:92:6e:61:c0:4a:fe:2b:85:98:19:b3:0c:12:aa:82:00:
08:14:6e:97:b4:e6:98:e2:03:16:38:c2:1c:73:ff:c0:97:76:
6e:e4:76:c4:e4:cf:64:6d:08:04:b0:2e:77:91:95:cb:32:20:
bf:19:f9:6e:ea:b1:7c:22:65:2a:84:b5:78:de:41:7e:2f:df:
ba:a8:80:84:b2:6a:4b:d8:8f:3d:d3:09:21:e5:e7:d7:24:ed:
1e:ac:88:ed:c8:8b:7a:32:d1:0d:4c:6b:7a:f8:dd:64:ac:be:
68:3e:64:50:c0:89:66:a5:dd:0f:c8:7b:32:5d:c6:b9:6b:37:
50:af:7f:83:b2:13:2a:f8:8b:8a:51:f7:4c:b9:67:37:f0:18:
ff:94:2d:26:e1:3e:59:a4:e6:9d:49:7e:2b:49:ce:e3:70:70:
8d:07:28:3f:26:c7:65:94:ea:48:e8:91:48:d5:d1:59:77:61:
04:fc:62:e0:a0:c0:70:e3:fd:65:c1:d2:4f:97:c2:55:d3:80:
76:e1:fa:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:21 2025 by rpki-client