Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: l6qfjdkxggUuSgUztaHo4i81AB3P9sNgQ4UHEkNT6B4=
Subject key identifier: E7:5F:1C:CE:B4:09:90:E5:06:A0:F5:5D:D0:84:24:9A:D9:18:80:D3
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019A4F2B9E684C983C74C58EEB0C4607A10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 1413
Signing time: Tue 04 Nov 2025 14:00:49 +0000
Manifest this update: Tue 04 Nov 2025 14:00:49 +0000
Manifest next update: Wed 05 Nov 2025 14:00:49 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: UmLXprxMwb0tFtFZCOTQrq24BMpPT6GPNlxPbFp/o+o=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:9e:68:4c:98:3c:74:c5:8e:eb:0c:46:07:a1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Nov 4 14:00:49 2025 GMT
Not After : Nov 5 14:00:49 2025 GMT
Subject: CN=e75f1cceb40990e506a0f55dd084249ad91880d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:66:39:23:c8:62:61:f1:93:ff:d6:77:5f:
e3:27:f1:b2:a6:3b:6f:89:25:53:d9:0c:72:57:5b:
38:76:09:22:05:82:11:1b:30:4b:fa:5e:84:46:8f:
b5:15:2b:f1:95:36:be:8a:63:63:ed:17:a3:ac:97:
18:92:5a:72:b2:1e:f8:80:d2:9f:8f:59:bf:27:21:
a2:06:c3:98:12:60:f3:3e:cc:9f:70:78:cf:ce:1b:
61:4a:6f:e0:a5:fb:1c:a5:4d:d6:9c:4e:b5:39:be:
2a:07:07:22:cc:d7:8d:4c:86:a1:33:67:01:f8:8b:
22:8a:2c:3b:15:5f:ed:22:6d:e9:48:e8:17:6c:84:
e8:29:90:66:ea:ac:fa:60:1d:a7:fc:38:04:61:85:
ed:61:76:f8:e6:f1:4d:5e:a1:cf:fe:8e:3f:f0:ac:
5b:2a:c2:ec:11:b9:bf:b1:33:62:c6:a5:d6:be:60:
5a:89:e7:4f:d5:95:22:b7:fd:22:4e:25:ef:37:cf:
fc:f4:13:16:97:4c:7b:1c:7f:45:86:98:d8:7d:dc:
14:47:c5:34:96:46:c7:f2:04:15:bc:58:ce:87:8f:
e9:21:5c:0d:36:16:18:64:cb:0a:9a:fd:cd:fb:00:
cd:fd:4e:16:fc:ca:7a:0d:95:67:a7:f2:05:6a:a4:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:1C:CE:B4:09:90:E5:06:A0:F5:5D:D0:84:24:9A:D9:18:80:D3
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bf:0e:15:a1:7c:c9:61:c9:b0:23:30:dc:d8:51:0f:58:33:
db:a3:a6:5d:73:60:d5:f6:69:ee:9c:ad:b8:51:c7:a0:59:fc:
b3:27:bb:19:ce:bd:61:a5:a2:3a:08:27:16:39:d9:dd:6c:b7:
da:91:94:33:a4:d4:ee:9f:fa:51:66:49:ec:d3:f0:e3:6e:2f:
ad:55:ec:f8:e7:80:df:c3:e4:d5:a6:04:1f:a9:74:87:ca:44:
96:b6:9b:e4:27:06:d1:09:43:5f:58:af:c7:25:ae:24:4b:30:
58:1d:82:c2:19:74:00:e4:f8:1b:1c:44:25:98:63:69:31:f4:
d2:4a:49:d3:a9:4f:44:39:d2:b7:78:8b:21:bc:43:d6:7f:f2:
14:ff:fc:dd:0d:94:27:d4:46:4a:50:39:10:94:d4:bf:5c:48:
0b:c3:0f:59:21:8e:70:6e:29:fa:c9:18:d7:1c:43:76:98:eb:
92:3d:e2:18:f9:a4:e6:74:59:56:72:b1:80:9c:84:e9:76:43:
87:a2:a4:e6:8a:b2:dc:bf:b8:48:27:51:6f:67:8f:59:15:bd:
09:a4:10:24:f3:fb:f8:26:bf:2c:8e:f9:e2:47:97:ed:cd:a1:
2b:5b:fb:d4:04:3e:fe:5b:d7:fd:7e:29:f1:4e:e8:b8:91:02:
34:fe:6a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:25:16 2025 by rpki-client