Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: BQjW7H8gsRIegiMQQpKhTQlOuTjIBr6LsbAOQ9jOURY=
Subject key identifier: 32:18:11:7A:E2:3E:86:72:BA:D7:25:14:A4:C2:30:EE:29:3F:93:C9
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 019A4D73D02F5EE244AF6081815C46ACD70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 04D7
Signing time: Tue 04 Nov 2025 06:00:26 +0000
Manifest this update: Tue 04 Nov 2025 06:00:26 +0000
Manifest next update: Wed 05 Nov 2025 06:00:26 +0000
Files and hashes: 1: 0moQdaHf0K44uNdLnoszN_NLZl4.roa (hash: zGziV3K+6liMksPEZN4lWjEoRYfjKPi10ixQL7nMxfI=)
2: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: oqA1JxnO904dT5jgXHUWLOv9ZNazBcvIm8KSJycBfpI=)
3: kwFJhE8jwEHJybQlTEKHmXErsEs.roa (hash: alWNviEQV6Ni9Uyx0rYA0Shsy6KWc4y7zd5M53FLUU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d0:2f:5e:e2:44:af:60:81:81:5c:46:ac:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Nov 4 06:00:26 2025 GMT
Not After : Nov 5 06:00:26 2025 GMT
Subject: CN=3218117ae23e8672bad72514a4c230ee293f93c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:51:46:99:dd:78:b6:c2:c9:ba:32:10:1e:
b1:06:51:62:8a:ed:44:2e:05:3c:1e:37:fd:8f:41:
c5:df:9c:ee:47:e5:97:bf:c1:d9:20:6a:61:0b:39:
54:90:d3:73:55:9a:2f:48:f1:ed:e5:31:d0:fe:62:
47:65:91:43:8e:c1:9b:11:01:1b:16:aa:b6:72:8e:
b4:a4:99:f7:70:ee:c8:4b:50:52:54:33:b5:4e:1e:
b3:57:9e:a6:b2:b5:c1:69:2c:7d:5d:df:d7:f4:7d:
14:a1:e4:dd:e3:9c:e8:0e:8f:b7:83:0a:c5:1e:93:
46:2d:00:4f:a4:b9:62:6e:bd:90:86:b5:25:53:e1:
f9:3d:1b:e4:49:73:bb:31:fa:c9:5f:fc:d1:5f:be:
30:32:43:f3:b3:cb:02:68:fc:b3:59:82:7d:0f:17:
8e:de:e2:c1:ed:2e:12:a4:54:8d:fe:05:10:cd:e4:
60:95:89:5f:8d:f5:d4:f8:62:7b:2d:27:c4:cd:25:
84:1c:f7:3a:f8:0f:d2:8c:e5:13:33:c8:ab:30:e8:
1f:3b:01:02:9e:a1:7d:86:66:ed:67:78:25:bc:81:
fc:4f:30:4d:ff:89:79:66:71:70:8a:7a:93:02:0c:
38:0e:59:1b:cd:8f:68:ec:29:e5:29:10:da:b3:8f:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:11:7A:E2:3E:86:72:BA:D7:25:14:A4:C2:30:EE:29:3F:93:C9
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5a:bd:93:33:2a:18:21:07:5b:1a:f8:68:8a:a2:39:d8:53:
6b:b0:0b:73:e4:71:09:cd:1e:04:13:71:e6:10:5d:5c:5f:c8:
57:90:19:76:7f:88:3a:04:9c:35:8e:6f:40:c4:ca:24:e2:14:
69:ea:9d:2f:7d:85:0e:4a:ce:38:24:cd:f9:56:b8:e0:0a:03:
ad:d5:35:33:ae:d5:7d:55:b0:2c:dd:2c:10:cd:1b:e0:3b:17:
d3:06:4d:17:f7:9d:8b:40:bd:0e:0d:0e:76:ae:33:27:59:85:
9a:bf:10:2f:63:3d:87:cf:f9:62:ae:9f:0b:98:92:e9:41:f9:
eb:1a:2c:87:92:3b:f0:fe:79:a0:c9:53:7b:6d:08:48:b8:e9:
dd:7a:b0:0a:b3:69:06:92:e9:1f:9c:56:b6:d3:11:cd:7f:f0:
a8:d8:89:f7:16:90:82:f6:6d:70:6e:e1:7b:71:df:d9:00:7c:
05:76:15:b5:2a:70:6b:52:96:ab:fe:eb:52:16:bc:30:bf:b6:
a7:7d:0c:71:cf:8d:75:f6:ca:17:79:61:fa:11:65:ed:72:f4:
d6:e2:52:b6:16:a9:fa:7b:14:0a:ac:24:c2:eb:0f:26:02:07:
bf:a4:e6:25:15:db:b3:df:a2:dc:3e:a1:4e:79:68:04:ad:fc:
e0:6c:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:10 2025 by rpki-client