Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
File: QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft (raw, json)
Hash identifier: q6qGG+RBDzVeEY40Md7xugzY5eO8IWKR5RAp6fDebTM=
Subject key identifier: 9C:E9:AF:7C:AD:90:3C:C1:47:76:60:62:57:E6:3F:BD:F2:9B:7D:57
Authority key identifier: 41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
Certificate issuer: /CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Certificate serial: 019A522CD27994C94F82A3EEE3372C818D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
Manifest number: 055A
Signing time: Wed 05 Nov 2025 04:01:00 +0000
Manifest this update: Wed 05 Nov 2025 04:01:00 +0000
Manifest next update: Thu 06 Nov 2025 04:01:00 +0000
Files and hashes: 1: CuZieAFfwXX8uyaqskcHIzJ9fWo.roa (hash: pBXWN5uV+yQFyDFWsCRJrE7yKliZlwC2u5aCXtkg+Do=)
2: QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl (hash: kWwOMGsuy5fOzjADz7VPwT53l+ZYUdqz0QmJiffpOOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:d2:79:94:c9:4f:82:a3:ee:e3:37:2c:81:8d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41cc4f2b3621498b2b12bc93e56e6980c2c6dc88
Validity
Not Before: Nov 5 04:01:00 2025 GMT
Not After : Nov 6 04:01:00 2025 GMT
Subject: CN=9ce9af7cad903cc14776606257e63fbdf29b7d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:08:41:d8:06:42:95:51:62:65:c4:bc:a9:
1f:f5:89:3b:77:43:16:23:e5:70:f3:7c:88:fa:32:
b2:6f:be:6d:d0:52:a4:97:b6:12:a9:ae:71:5b:02:
20:dd:a3:19:83:70:d2:60:90:32:da:3d:18:df:67:
ff:05:c4:48:85:95:70:19:ab:28:de:2c:d2:6a:f5:
50:3e:e6:a0:23:40:ff:45:b2:4a:b5:95:10:d0:e2:
e2:a7:fe:59:43:9e:58:78:85:fe:d5:33:aa:67:f6:
4e:ea:f6:6c:8e:5a:aa:74:61:61:32:64:34:c2:b1:
1d:e3:70:56:2c:d4:a9:cb:bb:9d:fb:2a:25:63:b8:
47:6c:33:0a:a1:bd:11:c6:6e:9a:a0:d9:df:b2:78:
1b:05:96:aa:83:64:8c:06:bd:d4:7c:18:60:82:99:
db:1f:96:1f:9a:c3:fa:2f:d9:ad:70:9d:ff:a0:a0:
a0:d0:0b:6b:fe:7a:42:c7:dd:dc:17:e9:d5:05:cc:
c8:c3:bd:72:ce:06:ef:bc:83:3d:cc:7b:0c:9f:8e:
dd:e5:ca:7c:06:6f:56:fb:a7:95:70:bb:8a:a5:e3:
13:6c:06:a9:09:bf:3c:03:4f:4e:40:cd:ab:a7:c1:
70:f8:e2:d6:32:8a:d8:12:83:78:e6:86:0a:ff:70:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:AF:7C:AD:90:3C:C1:47:76:60:62:57:E6:3F:BD:F2:9B:7D:57
X509v3 Authority Key Identifier:
keyid:41:CC:4F:2B:36:21:49:8B:2B:12:BC:93:E5:6E:69:80:C2:C6:DC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcxPKzYhSYsrEryT5W5pgMLG3Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/QcxPKzYhSYsrEryT5W5pgMLG3Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:14:b4:c9:b9:ce:0f:ab:cf:89:88:15:9d:7a:08:16:c3:a8:
47:d6:c6:0f:b4:3b:67:ca:6e:9e:ef:a9:fc:70:a9:3f:fa:c7:
63:27:91:61:9e:ef:d3:30:8c:ab:2a:f9:82:10:e6:06:be:44:
a3:89:e4:b4:fc:41:c8:21:e1:e1:cd:89:07:bd:c1:a8:03:ba:
37:15:34:c0:69:72:64:59:55:01:98:42:b6:3a:d2:09:65:0e:
76:17:66:8a:54:20:a2:cf:d6:f3:ca:5d:87:8d:70:c2:43:cf:
ab:af:1f:ee:fe:42:84:c3:da:d9:87:0a:6b:2b:92:a9:1a:f3:
37:bc:43:f3:c2:1e:47:4f:cd:3f:b4:be:60:cf:16:04:ec:14:
89:45:c8:ff:e9:a2:82:e8:6f:ba:07:65:35:5c:f4:83:5e:2a:
da:02:8d:d1:3f:8c:4b:fd:3a:01:01:5c:4e:62:9f:a6:a3:5f:
d4:e4:c9:a8:1f:4b:dc:d6:b1:83:91:14:47:00:6f:ec:f8:00:
ca:f2:a1:63:b7:d1:56:ae:8d:ef:74:58:27:5e:f0:b0:b8:4d:
5a:e7:6e:a8:48:37:04:e4:97:e2:d6:cb:bf:a3:57:11:04:c9:
e6:df:5a:ba:5b:cd:76:eb:e8:15:71:70:b9:1a:14:b5:b7:74:
48:12:23:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:20 2025 by rpki-client