Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: PLMXknDlggqFy3b4mOk7HREFrsf3zhz0XRN1XpMxbNk=
Subject key identifier: 5E:FC:EA:35:F0:10:90:CB:C6:32:85:3F:6E:72:AF:DF:0E:E2:BF:D1
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 019A503DD5D4F90A7E527230A4A5DC30A528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 15E7
Signing time: Tue 04 Nov 2025 19:00:21 +0000
Manifest this update: Tue 04 Nov 2025 19:00:21 +0000
Manifest next update: Wed 05 Nov 2025 19:00:21 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: IZgOxVCsLjghV/fECkwIDincar8AfL2P18P0HDle4H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d5:d4:f9:0a:7e:52:72:30:a4:a5:dc:30:a5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Nov 4 19:00:21 2025 GMT
Not After : Nov 5 19:00:21 2025 GMT
Subject: CN=5efcea35f01090cbc632853f6e72afdf0ee2bfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:a5:ed:10:45:63:c0:95:4b:8f:a9:d6:35:
12:ef:25:71:e9:d9:98:56:4b:50:41:17:b8:1c:c6:
68:bd:33:8f:5e:4a:26:aa:a6:f4:15:da:80:95:cb:
a9:ee:6b:7b:a1:2b:ad:34:76:ca:1d:e8:64:12:ba:
b4:67:07:f4:e1:d5:65:e0:7a:a2:b7:07:d8:92:c3:
97:43:a5:ae:e1:90:31:41:c0:4b:81:ab:51:48:f8:
a0:b8:59:c5:9e:48:0f:8c:a7:22:80:99:b3:6d:07:
78:0d:19:ba:da:85:89:e1:80:12:6f:ad:03:5b:04:
c9:70:9c:e2:7c:c8:9b:88:26:01:97:72:be:9d:d0:
30:12:5c:50:7a:54:5c:55:d4:d4:17:12:d6:20:e0:
11:bf:11:f0:46:67:7b:dd:ad:d6:fd:a0:c2:ed:33:
f4:b8:c4:c0:1f:7e:00:35:f2:c5:a5:6b:b4:3b:33:
5d:5d:26:32:16:9a:40:a6:d3:ce:17:22:ab:2b:93:
51:44:b6:96:ec:b5:45:a8:ca:98:40:0e:b9:0d:f3:
36:78:18:9e:d3:26:e7:0f:7e:89:83:11:cb:ee:78:
4f:63:1a:1e:b5:5d:e5:15:78:bb:9b:39:6b:5b:1b:
8e:25:95:53:79:27:1d:0d:68:0a:bd:08:6b:25:fd:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:EA:35:F0:10:90:CB:C6:32:85:3F:6E:72:AF:DF:0E:E2:BF:D1
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:23:b8:75:36:2c:91:87:69:dd:2d:5d:22:9f:90:55:81:84:
d7:34:95:c4:c9:74:03:44:de:95:00:06:16:bd:fb:7b:3f:c5:
b9:7b:2e:c9:9b:ef:14:80:9f:62:7a:ec:5c:5b:4d:24:44:87:
88:23:ba:2b:f7:ff:98:95:35:49:5a:18:a9:91:25:c3:77:91:
08:69:e8:01:14:21:bf:51:99:9c:24:3f:c8:9b:9d:5c:cd:b4:
38:f7:5d:f1:43:1d:47:5a:d6:c8:20:77:2f:ba:ba:8d:e0:d9:
74:64:39:f5:10:86:b7:7e:d0:a1:4e:0a:9e:59:46:34:ee:6e:
e0:bb:a6:22:16:1f:37:63:31:32:c7:dd:e5:65:68:1d:75:ed:
a8:fa:08:82:ca:25:0b:52:f0:71:3f:13:14:48:94:8a:82:47:
f5:c0:34:e3:fd:c2:79:37:df:ed:dc:e6:8b:4c:a5:35:15:82:
b5:a6:b0:b3:35:8e:2e:33:7e:94:e2:77:b8:be:fa:09:9d:4b:
f8:30:8e:e1:4d:28:30:46:0e:54:39:81:a5:ab:81:b6:39:19:
73:0c:4a:64:3e:aa:7c:78:31:14:fd:24:cd:99:e1:3b:59:25:
06:1b:42:a3:52:f2:cf:b9:8e:20:f2:a7:72:8e:d0:0f:ba:66:
e4:15:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:42:16 2025 by rpki-client