Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: knMaPeojImUx4p3X9o3jFPo0XW4AUQwGdP4e0McoJ5A=
Subject key identifier: BD:FA:4E:A1:59:DC:AA:A2:3F:C9:39:B3:5D:75:EE:71:0D:2A:D2:17
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 019A4EF526B9144EA7171AA926712F28DC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 0397
Signing time: Tue 04 Nov 2025 13:01:20 +0000
Manifest this update: Tue 04 Nov 2025 13:01:20 +0000
Manifest next update: Wed 05 Nov 2025 13:01:20 +0000
Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: yYqJ8b0rOph8VREG9BRlFubUZa5tLhTZDBTjfmmn0l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:26:b9:14:4e:a7:17:1a:a9:26:71:2f:28:dc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Nov 4 13:01:20 2025 GMT
Not After : Nov 5 13:01:20 2025 GMT
Subject: CN=bdfa4ea159dcaaa23fc939b35d75ee710d2ad217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:77:30:96:7e:d8:2b:70:91:7e:9e:fe:86:
83:2d:7f:1f:a5:69:a1:fc:2a:19:ef:28:ce:91:92:
b6:43:b3:3b:1b:9f:f8:98:89:5d:64:4f:ce:d9:a4:
3a:11:93:35:84:46:63:fc:79:5e:36:06:8d:2d:5d:
b6:bf:0d:29:2c:11:85:5b:21:60:d4:f3:e7:a9:8d:
a1:0f:d9:bb:04:43:83:34:dd:28:4e:35:ab:49:6f:
a1:df:56:92:9b:06:c4:45:f8:a2:af:2e:39:d4:13:
e3:e3:cc:c8:ef:6c:9a:16:12:d2:40:0c:58:aa:7a:
d7:73:f0:a0:23:7a:48:7b:dd:82:86:94:1e:31:22:
86:db:d7:5e:b9:5e:40:97:3d:6e:44:45:c6:4a:df:
da:34:6d:b5:c8:58:83:a7:2b:18:ce:07:ff:af:c1:
4c:37:00:a5:eb:e9:33:22:56:e4:bf:b4:a8:d7:81:
2b:d9:7f:47:ca:35:0c:6f:46:2a:6e:29:c5:19:b4:
06:96:20:11:de:2c:c3:21:3b:fc:05:12:50:5b:61:
84:ca:d9:9d:11:ab:20:25:44:65:49:43:8f:b4:b9:
28:0f:54:b9:88:9e:6c:eb:a6:7d:56:0a:bc:d9:6f:
13:08:82:bc:6d:42:41:7b:60:b1:14:63:2c:30:76:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:4E:A1:59:DC:AA:A2:3F:C9:39:B3:5D:75:EE:71:0D:2A:D2:17
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:4b:7e:98:6f:98:05:91:d5:e6:83:00:92:a2:77:3f:33:4b:
12:0b:aa:a4:80:a6:13:00:00:9c:cf:4c:08:d1:b7:0a:de:a8:
43:2b:be:8d:7d:2a:96:54:52:30:bf:23:2c:b9:a4:fe:17:da:
3c:05:fb:7e:4f:cb:85:53:c3:c4:47:d8:b3:37:ea:79:fd:2f:
22:7d:ed:99:47:71:16:e1:f0:f5:33:a5:61:bc:59:4b:03:43:
97:c2:7a:ed:40:5b:37:80:e4:07:ec:8a:d8:c2:7e:67:58:a6:
e8:c9:12:32:4b:a7:95:4a:2e:6b:57:2f:60:ee:19:18:51:02:
8e:24:b8:9e:23:49:3d:9e:89:37:4f:cf:16:ee:50:7a:79:63:
e1:f1:27:88:bd:b2:2a:66:7c:8e:63:95:32:00:23:2a:b5:05:
de:02:30:00:37:15:39:e9:df:1b:09:d3:b6:08:3e:08:0d:b6:
e8:47:a3:82:1b:56:a4:54:4d:a4:83:a0:1f:1a:43:19:8e:93:
04:0a:f5:a0:1a:ee:e8:50:30:0c:22:49:21:ac:5e:4f:60:9a:
55:f7:e8:dd:d7:27:9b:dd:a3:8b:b6:15:62:23:4e:49:41:66:
d6:8b:cf:2f:37:b5:5a:a7:e6:07:d4:dc:32:03:e8:4a:8c:b3:
55:88:37:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:29 2025 by rpki-client