Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: w/sEzW8Gm8GLuCb4Z0BauQyd1iZfdSP6QguD5JJqfS8=
Subject key identifier: A8:D0:49:36:0B:56:C7:4F:C1:A8:A4:45:13:A0:47:BF:AA:F0:6C:29
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 019A4EF53F5997CFD2D330CC1D9BA75C874E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 1661
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: +GZdlnuz+Dvc1fSJxVCqc0qod5fkUVygUrKyLf1LH6A=)
2: XYTPsqrRjFt2AcvYCap2e2yz93s.roa (hash: Kn1lsHWRvXKbCBaB+H+cKPNwO5N2Gs/SXNbPpw2oiTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3f:59:97:cf:d2:d3:30:cc:1d:9b:a7:5c:87:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=a8d049360b56c74fc1a8a44513a047bfaaf06c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9c:78:2f:5f:a9:41:9e:f3:52:1e:23:1c:06:
b7:5c:d2:cb:6e:fc:25:23:1f:08:e8:db:bf:67:1d:
17:4b:36:33:69:ca:f2:ea:87:5d:33:a3:0e:2b:be:
4b:79:bb:17:be:2c:39:29:90:c4:c3:4c:6d:d5:d6:
b8:23:29:98:06:20:a0:ec:eb:3f:fa:6b:7e:02:14:
27:3b:25:c0:d1:73:89:d3:9a:0a:c6:1b:e1:11:e1:
32:b0:d0:36:1f:b5:b9:1c:55:61:03:f9:40:61:0f:
f4:12:94:48:1a:34:f3:9a:09:07:fd:1f:4e:47:e3:
d6:05:5f:a4:9d:dd:f2:09:d0:95:35:3d:9c:ab:a7:
26:b7:7b:1f:45:65:6d:13:00:7a:28:bb:02:c2:df:
df:58:20:05:be:4c:5d:74:70:41:35:3b:61:7d:46:
a7:03:b6:32:29:10:43:6a:d5:67:24:98:1b:a1:cc:
07:b1:c5:d2:b5:44:df:a2:e4:f9:2c:8c:33:3b:b1:
f5:72:d9:73:53:1c:dd:4c:62:59:c8:dc:39:df:ba:
2a:0e:3b:fd:e1:9b:8d:ff:32:0c:0b:07:6b:62:e0:
04:f5:4e:9a:73:33:b9:b5:b8:a2:80:6b:53:4c:2e:
6e:46:40:a6:15:1a:61:43:e2:79:d6:b8:2f:51:b4:
41:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:49:36:0B:56:C7:4F:C1:A8:A4:45:13:A0:47:BF:AA:F0:6C:29
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a1:eb:e9:a3:54:1c:e8:ba:b1:7e:30:b2:71:80:63:1b:e5:
ee:9a:be:08:14:0d:1c:19:ed:ad:37:10:d3:cd:5f:19:a4:01:
33:c3:0e:ce:0c:20:3e:f7:2a:35:90:d3:47:d4:4e:e4:55:d9:
32:50:eb:95:dc:63:02:33:31:3e:91:9f:aa:46:0d:48:16:c2:
8c:88:74:11:d4:fe:e5:1a:03:fa:b1:e9:d6:c9:b2:32:d1:48:
21:2c:6b:37:3b:03:7d:f9:58:37:6f:f5:b9:66:10:0c:4d:a1:
3d:b2:d8:32:98:2a:6c:e0:ea:18:5d:65:94:af:51:19:77:7c:
a5:54:4a:fd:e8:c7:14:84:ff:b7:ce:41:c1:fb:b1:c3:27:96:
de:83:7c:e8:98:f9:eb:7d:25:e9:6b:54:e6:a6:82:2a:fb:68:
49:bb:45:5d:9f:d1:da:fa:9f:38:09:ae:25:b6:35:cf:8a:e6:
4b:0b:09:28:8c:3b:40:d1:99:3c:ce:59:6a:7a:bd:e4:19:9d:
ff:10:eb:b5:ac:0e:95:64:4c:16:8e:d7:63:aa:99:0f:14:1d:
77:10:2a:1d:26:b9:0b:0d:c7:be:1f:1a:f2:2e:e4:41:d2:23:
a1:7f:20:bd:28:52:73:78:e2:eb:b4:69:3f:be:4c:1c:97:c0:
68:f2:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:06 2025 by rpki-client