Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: ohG60aNP8TFKxzEdwerrrI92QavwPxGfeu7DsmqOLKA=
Subject key identifier: 07:7F:18:38:CC:69:CE:7C:98:68:F0:12:F3:BD:A3:AC:5A:CA:2E:84
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019A5307F3057B8FACBD3EC7DAE577173513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0B40
Signing time: Wed 05 Nov 2025 08:00:21 +0000
Manifest this update: Wed 05 Nov 2025 08:00:21 +0000
Manifest next update: Thu 06 Nov 2025 08:00:21 +0000
Files and hashes: 1: NNtuOH7Ss0GK2NCY4ASxIdJwy5M.roa (hash: XEhO+BECYJy48qc1PZIYHLHaFzNgbkvhwIUjzz8UOEI=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: DY8e2PNCqkDHWr5KZGvEsjbYVBVNp+Q5am7nv55s4XI=)
3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:f3:05:7b:8f:ac:bd:3e:c7:da:e5:77:17:35:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Nov 5 08:00:21 2025 GMT
Not After : Nov 6 08:00:21 2025 GMT
Subject: CN=077f1838cc69ce7c9868f012f3bda3ac5aca2e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:1d:f2:d6:9e:99:66:25:ae:ea:59:3c:bb:
bb:93:ac:9c:1b:2a:6f:1d:3a:d6:af:a3:36:53:24:
27:d7:cf:cc:3a:da:61:e4:77:72:1a:5c:77:34:1e:
98:de:53:d8:6b:71:6a:a2:fe:21:3f:08:cd:f9:ee:
b4:41:5d:0d:84:96:62:5e:57:d9:c5:d0:01:80:c2:
7d:5f:43:1b:11:cf:e0:13:19:4d:7e:db:82:19:16:
f7:3d:11:47:b7:cb:4c:0a:f2:a3:35:e7:f7:c8:03:
f9:d5:1f:de:41:7f:3e:32:22:cd:53:5d:cd:3e:c4:
0a:1e:fb:f6:2e:24:6e:28:7a:89:f4:8f:06:67:c0:
45:af:36:65:9c:e1:7a:be:ca:52:19:ff:12:44:3b:
8e:7c:51:ed:3f:e7:0a:6a:52:2d:fa:50:61:a6:8d:
99:1c:b5:d9:76:34:59:fc:d2:98:c5:48:4e:49:55:
37:a4:ca:a9:89:83:f9:87:27:5c:4f:67:cd:72:2e:
35:67:4a:f8:be:36:5d:8f:e6:20:31:92:ae:c4:b9:
32:83:db:0f:cc:20:21:91:ce:35:c2:9b:bf:67:b0:
fc:35:ac:c7:8f:0e:d2:1b:9d:d5:db:0e:fa:07:b4:
8d:19:41:65:87:e1:39:e9:dc:9c:cf:49:1c:39:11:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:7F:18:38:CC:69:CE:7C:98:68:F0:12:F3:BD:A3:AC:5A:CA:2E:84
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:58:78:e2:12:c8:bd:b9:76:ad:0b:65:dc:65:71:d5:0d:a5:
91:02:69:2a:2a:1f:86:11:0f:80:23:04:da:db:b4:99:71:c6:
a9:e0:2f:a2:0f:82:82:42:88:cc:0c:69:fa:77:b0:ea:fd:d6:
f1:41:98:76:c4:4b:0e:4b:2a:8c:c5:59:04:12:61:11:be:be:
46:04:c8:6a:57:72:aa:dd:ca:26:a4:e8:ab:97:ad:ef:60:9c:
2f:38:0e:3a:ed:9c:4e:bd:1c:a5:26:13:90:9d:86:04:dd:be:
e6:e5:42:d9:59:d7:77:c6:7b:8a:d8:b2:72:04:d7:ec:54:b3:
e6:26:6a:ed:99:a6:d2:e5:5d:d7:69:23:7f:38:af:1b:36:12:
5c:a0:11:a2:da:29:ad:cd:dd:8d:2e:86:6e:36:71:24:34:17:
97:fe:c7:52:fe:83:ec:af:50:b7:20:3d:88:ce:c0:00:4e:ef:
81:90:89:9c:2a:8a:7d:b2:13:35:7b:b3:30:bf:09:32:83:d3:
d6:96:60:77:7a:65:46:c7:e8:e5:ab:f3:61:15:70:a0:06:a5:
4c:74:8e:cf:e8:3f:34:7f:f5:9b:4a:b0:14:f6:09:24:b5:8e:
ba:a4:52:f5:33:94:4b:ab:f8:22:cd:33:d0:25:57:15:6e:76:
70:4e:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:31:45 2025 by rpki-client