Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
File: QoNpZxbbzDYLmmLvfYS00o-Vi90.mft (raw, json)
Hash identifier: vkeeE5rXyWMjGHy/EEcfPrVfUwDLAJ3dIcffk9auJoc=
Subject key identifier: 90:65:FF:73:41:D3:79:72:71:7F:8C:46:35:AD:00:22:0A:9D:BA:2C
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019A5074FDCA9D9761C4B940E9F8C2A0EBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
Manifest number: 1725
Signing time: Tue 04 Nov 2025 20:00:35 +0000
Manifest this update: Tue 04 Nov 2025 20:00:35 +0000
Manifest next update: Wed 05 Nov 2025 20:00:35 +0000
Files and hashes: 1: L0PayBXw1av4AajNcmdw2-ceGI4.roa (hash: yrgEG4D+FXySVVv/ibFmYkuayuflUlw/y8vajoMW3DM=)
2: QoNpZxbbzDYLmmLvfYS00o-Vi90.crl (hash: pzzyolp+ZvCLfx7A/zHFckHKfunf4qnPWEgYwrgj7C4=)
3: a9CuWyPd-c9fwtWnf6Qw7jEH7ic.roa (hash: xRxfIlp8OxFc5k8i4YohXqRCQSb5ekQzI694uPO98mg=)
4: cIaNp2bTtQ5M6jCssmyGRmD8_eg.roa (hash: DakUxNySLzPYiUEmVKH8Wuu4g1X+hz1O/JIQ3JCKnTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:fd:ca:9d:97:61:c4:b9:40:e9:f8:c2:a0:eb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Nov 4 20:00:35 2025 GMT
Not After : Nov 5 20:00:35 2025 GMT
Subject: CN=9065ff7341d37972717f8c4635ad00220a9dba2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:5e:15:10:32:9e:e8:9a:43:ec:03:0e:e8:
5a:5b:bc:22:e5:8b:8f:84:c5:6f:b0:b7:d3:dd:66:
8a:ea:b4:f2:5d:67:be:c1:bc:a4:c2:37:61:97:7d:
4f:f4:09:05:88:16:91:11:7f:12:c9:77:35:04:24:
6d:b8:94:65:d9:b8:44:1e:77:9a:c9:d9:4a:c1:2b:
d1:a8:4c:bd:e3:8c:2e:fe:ce:c0:a5:2e:6f:bd:ae:
31:d3:32:10:f3:f4:72:80:69:73:4f:b5:8c:68:1f:
a0:4f:9c:b0:7f:42:bf:27:0c:fb:16:ed:d0:14:aa:
f9:42:2f:1f:cb:4a:59:be:92:68:b3:93:b8:a1:95:
d2:cd:0a:14:c5:ad:fe:93:29:0a:b8:7a:ac:5b:59:
04:a4:28:7d:93:86:16:60:ef:2e:cc:b6:48:6b:c3:
fc:5b:30:26:e0:8f:85:f7:9b:8f:1e:05:0c:74:26:
ce:e5:b5:59:ae:f9:18:2a:35:73:ee:8a:3c:e2:6b:
39:04:07:f4:16:1b:9d:b3:b6:97:55:5b:b2:e9:f2:
14:ca:07:93:e5:b3:a5:d4:eb:08:48:a0:22:37:f1:
98:1a:86:4a:6c:7d:bf:9d:c1:6c:d6:2a:f1:10:2e:
50:35:b9:76:99:51:90:8b:93:64:45:a7:53:82:31:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:65:FF:73:41:D3:79:72:71:7F:8C:46:35:AD:00:22:0A:9D:BA:2C
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:07:4e:c9:e9:cf:42:62:c6:e1:b7:ce:4d:ad:14:cf:c1:32:
54:83:d0:18:0a:5c:33:b3:71:df:8e:11:b3:03:33:2c:ee:cc:
55:af:6f:25:1a:32:e9:6f:78:aa:3a:95:57:b2:ac:11:91:9b:
3f:f4:19:7d:57:41:36:a1:5b:6f:18:f4:43:50:85:63:68:53:
67:ed:61:37:0d:20:cf:f5:96:7b:04:1c:db:68:31:e3:97:85:
4a:75:bc:47:fd:89:b9:f3:f2:5a:2f:e6:33:79:ff:97:e2:b7:
3c:b6:1c:4f:6d:61:af:c2:8e:ef:83:e0:78:34:0f:22:29:80:
a9:0f:c7:73:cf:ca:5f:b2:1a:e8:0f:36:9b:d7:76:34:ad:01:
60:4a:1f:82:4a:35:38:4c:a2:70:08:63:5d:57:82:3a:59:1d:
46:02:ad:52:e2:cf:95:66:fa:d9:a0:02:70:f9:ea:9f:63:3c:
ae:90:0d:02:e4:37:38:03:57:7b:be:9e:aa:3c:b9:67:c8:25:
e0:b0:e9:de:db:60:76:99:77:70:da:3a:bf:74:b2:8b:a0:70:
4b:0b:e8:69:6b:37:da:cd:a6:53:22:3f:7d:52:58:98:db:ae:
f0:c4:64:cb:a7:20:df:2b:60:dd:ed:f2:e4:89:d5:93:6c:15:
3e:92:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:50:10 2025 by rpki-client