Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: vQoAyaWJbdBhAJeU/X6weGuDOW5nubhXeJkcxnzUL8M=
Subject key identifier: 13:04:41:6D:0E:16:27:97:9B:77:00:6E:92:31:ED:4A:BC:74:21:CE
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 019A4DE1B8E47282D03EB3AACD003D88085B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 05ED
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: r5mFmRIbBMje357sHfruvC/daQ615GW4tAtyn+gJuQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b8:e4:72:82:d0:3e:b3:aa:cd:00:3d:88:08:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=1304416d0e1627979b77006e9231ed4abc7421ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8c:1a:22:ca:c9:a4:e7:82:ff:1b:02:ed:a3:
c9:5c:69:c9:9b:2e:b7:48:90:e2:79:be:1c:dd:1b:
81:0b:fc:6a:8e:c2:45:17:82:39:31:00:d1:af:ad:
46:6c:b0:4a:3c:9e:97:28:d4:43:eb:7a:d7:fb:dd:
76:3f:f5:53:5f:b2:69:95:c1:51:96:c4:f2:3c:27:
af:28:42:f4:1a:3d:96:57:a5:c4:dd:c4:f7:6f:80:
7f:f9:bb:4d:8a:47:e1:18:e6:ad:1f:07:b4:fa:50:
7e:22:82:73:54:66:2f:5d:8a:d2:84:99:a4:4c:d9:
82:aa:f3:73:70:b2:19:2b:61:21:4e:ae:c1:e6:b6:
15:a2:54:0e:f9:50:19:48:d8:f7:d8:73:fe:78:f4:
aa:24:e2:d9:f4:be:5c:f6:d3:1b:38:b1:06:51:62:
1d:4b:fc:6c:02:d9:47:74:d7:91:18:62:85:93:13:
cc:9f:4e:f6:9b:5f:60:26:af:25:69:0c:35:59:e5:
42:7b:11:2e:18:86:04:0c:2d:37:a8:be:68:eb:b5:
46:37:68:8c:45:0b:d3:6c:74:b5:2c:7b:ed:00:43:
e6:b7:44:7b:67:1b:c4:b0:86:61:4c:c5:00:3e:f7:
a3:1e:82:05:95:2e:33:8c:f0:ac:90:e8:32:de:7e:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:41:6D:0E:16:27:97:9B:77:00:6E:92:31:ED:4A:BC:74:21:CE
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:e5:5a:57:00:7c:17:19:17:4a:8f:af:73:c5:da:ed:b5:
61:07:1c:5e:10:60:7d:5c:25:da:01:0d:9e:2a:6a:6f:06:55:
6a:03:8d:1e:b8:a8:f6:7b:2c:79:8f:bd:c1:e2:5a:49:c6:de:
fb:e1:ae:0e:91:56:31:aa:65:d1:2f:92:3b:ac:6d:c9:82:d7:
0f:bc:c8:0d:44:48:3e:ae:8a:8d:85:b3:7f:12:33:d0:26:a2:
31:a5:18:9f:c3:08:65:1e:99:fb:7e:e6:a4:79:2e:f8:59:bc:
48:48:8b:a4:97:52:6e:26:23:14:33:f8:94:ed:fa:c6:ec:e5:
ac:a2:76:cb:d4:19:ae:dd:3d:14:6e:36:28:c0:1f:bd:6f:0c:
c2:da:0b:23:f9:c7:c9:88:5f:19:9e:e6:c2:0b:29:95:24:1d:
dc:26:2b:47:7b:0f:98:81:d6:59:1e:50:c7:af:94:0f:2b:1f:
aa:f4:91:15:04:c0:0a:e3:dc:f5:7a:3a:f4:d7:41:6d:0f:a8:
df:6a:70:f0:5d:a7:ac:41:43:59:4b:aa:3e:99:fa:02:af:12:
7b:df:9d:2a:b8:e1:a1:ed:52:9e:83:7e:f0:31:d0:36:d6:c1:
76:5c:d6:ad:58:a4:d0:7d:c0:e3:eb:9f:8a:7a:95:06:3b:03:
79:6d:1b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:21 2025 by rpki-client