Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: bKwzXXeFRSv0g+hEuZnn0vHne/7csparPq18vhS8qGM=
Subject key identifier: 1B:47:68:1F:B6:9D:76:20:AB:BE:A3:AB:62:99:26:F7:21:72:6D:84
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 019A522C587005112C5F744C85F846FD1414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0C6B
Signing time: Wed 05 Nov 2025 04:00:29 +0000
Manifest this update: Wed 05 Nov 2025 04:00:29 +0000
Manifest next update: Thu 06 Nov 2025 04:00:29 +0000
Files and hashes: 1: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: KVUWuTe55cxqSE6gGDf9SUnjllOk4aJ8Ag2f9OUrW4E=)
2: wqLf4HxTBxblmV7dYjywZ9LSO_g.roa (hash: xrazM8n3J2DoAIHJJglhb+L4RSIj7Z+1Mi/FtQpdckQ=)
3: yy37HnfCaW61gwGyu1dsgubo12s.roa (hash: iEoXay/v6I8F/MG3qHjPe1FvicHR4Thx5PSijnoSoog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:58:70:05:11:2c:5f:74:4c:85:f8:46:fd:14:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Nov 5 04:00:29 2025 GMT
Not After : Nov 6 04:00:29 2025 GMT
Subject: CN=1b47681fb69d7620abbea3ab629926f721726d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:00:60:0a:3d:10:36:ae:72:0e:4a:24:fe:
73:78:6e:59:92:e7:a6:29:90:ac:98:18:f0:8b:57:
ae:fe:ee:6c:13:67:9b:c9:ad:d6:a5:17:cb:45:55:
aa:c9:cf:7b:a7:c7:0e:f7:3d:d5:46:74:1c:d3:48:
bb:a5:7f:1f:e5:d0:a3:7b:07:1a:5f:2f:84:70:d3:
a9:4c:2f:34:2d:10:b5:ca:2a:85:16:be:8a:aa:72:
82:23:1c:9a:c9:f2:23:9f:a1:00:8f:6a:1a:52:c9:
25:0a:67:27:f7:07:a5:93:11:90:17:55:5c:92:40:
31:1a:15:09:cb:78:01:0d:f5:99:86:f0:aa:c1:aa:
cb:07:e8:37:fc:ab:8a:36:91:42:44:1f:7d:11:9d:
cc:65:87:14:b6:89:dc:ce:70:e1:d8:54:64:62:9e:
44:d3:e6:7e:8b:18:6a:55:e1:35:5c:04:5f:4d:2e:
b3:66:d8:37:a7:cc:ee:7e:94:cc:69:c9:41:fa:6a:
95:e6:05:3d:5b:ca:b9:a7:8f:97:24:4d:ce:62:8d:
cf:82:6d:69:fb:11:14:57:aa:e2:70:5e:3e:ab:f6:
ae:20:f4:22:94:50:12:bb:53:a2:c3:e4:2b:28:2a:
98:60:3f:c2:e2:f7:5b:62:fb:da:c8:19:cd:b1:7b:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:47:68:1F:B6:9D:76:20:AB:BE:A3:AB:62:99:26:F7:21:72:6D:84
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fb:46:e4:91:97:d3:26:0f:30:f2:48:92:e6:0a:34:b9:76:
d1:47:09:c7:f3:29:93:02:cd:4b:65:a5:50:17:21:55:c3:9d:
21:41:8f:c9:fd:9b:bb:56:93:1f:4c:ad:3c:8b:b6:c6:ba:93:
b5:e1:df:6f:eb:b3:6b:69:c0:ca:48:c6:2c:a1:30:2d:15:d3:
70:26:7d:23:ab:44:ac:fd:42:32:f8:50:47:23:d0:70:46:fc:
14:1b:9d:40:96:c3:cc:93:50:91:8f:75:53:03:0e:1b:2d:1e:
03:1e:88:d9:86:9a:41:b1:e4:67:87:b4:5d:91:0f:97:f4:a1:
16:13:d8:05:7a:02:f4:05:7e:6d:10:95:8a:3b:2b:25:ac:d9:
e4:69:ca:e0:c7:a2:e6:a6:70:e1:84:00:af:64:0c:1f:d6:43:
c0:8e:ed:e8:29:8b:14:fa:1c:f1:09:0d:92:b2:2c:da:9a:84:
de:7d:48:73:e3:88:3f:d5:ce:7e:5a:9c:ad:c8:25:f7:01:59:
c9:8f:3d:85:4c:d0:64:09:0a:4c:9a:26:66:0f:b5:ec:e1:98:
74:07:7d:3d:2f:3d:01:d2:36:1c:e1:c7:d2:42:f8:91:79:c2:
61:e0:67:d9:5f:77:dd:9c:f5:72:b3:31:c4:d5:7a:5e:db:d7:
14:58:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:05 2025 by rpki-client