Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
File: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft (raw, json)
Hash identifier: 5Wa7nanKdIO957vwPgN2q9s7nL7AyKxIVpgXZr5yBLk=
Subject key identifier: EE:57:AC:C6:1B:1F:6A:D1:71:E8:92:6F:4F:FE:4A:A4:2A:51:FC:8F
Authority key identifier: 41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
Certificate issuer: /CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Certificate serial: 019A7225BC7A8F75169C01E9C5939D60D318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
Manifest number: 0AB7
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl (hash: ukuKIKCA9lvtfv20ZdXZcgST3KxsYKEwe2w4pvceLIc=)
2: bcsuWSTOEvrNi8Bj_pY3ZTkyjTo.roa (hash: gzGAlBuK5OENfmUWRjaIU+LruIs+AOY9SmxU1Rg2h3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bc:7a:8f:75:16:9c:01:e9:c5:93:9d:60:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c10f84dc22937ef6d15eb71bbb4a5308162bf
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=ee57acc61b1f6ad171e8926f4ffe4aa42a51fc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:58:3b:1d:9f:8c:a2:6f:ad:71:d0:4c:25:
90:27:8e:02:c1:da:97:6a:af:51:75:72:83:e2:66:
69:99:7b:d3:96:62:d4:c4:7c:9e:44:1a:cd:ee:84:
6b:b0:f4:13:7f:fb:92:9f:dc:e9:1f:dc:19:6e:01:
7d:9a:29:93:f7:76:28:5f:52:ea:91:f5:40:e7:a0:
df:32:98:39:a1:0a:62:2f:4f:91:e4:9c:eb:37:04:
be:94:54:57:1d:ac:af:44:6d:ab:86:10:5e:0d:a2:
49:a9:b4:bd:d0:6d:8c:d4:69:f7:eb:d1:35:b2:47:
47:7c:e1:d9:6b:a6:04:e3:02:50:33:a3:f9:a3:dc:
78:c0:5b:6e:0d:4c:f2:56:c7:b4:d3:f2:59:cc:f6:
d3:1e:dc:b9:54:cb:ba:84:dd:40:0a:29:d7:13:4b:
24:a3:84:d2:98:ed:a1:37:5e:12:c7:2c:0c:f7:a6:
c5:24:6f:7b:88:e6:b9:b1:b0:af:8c:73:21:d3:14:
64:86:df:46:af:98:a7:5e:43:0c:bf:90:8c:81:32:
49:8b:94:17:75:c9:aa:79:fc:94:1b:62:6e:0d:c9:
4e:98:78:80:69:eb:df:71:5f:d4:f5:15:68:d2:dd:
d1:48:43:a7:15:ee:ef:13:27:30:8e:24:bf:6a:79:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:57:AC:C6:1B:1F:6A:D1:71:E8:92:6F:4F:FE:4A:A4:2A:51:FC:8F
X509v3 Authority Key Identifier:
keyid:41:5C:10:F8:4D:C2:29:37:EF:6D:15:EB:71:BB:B4:A5:30:81:62:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/5c57e7-7ba8-4a62-8d15-c6b6fd12ce27/1/QVwQ-E3CKTfvbRXrcbu0pTCBYr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9b:26:88:5a:b2:55:eb:61:84:d9:c9:73:9f:0e:11:99:11:
63:fb:1a:7c:67:27:1e:70:88:d9:cb:99:51:39:49:64:86:e5:
c2:91:43:67:e2:1e:9a:8c:7b:2c:8a:42:97:20:fc:de:3a:ab:
ab:38:41:dd:80:82:76:d5:e1:97:6f:22:74:57:7b:2d:55:f7:
f4:c4:f8:37:d6:57:94:2e:9c:4c:1a:c2:72:75:43:e1:70:96:
8f:16:fe:9d:e0:7f:cd:ac:16:51:71:f7:a2:29:28:aa:5e:99:
b8:5d:d4:81:d5:f7:66:55:e1:dc:56:0d:8c:b8:9e:26:f3:f2:
a2:87:50:eb:aa:08:77:04:7e:ec:94:c4:28:5e:2d:b1:ac:73:
d9:5d:cf:92:47:9d:48:a4:48:3c:fc:34:69:e3:56:58:fc:b7:
78:16:81:50:22:b5:0a:19:18:68:e5:4d:31:99:5b:72:a0:12:
e8:47:d3:da:98:9c:f6:46:14:7e:13:5a:47:45:8f:de:3a:a7:
47:7a:5b:21:75:79:1f:ed:5f:9b:ac:4b:ec:3d:77:a5:88:55:
98:6f:e5:d0:15:5a:a1:39:53:0d:b4:ae:c2:c2:42:cc:58:66:
86:95:2d:91:62:44:85:4a:05:dd:d4:46:bf:be:2a:c9:fb:97:
71:80:8b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:11 2025 by rpki-client