Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
File: QntUBuzauOW0DdxUvGFcoqcJIvE.mft (raw, json)
Hash identifier: Ev9K2xY6IN2VZy5xzPbStBH6vCi7ydKmvE9Ne9wFXv0=
Subject key identifier: 7E:2D:B9:25:A3:D7:20:C4:42:8F:40:53:27:64:8F:06:37:B8:8B:2F
Authority key identifier: 42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
Certificate issuer: /CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Certificate serial: 019A7225AE92547EA3E67616B7ADCA5816D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
Manifest number: 121D
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: CF9g-zHrIl6sH7ffAFMheYKTmgE.roa (hash: 8JftFhjM60lS0dv+t4PfyHWDIpIU5Mke1ZAPszJPPn0=)
2: QntUBuzauOW0DdxUvGFcoqcJIvE.crl (hash: Fjopc55O1Xci+yxyJBQR3Z2Qo9LChI1TtaYHF0Rg81g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ae:92:54:7e:a3:e6:76:16:b7:ad:ca:58:16:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427b5406ecdab8e5b40ddc54bc615ca2a70922f1
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=7e2db925a3d720c4428f405327648f0637b88b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:36:87:7f:14:b1:48:d1:98:01:75:c7:ec:6f:
06:6e:91:5e:d7:be:f5:e7:fe:78:b4:c0:90:8e:1d:
f9:55:cf:f6:f7:c4:58:ad:4e:e0:68:8d:17:c6:1b:
97:be:81:01:d5:65:39:5c:b5:91:1c:26:3e:ad:2c:
8e:c4:dc:4d:16:78:87:4d:c1:97:a9:82:ed:58:89:
28:51:5c:cb:67:08:e3:90:39:bb:98:09:9b:02:c5:
14:27:f1:ed:99:d0:a8:f2:41:36:12:10:09:2d:e1:
bb:13:d9:4f:66:89:14:7d:9c:c0:10:40:36:8e:8b:
7f:74:ca:05:67:27:3e:0f:42:1e:7b:32:86:ea:ff:
df:ba:70:e6:23:b7:36:bc:0e:32:9a:db:19:d5:62:
0c:7d:9b:56:18:bd:72:dc:c2:a9:0c:71:cd:0c:d0:
84:3f:34:20:f3:d5:97:ed:be:15:f5:05:f1:1e:79:
d7:51:40:fc:6e:10:8c:10:e5:a7:0c:a2:2f:32:0a:
ce:3a:9a:c6:39:d5:14:e5:1e:a4:57:49:fb:a4:8b:
f7:81:82:10:66:92:40:c5:8b:5e:05:d0:16:7c:29:
c3:04:a3:d9:61:28:c3:d7:1d:4b:74:34:44:90:2e:
a2:63:d1:58:c0:87:1a:68:5d:e9:4e:70:5a:8d:49:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:B9:25:A3:D7:20:C4:42:8F:40:53:27:64:8F:06:37:B8:8B:2F
X509v3 Authority Key Identifier:
keyid:42:7B:54:06:EC:DA:B8:E5:B4:0D:DC:54:BC:61:5C:A2:A7:09:22:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QntUBuzauOW0DdxUvGFcoqcJIvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/278b7d-cf43-4ac2-ad6b-7bc12a62a0d3/1/QntUBuzauOW0DdxUvGFcoqcJIvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:e9:57:62:7e:5f:ed:e6:8b:8d:3b:e0:44:37:fa:18:e1:
b0:95:9d:08:97:cf:1c:09:ef:d0:9f:35:9e:a9:46:6f:c8:25:
23:c2:64:ad:c6:90:ff:f2:3d:5e:f1:19:6e:82:be:e1:47:e8:
86:c2:20:43:bc:eb:dd:d7:d7:09:b5:56:cb:2e:66:e2:8c:75:
2b:48:11:70:73:a4:ca:ab:be:55:2c:a0:0a:0c:13:04:aa:02:
93:8a:49:bb:1d:d3:91:6b:64:ed:f1:04:94:90:5b:f2:3c:62:
36:b1:47:c8:47:22:8f:63:c9:db:d9:5d:dc:7c:3b:97:ba:1a:
e2:8a:2d:21:8b:19:fd:d9:47:16:68:66:24:7c:75:b6:9d:9e:
d4:1a:42:fb:5c:52:8f:16:0a:cf:94:7c:11:88:3f:aa:8c:7e:
ea:e5:95:43:ad:b0:da:1c:d6:a2:19:b2:21:51:38:45:02:60:
0d:76:15:4d:09:de:b0:ec:f0:93:b4:95:e8:7d:fb:e2:b8:d3:
5b:7d:32:7f:50:bb:4e:cb:7b:62:aa:d9:fc:c0:ad:4b:ef:3d:
27:28:ba:3f:4e:ad:cc:18:b5:7e:96:de:d4:a6:ee:9c:11:18:
2f:46:8f:9a:8c:7c:86:f1:fa:a2:27:4b:87:30:1c:86:80:3e:
b5:f3:c2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client