Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: 2LM11Pn4hUwpW7emAqgEaq1QU9MTaBi3xJ0sYz5vd18=
Subject key identifier: 0B:AD:92:43:43:B5:1F:4F:83:02:C6:78:8E:C6:DB:18:E2:45:90:EB
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 019A72267D24F28D20980DD3035F27D27403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:56 +0000
Manifest this update: Tue 11 Nov 2025 09:01:56 +0000
Manifest next update: Wed 12 Nov 2025 09:01:56 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: ZUrpfJ25IL0jUwolbi//36RvJVnAAlg+uNjNk/O1PoE=)
2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7d:24:f2:8d:20:98:0d:d3:03:5f:27:d2:74:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Nov 11 09:01:56 2025 GMT
Not After : Nov 12 09:01:56 2025 GMT
Subject: CN=0bad924343b51f4f8302c6788ec6db18e24590eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:fb:73:2a:aa:8b:1a:b5:50:cd:bd:54:ed:
49:5d:2e:54:53:e2:66:36:88:a5:1c:19:52:91:a2:
0f:82:8b:42:10:06:bb:32:38:f2:bd:84:99:7d:aa:
33:b7:a2:c4:5a:19:80:ec:06:40:eb:85:48:5a:95:
8b:86:f4:e1:45:ff:2b:bf:a7:dd:ba:21:cc:69:ba:
43:d4:fd:92:72:6f:1d:15:99:24:d3:e0:ae:0b:54:
fa:22:7c:38:18:19:ba:71:e1:da:ca:a5:d6:fa:ea:
66:d3:c0:c6:a4:63:22:34:3e:3f:3f:9f:23:2c:75:
16:7b:51:13:26:2d:7a:d6:63:39:2a:78:75:1c:11:
d0:8d:e9:37:51:6c:3c:0d:7e:20:fa:c5:49:97:4d:
c5:22:ee:c8:52:79:1d:67:1f:29:bf:8a:66:76:99:
12:f6:76:80:e5:8e:91:6d:ff:ce:37:69:4d:a3:ec:
14:06:49:a3:53:2f:fc:68:4b:a2:7c:75:bd:79:3e:
0d:e7:09:dc:6a:b9:f1:f4:f2:46:05:d9:c4:3b:fe:
63:9b:2f:52:41:fb:07:cf:2a:89:5a:2e:b3:38:a3:
e1:02:91:93:fd:25:2e:3d:53:6b:fc:ee:91:fa:7e:
1e:b8:eb:b8:42:eb:94:f3:0b:4a:79:e1:4b:f8:e2:
63:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:92:43:43:B5:1F:4F:83:02:C6:78:8E:C6:DB:18:E2:45:90:EB
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:17:95:cb:c1:93:e6:01:50:38:5c:4d:e1:19:2e:42:53:85:
78:51:99:cd:80:3b:09:14:8e:8c:fc:cb:d4:f0:66:dd:20:62:
28:7d:db:ac:68:75:5c:b5:56:70:6c:fa:ff:d9:06:f0:b6:aa:
3f:db:f0:0f:08:ce:9f:66:e1:a2:21:34:ba:fc:aa:26:aa:e2:
db:50:17:a0:0f:33:04:b8:f9:d9:a0:e4:5e:bc:2e:e4:a1:fa:
de:ca:26:b3:a8:19:77:c6:4c:55:f3:2a:bf:e5:6f:e7:0e:99:
12:cf:65:95:30:50:e0:ec:83:dd:e4:66:7a:6f:b0:0a:3f:85:
fa:c1:cf:6d:ec:7a:d9:3e:27:b3:5d:1d:a3:2c:4a:ee:33:e6:
cc:ed:46:51:be:1c:fb:a4:03:d0:46:55:30:a2:9f:69:75:76:
b2:c4:e2:ea:77:54:06:cf:da:b1:86:22:9f:b7:f0:9f:70:d1:
69:a0:8b:45:0d:35:e0:8f:04:21:c6:31:c9:25:b3:b8:23:47:
94:82:ee:1f:56:d2:29:48:b9:38:ad:46:42:eb:c1:98:db:79:
5e:8f:28:64:bc:3c:c5:d6:96:58:3e:7e:52:5c:6f:0c:88:c0:
ec:75:15:47:0f:58:66:8d:1a:1e:a7:75:36:8c:26:eb:e0:ed:
f3:7e:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:17 2025 by rpki-client