Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: UvhDoQ6N8xTiRUwr3YRBnq+5HxKGBwxcOfHgAc2jigI=
Subject key identifier: 2D:BE:FA:A3:71:69:CA:74:C0:C1:7A:69:8A:34:4B:DC:53:0F:08:F4
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019A7113165A6E5A00BFAAC961CD084CB9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0B1A
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: Op1gh0wFko9724Ahwm8zyJJnCx8.roa (hash: xGR1u5ClwHU4q3WoVp5eWaY/nYx57WKoSQo4c6w7W+8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: 6NkJWSctJgKN5qYj2szRvtxw6ZP0kqHBUEtLq+agviU=)
3: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (hash: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:16:5a:6e:5a:00:bf:aa:c9:61:cd:08:4c:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=2dbefaa37169ca74c0c17a698a344bdc530f08f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:b1:7c:80:37:6e:d3:31:c4:fe:d7:c0:b3:
87:58:8d:d1:41:63:c2:f4:d6:3e:57:4e:d7:98:df:
75:c6:b0:da:4c:a8:da:2d:62:77:43:49:9b:02:7e:
1b:b2:6b:e6:76:8d:a8:1b:56:4f:51:4c:e6:e4:7f:
c4:4d:40:2f:a1:9e:21:6b:de:45:45:69:e4:80:b5:
87:91:c6:55:5b:6b:4a:db:d3:fe:12:99:ca:82:25:
72:01:97:0e:a3:bc:39:25:94:b9:8b:56:0b:3b:3b:
4f:91:63:72:86:1c:ec:d5:ed:4d:52:2d:cd:dc:bb:
54:1a:b1:20:f4:4b:46:11:5f:14:00:ad:71:62:64:
b8:c6:1b:9f:1c:6f:1d:aa:92:59:76:81:45:5d:17:
a5:63:b3:c0:2d:2b:fb:6d:88:70:2e:cd:0e:cd:43:
d7:c0:c0:ee:3c:8e:3a:b7:4f:0f:9b:14:4a:3d:a0:
18:7e:23:a8:3f:bb:c4:01:63:0c:7a:22:c8:89:18:
02:ed:a4:ff:44:bf:83:fd:17:bb:8e:e8:06:f4:3a:
90:b8:d3:d4:92:83:a9:4f:81:5d:b1:aa:5d:c5:55:
c5:5d:05:df:a1:eb:23:f8:6f:54:0a:0c:a0:f1:a1:
1c:1a:27:e2:6d:94:c8:c0:46:52:e1:d8:92:38:fe:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BE:FA:A3:71:69:CA:74:C0:C1:7A:69:8A:34:4B:DC:53:0F:08:F4
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f0:6b:0b:5c:51:f2:ff:ea:5a:14:cf:a3:23:3a:8d:f6:36:
09:96:0c:14:f3:ce:98:38:07:57:12:fa:2c:35:a7:d8:53:18:
d2:4e:4c:d7:08:6a:3f:2a:90:4e:22:3a:52:27:85:14:63:df:
8e:48:1c:e4:f0:18:62:91:62:00:91:16:b5:98:91:51:bf:19:
1e:1a:d7:75:c4:ab:84:e5:c6:8e:e7:5b:e3:67:1e:57:15:6c:
86:7e:58:07:3d:5c:29:7b:42:8d:cf:35:69:ca:da:ad:d5:bd:
17:75:6c:e2:fe:a7:94:cf:a4:e6:41:30:1f:97:76:eb:14:5a:
fa:79:e2:9f:f2:8a:d3:d0:8c:49:7f:6e:29:87:8a:2d:ad:50:
0d:5d:2f:3b:7b:4d:ae:1b:02:98:0e:ef:ba:fa:2d:bc:09:89:
c8:ce:75:72:b0:53:18:22:7c:be:f4:5e:6d:25:c7:dd:1d:88:
e6:5d:ca:b8:8d:27:17:08:d3:45:91:49:fc:73:77:7f:53:aa:
99:f0:5b:94:0d:4f:52:f4:15:54:22:70:ee:69:2d:6a:58:69:
21:da:49:5f:17:c3:b1:89:ea:c1:53:82:35:77:28:60:7a:13:
d4:7e:dd:df:e0:8b:e5:21:f6:81:50:30:b9:2e:70:b7:0b:1c:
df:0d:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:41 2025 by rpki-client