Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
File: QVpBISe1FPZFXsiobinTjrCrtaw.mft (raw, json)
Hash identifier: A4uhGq14trnkQWMWsRkBaP60YeHGrMzxyFkm1OCkO5U=
Subject key identifier: 42:30:54:45:35:36:5D:7A:9C:5B:EB:63:36:2F:B1:27:B6:A3:A4:43
Authority key identifier: 41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
Certificate issuer: /CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Certificate serial: 019A71B81AD3A8434D19D4B6C14A522D3B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: OBn58ZJwEh4MhAnhsFAWGGJLifI.roa (hash: 168HaFL19xy+6TCd3GYc8l6QrgMbWSIwNLv5YeyfQ/w=)
2: Q0GMmj0TLNZKmzThv89XKbeW0UI.roa (hash: JZ14w91MZvqFvHWvtqxAYRsNPtiKbIaz1hieDnidrSg=)
3: QVpBISe1FPZFXsiobinTjrCrtaw.crl (hash: j53dUgKT5K89qQ1/pnwhfDsBP7vvo9W6k6K3PAI5yg0=)
4: QY8orDNDFtPRatFK02MXIdps050.roa (hash: NiooW7R3ctbGvF0POc0TxPmXz9RBOYgCBww2xqBcPpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1a:d3:a8:43:4d:19:d4:b6:c1:4a:52:2d:3b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415a412127b514f6455ec8a86e29d38eb0abb5ac
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=4230544535365d7a9c5beb63362fb127b6a3a443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5c:19:7b:18:0d:11:41:9d:f2:8f:7b:a3:0b:
92:4c:74:69:7a:58:7b:95:fa:93:40:9f:a9:ae:7e:
22:05:d5:5f:5b:3b:5a:56:ae:7a:1f:76:27:d3:be:
5d:19:ce:21:f7:02:66:63:68:d9:b7:ca:95:7a:29:
db:63:84:78:ae:c4:4e:0c:65:70:b9:dc:5e:c6:fc:
e0:2b:dd:73:17:60:b9:02:2f:88:1e:f6:c1:52:44:
ba:69:61:9f:22:b8:5f:76:fc:89:88:24:d7:ee:4b:
5a:77:5d:dd:55:d6:c2:db:b3:07:43:ae:cf:0f:11:
00:57:d0:a2:f8:42:b1:54:51:6f:2b:85:ce:c9:13:
ff:dc:10:ee:04:b4:42:ef:3d:87:ce:c0:34:a4:d9:
ae:37:59:ac:77:cd:fa:ba:81:70:51:35:88:33:0b:
08:cc:c5:b1:5b:69:2b:b1:a0:43:8c:b5:82:dd:b6:
ad:a2:9c:63:01:1d:0c:ef:0c:43:29:a2:4b:a2:b7:
05:8c:e7:d5:70:b5:d0:95:6a:cc:44:a9:d1:13:2d:
a8:9c:5f:98:38:94:d3:40:ce:a7:63:ec:13:81:9a:
31:46:0b:7f:1c:84:be:cd:28:0f:12:cd:fe:75:28:
fd:39:05:79:bb:84:a6:31:99:98:7b:5a:71:9b:5e:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:54:45:35:36:5D:7A:9C:5B:EB:63:36:2F:B1:27:B6:A3:A4:43
X509v3 Authority Key Identifier:
keyid:41:5A:41:21:27:B5:14:F6:45:5E:C8:A8:6E:29:D3:8E:B0:AB:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVpBISe1FPZFXsiobinTjrCrtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b8c7ba-92fa-4b73-a924-3d33e5414d9b/1/QVpBISe1FPZFXsiobinTjrCrtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:81:8c:a4:fe:de:0c:0a:b1:09:78:f3:04:2a:71:d7:ac:
c4:49:a7:9a:85:ae:56:b8:cc:e9:bf:1e:39:1f:b5:02:08:92:
8d:ab:00:76:3c:d2:29:73:8a:0a:f9:26:46:a2:2f:37:3f:4f:
c1:cc:de:44:a6:c0:d5:b0:90:9f:62:77:b5:63:43:74:35:93:
27:fd:d6:e1:39:d9:60:f5:72:27:98:55:3a:57:66:cf:1e:c4:
2d:e4:cf:49:98:a8:83:95:63:a6:6c:18:42:c6:be:8b:80:a8:
aa:0a:7f:08:73:03:30:cf:87:e2:25:b0:cf:6c:72:e6:d0:bb:
d9:7c:be:13:c6:d4:89:25:dd:83:8d:1b:97:76:83:a8:0f:5a:
65:86:ec:cb:ac:e1:62:57:91:c4:aa:39:bf:9f:fa:c5:4e:3e:
c9:02:74:b5:cd:fe:e4:1c:7b:27:cd:85:a9:bc:6d:12:d8:fb:
64:77:83:91:bb:5d:8b:63:cc:df:72:25:a1:60:af:6c:84:e6:
79:9b:d1:c8:5c:d2:63:f8:bd:43:ee:a4:2e:30:02:9f:99:54:
1e:5a:8c:8a:60:c1:2c:fc:a9:c5:4e:bd:e2:5f:7e:34:bf:e4:
00:dd:19:12:f2:8b:5a:ca:91:53:cd:c8:7d:08:b8:89:31:3c:
2a:7c:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:15 2025 by rpki-client