Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: hl+5LgAaf/JziTmzNcE8r+8Mm1SapQHcpA21eWJzeAE=
Subject key identifier: 89:78:6A:BF:A5:3A:9B:F8:2E:81:A4:99:4D:15:42:50:8A:9C:EE:EE
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 019A714A1AEF9292DAA80AD090F64BD22EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 0CEA
Signing time: Tue 11 Nov 2025 05:01:13 +0000
Manifest this update: Tue 11 Nov 2025 05:01:13 +0000
Manifest next update: Wed 12 Nov 2025 05:01:13 +0000
Files and hashes: 1: IbVX3LrFTxhR2c5rwBAGXni2IVg.roa (hash: i1+kfW3A/ZOMrSzikc6dwjCq+A7FU54gNo87BfXeXlo=)
2: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: /CGFdiBZ0GdN1VMRgWiPsizdX1mDVErLjNstR+R9oW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:1a:ef:92:92:da:a8:0a:d0:90:f6:4b:d2:2e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Nov 11 05:01:13 2025 GMT
Not After : Nov 12 05:01:13 2025 GMT
Subject: CN=89786abfa53a9bf82e81a4994d1542508a9ceeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:e4:09:b8:b1:f2:45:91:a3:25:4b:66:89:
fe:12:e1:93:48:e5:22:39:54:bb:fd:d3:5e:dc:ed:
11:11:61:b1:63:6c:73:75:80:29:34:e1:41:d7:63:
7b:e1:d8:f3:4e:5d:4a:0e:9e:ec:47:6d:2f:18:c4:
39:d5:c3:a3:c2:53:94:7d:be:93:61:ea:f5:83:b2:
20:1d:fc:3b:0c:f1:07:c7:12:9d:cf:de:46:29:01:
31:c0:5b:73:30:fb:a7:a2:83:02:08:b9:e7:dc:0a:
29:ce:f7:46:51:9c:da:1d:0c:d8:d8:91:d7:1f:25:
54:d1:de:bf:a4:23:df:82:c5:ae:c3:d9:c4:5e:91:
bb:c8:c2:83:86:80:98:4c:0d:e1:e5:bf:8e:7c:e5:
9d:14:45:42:a9:b9:b1:7b:e5:00:06:91:5c:13:a3:
48:68:67:3c:e9:4d:55:96:ef:63:04:6c:c3:6d:0d:
81:34:6b:3d:8b:14:8c:45:c8:48:c1:af:90:19:b5:
0c:89:d5:39:e6:79:50:c2:73:1e:00:e3:da:40:52:
42:95:d2:69:7c:f4:97:85:fd:ef:d4:81:54:6f:9c:
eb:9d:ec:d4:27:80:53:06:58:9b:70:74:68:a2:c2:
96:8d:cc:e7:2c:1f:b0:46:a6:8c:27:0d:d6:17:9d:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:6A:BF:A5:3A:9B:F8:2E:81:A4:99:4D:15:42:50:8A:9C:EE:EE
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:e5:16:df:9e:37:c4:ae:25:6c:46:08:e4:bd:e6:34:37:
a8:c0:9a:95:73:b9:de:c7:28:e0:3a:bc:25:ab:73:61:2b:d1:
d3:f1:15:b7:24:76:52:52:4e:0b:e4:e0:c2:d3:a3:0e:af:be:
e0:46:ab:f7:eb:85:bc:86:0b:1d:f1:8d:ad:23:29:81:3b:78:
5a:b0:4b:b1:65:5c:48:17:61:44:f4:dd:56:c6:a7:eb:ff:24:
14:f9:c0:c5:80:00:db:a0:e0:70:43:5b:01:a5:fb:e0:4b:83:
ef:01:b6:95:ca:32:a8:95:62:e6:05:ef:d5:d1:fa:55:3f:ab:
65:e2:b8:e7:8f:f2:6c:27:70:69:36:8c:bd:ec:c4:6a:28:3c:
4c:bd:94:5a:f5:65:95:37:2c:2e:ea:e5:1f:45:fb:d7:3f:16:
72:f3:e2:ae:b1:4b:92:3c:01:4d:83:af:a5:b0:6f:b0:17:43:
eb:1c:b0:6d:a6:7c:14:35:2a:b9:a6:78:29:77:14:8b:42:a2:
f5:bf:63:9b:c7:da:5b:b3:0a:00:f6:49:ef:d0:9f:30:d6:c8:
2e:44:ea:95:67:8a:ad:28:b4:2a:33:67:fe:fd:31:23:e0:2e:
90:db:1c:95:68:22:18:e3:cc:be:fd:81:f4:c0:06:fa:e9:bb:
b2:a7:0c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:58 2025 by rpki-client