Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
File: QJgXTbRR2f797sFfm5x5KdqumYA.mft (raw, json)
Hash identifier: YzW6oJwg/lpYJPXUfQRF3cjkTwclILOITBCVJnBYwK4=
Subject key identifier: A4:48:F4:EA:07:A7:02:BA:C9:AD:F2:E4:81:46:73:05:91:28:98:A9
Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980
Certificate serial: 019A71B8DFD41E38EE2E094919DDA1A805D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: QJgXTbRR2f797sFfm5x5KdqumYA.crl (hash: iw6Kmj7o48nFkE15fLIvsUyg1zwcax1awLMpa+0dIhk=)
2: VEtZZf9DCZWbNoKnf7FdIgrreS8.roa (hash: TCBg4X7Dp/mq95gKrBY1sBflsLJVUkpMXJtFn3JhtO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:df:d4:1e:38:ee:2e:09:49:19:dd:a1:a8:05:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=a448f4ea07a702bac9adf2e481467305912898a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:0e:7f:1c:57:bc:c2:bc:72:38:ce:c1:4b:
2c:6e:b9:93:1e:38:ca:29:0f:ad:3f:2f:d4:06:5e:
b4:00:93:21:43:94:e8:79:1f:4a:45:94:b0:c1:4e:
7c:16:bf:f1:93:9d:69:56:d5:cd:f2:8c:1d:77:5d:
4d:a8:e1:8d:2b:f8:ee:a0:ca:ce:aa:c6:02:aa:69:
39:95:9e:98:9e:18:24:b4:e2:1a:0f:ae:8d:a9:19:
06:61:01:0a:25:0d:88:74:1b:80:3e:ba:c0:1d:d1:
d6:81:49:cb:91:04:8b:70:4a:ce:50:38:da:ef:dd:
6e:c5:b4:42:b8:aa:65:5f:02:56:91:51:67:09:8d:
f7:b6:b4:0c:92:c3:28:72:c8:df:5d:cc:df:3f:33:
88:b7:27:b4:25:42:29:a8:31:48:32:49:99:cd:d9:
c3:94:92:fd:fd:6e:94:15:af:e4:6f:ed:60:21:0a:
66:38:40:fa:f6:cb:de:bf:13:ad:a4:5a:31:2a:90:
8c:ab:96:5c:3b:16:ab:bf:a6:98:c3:97:60:b3:22:
81:9e:29:cc:ad:80:2a:45:8b:2f:be:f8:21:d9:4c:
66:db:53:a0:62:0b:55:bf:ee:f9:e5:eb:5e:c7:83:
06:c2:2b:d4:5d:d0:78:2c:e6:1b:3e:e7:03:85:09:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:F4:EA:07:A7:02:BA:C9:AD:F2:E4:81:46:73:05:91:28:98:A9
X509v3 Authority Key Identifier:
keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b9:a9:01:cb:7e:b0:0d:19:fa:6c:26:f2:d5:d6:a8:17:29:
8e:71:f3:d3:29:4d:5d:3d:44:81:9b:f7:d3:b0:b1:d8:37:fd:
49:6b:75:1b:78:b7:8f:0d:ba:cf:3b:b9:1b:e4:83:fa:af:fc:
00:42:da:1f:26:6a:31:99:bf:7c:35:a5:22:a1:4f:ce:b2:c4:
6c:0c:4b:5b:dd:0f:57:2f:0d:1d:fe:27:45:9b:76:1f:41:0a:
68:8a:68:3f:78:51:30:fd:92:cb:4c:ab:ac:53:8f:e0:46:0e:
e3:19:d0:de:53:e9:2f:af:f7:96:ce:ac:f2:30:99:d9:fc:78:
6a:96:81:7b:bb:8b:0c:a6:e0:9c:74:96:af:a4:92:0d:34:53:
cf:d5:92:1a:f4:92:f0:b5:78:b4:db:60:0f:b2:d8:20:6f:50:
35:b7:01:21:0e:a8:c8:c3:8f:e8:48:af:07:55:4c:03:b5:a5:
de:d6:62:7a:55:a8:f8:22:f2:65:75:6f:4c:23:fb:d9:d9:be:
3e:1b:bf:b2:a2:4a:aa:f6:76:04:3d:44:e3:bd:da:6d:37:71:
99:69:3a:7c:cf:2d:56:9e:7c:e5:cb:d2:2d:c1:a7:3f:02:f1:
e3:59:90:df:90:5a:2f:00:33:ba:46:29:3b:0c:3a:12:83:44:
2a:37:c0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:23 2025 by rpki-client