Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: JS7PcSwIrm+iZrGAgB0lW6CcIP2pcho4t3IEM3IVcJs=
Subject key identifier: D5:3D:3F:B6:68:9F:13:F2:8E:40:23:82:BD:D5:89:50:85:67:D3:CA
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 019A725C92E914EF16B2FB41BA7F2F010B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 1610
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: 5Os8VWrhbfTDv82qosOyF/CJvWKTX1tcCdupn6B8v2E=)
2: hyIZ79qkrdHzxjA2nqjpWKRJazw.roa (hash: uN3TIUn6uJGV9mne7uVtH2Vshh9cYXISPUulyaHzlUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:92:e9:14:ef:16:b2:fb:41:ba:7f:2f:01:0b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=d53d3fb6689f13f28e402382bdd589508567d3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:00:45:5d:8e:2c:c3:d4:8c:23:38:44:f0:
26:a4:0c:8e:aa:a2:76:2f:a7:ed:f8:17:12:84:a4:
db:70:b1:0c:66:da:ac:cc:10:18:d3:36:b0:fb:c0:
ca:1c:84:70:de:00:bd:98:27:58:9a:26:38:31:83:
67:ea:28:84:fb:f5:07:90:d5:99:f3:0c:f9:84:9b:
9f:ef:17:59:1e:5e:7d:82:c6:2a:d0:21:8e:b3:1b:
e4:be:b7:55:12:c0:77:e0:99:4a:1e:89:42:87:2c:
a1:c6:9a:1f:1d:15:ba:ee:87:6d:25:32:78:e6:53:
01:77:6c:f0:59:d1:91:8b:73:5f:77:61:32:94:b0:
d3:a4:79:85:53:04:79:f3:62:77:75:5b:36:09:2a:
66:dd:00:85:07:5d:0c:93:dc:87:ae:63:9a:e1:cd:
63:9c:bd:87:6e:58:b6:f0:f0:c1:54:10:dc:72:60:
c7:6e:6c:9d:dd:55:c7:e2:41:a9:9d:0f:aa:ba:91:
2f:a8:b6:55:49:dc:0c:66:1f:2b:19:9f:81:e6:85:
b9:b0:57:3a:d7:d1:f8:aa:b2:fb:11:d9:2e:98:79:
96:2c:37:9f:b8:11:23:6e:63:10:4f:6b:e8:db:0a:
c0:7b:76:12:9e:2e:71:ed:aa:0d:c2:aa:6c:36:e5:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3D:3F:B6:68:9F:13:F2:8E:40:23:82:BD:D5:89:50:85:67:D3:CA
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2d:60:c3:09:c7:87:43:24:eb:55:4d:af:5b:ed:4e:f7:cd:
cf:f3:b1:f7:c2:49:e7:2e:10:f7:62:47:07:3c:89:71:e2:b1:
ec:07:60:ea:74:cf:86:b5:b5:6f:2e:c0:2d:da:71:af:ee:bd:
13:d7:7a:45:f3:d9:05:75:25:cb:a0:f6:d0:d5:45:62:52:ce:
3f:1d:67:76:cd:9d:e1:c4:45:ba:a2:cc:0e:7f:b0:76:81:5f:
19:a3:84:df:72:e4:70:86:1a:9c:53:cd:7b:a7:91:16:ef:53:
62:2d:1e:3e:c1:d4:4c:98:31:80:72:19:d9:50:df:84:15:4b:
ea:ac:9d:d5:4e:b8:11:e2:a6:c5:e9:23:ec:a6:3c:e1:da:8a:
03:58:8d:1f:f7:b3:8c:0a:01:38:e9:28:0f:11:37:71:40:f6:
5d:37:12:59:a8:79:f5:a5:c9:f6:b5:6b:81:30:da:36:c6:b0:
d0:6c:bc:f6:fc:ea:9b:67:c9:87:80:ea:1f:99:c0:d8:e8:c8:
be:f1:f3:d4:34:c8:92:d2:c5:af:46:c7:f1:49:99:5f:9b:30:
2c:14:b4:88:b7:d1:e1:b7:ff:ee:42:b7:a0:c6:3a:91:36:84:
98:b8:1a:51:a7:48:84:01:ab:41:dd:8c:0c:97:06:35:f2:c3:
b1:63:d6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:13 2025 by rpki-client