Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: 9Jk64TiKmenXx3pHgvfHlmS+BUo9lkshCa8WTVF2zcI=
Subject key identifier: 70:2A:51:0E:88:74:2A:7B:32:B6:F4:70:57:44:2A:10:54:0B:B7:94
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 019A239C4D91AFF42A48E296EFD92062E945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 0E87
Signing time: Mon 27 Oct 2025 03:00:37 +0000
Manifest this update: Mon 27 Oct 2025 03:00:37 +0000
Manifest next update: Tue 28 Oct 2025 03:00:37 +0000
Files and hashes: 1: GQOl6LTvNyPMyG3KjW9Ajp0Bvpw.roa (hash: eZX/fpaYpvDnXloavaVJKtIU2XKfpzNfzwR74TFia7o=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: LVzJ8eSOmTPQnA2IdnMz2tnU4NuZq3z69k8DLPRtdK0=)
3: b5Ug6NPJo2XtezY8UVzxnmPE-i0.roa (hash: VB+B1HYKvDBDwa8bPpxYYXoTuHADEZJRpgBpaSqbPu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:4d:91:af:f4:2a:48:e2:96:ef:d9:20:62:e9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Oct 27 03:00:37 2025 GMT
Not After : Oct 28 03:00:37 2025 GMT
Subject: CN=702a510e88742a7b32b6f47057442a10540bb794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ae:4b:9a:86:0a:72:c0:20:7e:82:39:91:8b:
51:a9:ea:99:d9:8b:46:e0:0d:b9:32:19:4d:f0:05:
16:4c:c5:33:0b:40:f0:a9:3e:50:bb:4d:4c:a4:08:
cf:19:24:ab:ab:bf:0c:be:ca:7a:79:de:91:b6:aa:
66:0c:ba:9e:cc:f6:3d:70:5a:93:7e:4b:84:17:7c:
54:2a:19:5a:d7:b4:b1:d1:a9:c6:db:6f:b5:1a:0a:
43:68:e7:0c:88:98:42:8c:78:33:60:86:e3:cd:2c:
94:5f:3a:20:35:fa:f9:3b:50:2b:ec:db:93:7e:65:
e9:64:e1:de:ac:98:fc:80:a2:a5:8c:11:3f:a7:be:
1b:66:70:a8:88:f2:32:43:f1:2c:44:4d:f9:1f:d1:
e6:2e:ba:1a:65:7f:81:2b:68:eb:e4:63:9c:2b:be:
31:18:33:26:54:c3:e9:7d:a4:8d:cd:b9:20:d4:73:
16:af:38:3f:56:ba:ce:2a:77:dd:e4:a8:21:40:be:
fd:28:ea:0f:3a:75:fa:cf:4f:13:f9:c2:b3:4f:3f:
81:e5:7f:92:ff:e4:ac:97:0f:f5:62:bc:43:3a:36:
d5:55:7c:55:3e:99:30:4f:1f:ee:db:31:cb:e4:d0:
2a:be:99:44:d6:f6:0a:ca:4a:29:4f:14:df:15:dd:
61:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2A:51:0E:88:74:2A:7B:32:B6:F4:70:57:44:2A:10:54:0B:B7:94
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:b0:88:45:18:77:2f:1f:49:96:5d:d0:cd:68:91:e5:d2:a4:
81:a8:1c:18:67:f3:bc:b4:0a:0d:0b:05:8d:bd:00:53:38:80:
1a:0d:78:87:db:40:21:f4:5a:f3:0d:3a:7f:eb:2e:81:60:aa:
4d:2d:8c:61:e3:fd:30:43:a9:93:0f:f3:e6:95:8e:92:41:44:
4e:90:07:18:06:bc:09:dd:3e:61:53:73:8b:35:bb:09:bb:0f:
db:a3:2c:98:7d:af:4a:1c:e4:32:2e:7b:76:ab:09:49:ef:9c:
24:b6:31:16:fa:1f:72:34:10:1f:a0:33:db:9d:d5:fa:78:ed:
1a:e7:51:c9:67:d8:9c:83:46:26:a5:b4:bd:0b:66:2e:66:8c:
91:a8:9c:57:cd:fb:d0:33:85:b0:64:74:bc:60:a7:ce:6f:5d:
e6:14:0c:6c:80:6e:f1:d3:5c:c7:dc:a0:89:3c:da:47:09:6b:
37:48:c8:4b:2c:f6:46:85:44:23:71:e5:0f:5f:9c:7e:d0:bb:
39:3a:33:b3:69:62:bf:56:bc:08:1b:a2:5c:12:7c:80:1e:88:
46:be:e2:3d:d1:ab:e6:81:91:f6:3d:9e:68:7d:9d:32:13:8b:
82:e5:55:dc:2f:7a:d6:9a:09:11:99:6c:d9:ad:56:d7:de:e6:
d4:da:40:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:21:06 2025 by rpki-client