Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
File: _QV2-GPffjIbHKUFDOLC3S_K2wk.mft (raw, json)
Hash identifier: qDN3xEZbe4NFZfxJOTFirIGHZqgyH80/6AIBEBjmzXI=
Subject key identifier: 06:17:72:07:9F:D7:71:8C:9F:97:02:B8:6A:C4:58:4E:BA:C9:99:C2
Authority key identifier: FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
Certificate issuer: /CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Certificate serial: 019A7112BC0301F44E3C00007CF9EDC1ABBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
Manifest number: 0D9F
Signing time: Tue 11 Nov 2025 04:00:44 +0000
Manifest this update: Tue 11 Nov 2025 04:00:44 +0000
Manifest next update: Wed 12 Nov 2025 04:00:44 +0000
Files and hashes: 1: _QV2-GPffjIbHKUFDOLC3S_K2wk.crl (hash: qo+0sP6KlGVuvCSW0DidHW39ikGrkD4AgpgMM9pi4M8=)
2: pV6U6t20LPmoE06QzHTKIt1mCdk.roa (hash: 4w6WEHf882+u2XxLJjz6oTPtOsIJ8lQmZFWVpNl8GG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bc:03:01:f4:4e:3c:00:00:7c:f9:ed:c1:ab:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0576f863df7e321b1ca5050ce2c2dd2fcadb09
Validity
Not Before: Nov 11 04:00:44 2025 GMT
Not After : Nov 12 04:00:44 2025 GMT
Subject: CN=061772079fd7718c9f9702b86ac4584ebac999c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:ef:6c:e2:b2:03:c4:97:27:0c:4a:40:b3:
4a:fa:4e:5b:02:ce:b2:2d:ab:4d:fd:58:07:07:b1:
38:b3:88:1f:a6:d5:b4:5a:6a:40:9f:05:7e:88:af:
dd:63:17:17:4c:8a:69:31:c5:a6:88:c7:a1:8a:b1:
b6:7f:47:d4:37:82:22:26:bc:b9:4c:e7:97:ed:d7:
17:19:3a:c3:6b:d2:75:71:eb:5f:47:1f:8f:57:7b:
f5:58:04:1d:3c:99:e0:69:76:6a:f5:b1:3c:c2:50:
1c:f7:ea:44:15:50:33:63:a9:d0:b4:51:b0:58:99:
37:cb:64:a9:c8:e0:e9:03:5f:17:d1:78:ca:3a:37:
b7:6a:84:2b:ac:e5:d2:4d:d1:35:63:54:90:92:88:
a0:37:94:05:fb:ba:3e:4f:fb:b3:3d:3c:7a:65:6b:
5d:89:79:46:bc:c0:e2:8f:23:49:a6:12:c3:f5:75:
d1:9f:cf:db:e5:fc:71:60:46:89:6d:79:f1:f5:6b:
21:f1:1e:94:df:18:8e:13:70:26:69:4c:ee:e1:3a:
57:be:00:ec:de:90:67:d1:3c:04:b3:af:0a:c5:e7:
10:88:2c:7c:ac:14:86:b3:b1:47:f9:1e:c0:33:00:
fb:87:60:d6:4e:78:c4:a3:4f:1a:ba:ec:b3:00:9e:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:72:07:9F:D7:71:8C:9F:97:02:B8:6A:C4:58:4E:BA:C9:99:C2
X509v3 Authority Key Identifier:
keyid:FD:05:76:F8:63:DF:7E:32:1B:1C:A5:05:0C:E2:C2:DD:2F:CA:DB:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QV2-GPffjIbHKUFDOLC3S_K2wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/cf36e2-bc7f-425d-a821-4016f6b445a0/1/_QV2-GPffjIbHKUFDOLC3S_K2wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2a:89:4c:bb:49:32:f6:78:7b:47:c5:6f:e6:0f:4f:64:2f:
31:ea:e3:08:bd:84:a5:7b:1c:e1:c5:d4:b0:5d:62:ff:f0:66:
aa:ac:e4:aa:36:16:2d:f2:05:ea:dc:89:ae:94:fb:ca:94:42:
e7:ee:fc:98:cc:f6:07:dc:91:69:b3:1b:71:0c:6a:7a:1a:8c:
c0:45:ad:0e:43:4c:0f:8d:ae:f1:2e:dd:2f:a1:63:c3:ea:9f:
07:f0:ef:84:6c:69:9d:e3:31:90:2e:43:75:71:f8:1a:f8:42:
a3:42:e5:1c:59:9c:c3:92:bf:a0:62:65:80:69:16:36:cd:a9:
0e:00:cb:f7:93:34:56:68:6d:67:fc:73:6a:b2:8a:2f:83:ac:
2d:af:6e:3f:6f:dc:10:94:b7:1e:8d:37:d9:0a:0b:88:d5:7e:
1f:89:cc:77:23:bb:73:8e:71:00:6d:c4:04:a8:b6:29:09:8f:
83:ae:89:03:26:d7:36:23:41:92:b5:6a:5b:3b:b5:0e:72:2e:
ec:e8:78:03:6a:b7:b2:05:09:6b:9a:5b:63:7a:88:d1:95:47:
14:8f:b5:a6:86:95:71:be:36:2d:60:6a:7f:f4:85:2d:7b:cb:
ff:10:c6:35:6e:e3:30:6e:5d:21:0f:31:3c:34:f5:13:55:3e:
71:12:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:36 2025 by rpki-client