Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: 4XB/llzmELoG6y2I75HIcIR9SWjoSKAG+eVx6pHRYWU=
Subject key identifier: 3B:12:05:D2:C6:1A:F8:5F:B4:B8:A0:75:9C:B7:C8:97:70:91:02:86
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 019A71B8AB52AC7372A50907DF0701415732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: kO87n5H1po3WtURzDV1AjW2e+7l5CNKEHiAKxUQV3+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ab:52:ac:73:72:a5:09:07:df:07:01:41:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=3b1205d2c61af85fb4b8a0759cb7c89770910286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:13:ae:d8:b0:76:48:d3:f0:3a:00:60:08:
0b:cb:2b:29:bb:31:f8:a6:b1:a9:29:9f:e9:ba:30:
75:db:9a:52:25:a4:40:e3:8c:ab:a9:4d:23:0c:ce:
de:b4:b5:d5:ee:0c:26:34:d4:77:93:b5:9a:95:4e:
38:e1:25:30:96:ca:6b:c9:bf:66:ab:31:0d:39:59:
a2:ae:7e:0b:15:f9:aa:a2:59:84:6a:06:25:c4:34:
99:be:81:c8:7b:da:04:92:e8:08:69:f8:d9:5f:13:
db:b8:db:1f:e4:6e:3a:db:d6:b7:f5:37:b9:e8:35:
6c:75:29:8f:7e:22:c4:0b:e1:87:7a:f2:a2:0d:12:
e7:f6:99:16:2e:3a:5c:cc:e4:02:40:cb:59:a9:e3:
ba:cc:e9:74:f1:e2:8f:25:eb:b8:f6:fd:18:d0:23:
db:fa:da:d1:96:a8:60:76:3a:ba:38:e1:e2:73:e8:
1d:71:32:40:d7:53:31:10:ab:2a:96:02:c0:af:0e:
f5:90:c4:7b:cb:78:04:4e:3e:de:ca:bd:73:78:b5:
5c:88:fb:59:7c:b7:86:45:9c:1c:3e:64:49:f4:ff:
d5:7a:02:5b:8a:42:ba:51:ca:a5:fc:8c:e5:ad:34:
96:fb:c7:1c:74:2e:66:3b:62:6d:8c:54:30:c9:cb:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:05:D2:C6:1A:F8:5F:B4:B8:A0:75:9C:B7:C8:97:70:91:02:86
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e9:67:dd:c0:d2:71:b3:12:3a:0b:bd:1c:f7:30:62:dc:2e:
9b:95:06:2a:7e:33:02:94:f6:8b:2f:3d:bf:7d:be:73:5b:7d:
39:e9:db:bc:2c:e3:88:d5:1d:16:b7:3d:8e:57:ea:b2:a5:65:
55:ba:de:e0:0d:58:73:23:57:9f:00:d1:0f:70:ee:80:0e:42:
5f:c9:8b:dd:28:06:f2:a3:5d:cd:25:1a:a7:d3:c8:4d:21:6a:
55:bd:8e:77:c7:78:ac:9f:3c:ba:a1:05:d4:a8:26:fc:44:27:
83:70:38:b5:e1:ed:96:cd:8c:80:2d:b9:72:c0:43:bf:01:52:
dd:15:b9:42:b0:17:fe:a6:ab:17:5c:40:77:9d:99:1a:4d:d7:
99:fd:5e:3b:05:b3:38:72:c4:41:fe:be:f2:b1:15:a5:79:50:
bd:c8:a4:b8:24:7b:da:e8:00:18:de:ef:10:ec:39:c7:ac:c9:
47:86:2d:7d:b5:45:1d:a0:e9:eb:e0:2b:1f:dc:6a:5a:2b:2d:
97:21:da:a9:34:85:e7:12:3d:c6:20:c8:8e:64:21:e6:53:31:
d4:5b:e5:b8:df:ab:60:d4:b8:9d:3e:7e:79:ec:3d:0b:f0:29:
6d:44:b6:c4:67:ef:7a:16:ab:e0:e2:65:35:4e:4c:59:98:6a:
5f:aa:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:31 2025 by rpki-client