Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: JfPJvVc5siqO7zs7fy4Pt6Wddf5i1KwYr/6mWEAVi+o=
Subject key identifier: D2:12:08:AD:9B:EF:47:01:EE:F1:4F:83:08:E4:61:A3:A2:85:2E:D6
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 019A71EEA82F4573CA10316B61A4382C6591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 0BB1
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: rLpO405te39n9256aIZrxd82hJ/qvnEeuzPLQ1k0rH4=)
2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a8:2f:45:73:ca:10:31:6b:61:a4:38:2c:65:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=d21208ad9bef4701eef14f8308e461a3a2852ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ed:52:26:32:5c:38:e2:3e:1e:1d:6f:0f:04:
2a:47:ab:03:47:89:e3:96:c4:98:2d:20:fe:fe:cf:
75:a2:58:3a:04:ec:8d:aa:98:1f:6c:bf:a6:7d:6d:
07:f4:bb:e3:f2:2d:ca:bd:7c:69:38:6d:20:2b:7f:
73:f2:28:14:47:61:7f:29:87:a2:e7:87:fb:ca:ae:
14:44:e4:da:b6:e6:bd:89:88:8f:e0:27:aa:04:ea:
80:b3:97:9c:ac:c3:91:c9:7e:44:bf:eb:de:bb:b0:
34:e9:cc:a7:49:b6:b0:e0:7b:b7:c4:13:2b:e8:69:
9c:11:16:87:3d:34:9a:0b:98:a7:4b:34:50:09:60:
26:54:e9:a7:98:86:2a:74:1f:c4:0f:08:d2:87:bf:
31:9b:a6:95:28:12:96:dd:bf:a9:b0:0f:5f:c8:6b:
b3:42:28:6e:cf:f6:70:60:2b:a9:7b:ac:27:c6:dd:
90:4b:79:b3:9a:b6:32:2a:ca:a6:72:2f:66:02:b0:
ce:34:39:b3:48:9a:a3:b2:5d:a7:51:0c:8e:ea:ca:
75:85:22:53:42:6d:3d:7f:87:a3:72:08:fc:38:ba:
e0:69:99:97:55:05:d2:c3:3e:74:90:54:8d:27:9c:
57:06:e3:9f:77:7c:08:16:38:07:25:4c:3e:9d:e3:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:12:08:AD:9B:EF:47:01:EE:F1:4F:83:08:E4:61:A3:A2:85:2E:D6
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:65:7f:0c:14:b9:b4:d8:6e:63:ee:3e:11:7a:01:13:21:b8:
12:9e:d1:ce:94:25:7b:74:b5:aa:d2:62:54:d0:c9:45:4f:74:
2f:25:0f:8a:fa:2b:49:e0:01:7b:d1:52:e8:f3:7e:e4:3c:80:
f9:9e:52:c5:bc:e6:1a:1c:9b:e3:56:65:9f:e9:d9:21:4b:e5:
7b:ab:0e:1b:c5:37:b9:2f:e3:f7:6a:a1:2f:e9:09:cd:76:69:
13:fa:e2:bd:4d:53:d3:be:6c:5c:01:6d:38:a7:a8:84:82:42:
bc:0d:e0:bf:26:2b:90:94:50:f5:47:c7:f2:7d:a2:61:e9:ca:
65:c2:c0:da:c1:a7:c5:68:61:89:19:7c:d4:98:63:5f:53:02:
c8:81:f6:3c:60:fe:1d:4d:9f:eb:9b:85:41:f2:cc:94:ad:23:
60:52:21:b9:ed:04:3b:82:ed:36:5f:f8:99:7d:9b:ff:d2:3b:
53:0e:d3:78:cf:6d:15:96:cf:56:d7:56:04:e6:58:d1:26:b2:
4e:50:ae:4e:83:da:c0:61:95:63:e6:86:0c:b2:6d:72:5c:f3:
44:46:59:ed:65:d8:07:c0:86:ce:3b:09:13:f2:84:5f:ef:b6:
aa:ad:28:0b:c2:f6:96:80:2e:3c:99:08:86:39:16:c6:38:11:
9f:2f:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:27 2025 by rpki-client