Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
File: qzCSHSjHjt6BhC9xLmz3K95aYIA.mft (raw, json)
Hash identifier: 2bM+Zbwh5ZpDLokgJLVoyZjDX9ZcAkN4EvLpTl65bPc=
Subject key identifier: 64:BA:3C:5C:8E:46:B6:63:38:A4:C7:70:6F:2F:B5:1B:3A:EA:77:FC
Authority key identifier: AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
Certificate issuer: /CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Certificate serial: 019A718083FCB2C2036116AAE7C0FC5A686B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
Manifest number: 11E5
Signing time: Tue 11 Nov 2025 06:00:39 +0000
Manifest this update: Tue 11 Nov 2025 06:00:39 +0000
Manifest next update: Wed 12 Nov 2025 06:00:39 +0000
Files and hashes: 1: 0YC7qm9CG4pOwh0oTWm4ITQDSnY.roa (hash: EWDr7Bs0H7fnIeWZl0W4PNh2O69SVcVeiWaRqk/8B3k=)
2: WRJMUYeRixw27CAPxZImqPYkDlU.roa (hash: i28cVSRe5f6zxa7/1YaErFOEzE3A0YFcGcdJGku5uCs=)
3: qzCSHSjHjt6BhC9xLmz3K95aYIA.crl (hash: dXRa3odctrFuBERLrsNCJ0hD1HpJ9EnAyzY8PVV7YA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:83:fc:b2:c2:03:61:16:aa:e7:c0:fc:5a:68:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab30921d28c78ede81842f712e6cf72bde5a6080
Validity
Not Before: Nov 11 06:00:39 2025 GMT
Not After : Nov 12 06:00:39 2025 GMT
Subject: CN=64ba3c5c8e46b66338a4c7706f2fb51b3aea77fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c4:10:97:13:e4:e9:59:7b:9f:b9:b4:98:2c:
c0:5a:20:68:e0:62:77:0e:e2:a1:c6:e5:91:9b:d8:
cd:f7:78:c6:15:0c:28:58:98:d9:1d:8f:9c:63:53:
a7:b7:61:63:e5:3b:06:a5:b1:ed:b1:42:20:d0:b3:
79:e4:c3:03:d0:75:3d:22:df:f8:fc:b9:c5:10:fe:
bc:4e:78:b0:e2:04:57:69:b3:1a:73:19:31:bf:32:
2d:61:4b:e2:da:2c:14:ec:7d:5a:3e:aa:47:9d:09:
22:27:30:50:af:6e:df:9e:e1:04:f2:d6:5a:f8:fc:
c0:99:d6:98:ab:14:4f:70:40:9e:b8:c0:fa:4b:c2:
a0:af:60:53:37:0d:72:e1:f1:cc:56:6a:6e:b5:65:
22:f1:35:56:64:c6:a6:43:0d:08:05:b5:ac:bc:73:
55:cf:dd:76:fa:77:30:90:c2:2e:f9:ea:70:a7:58:
4a:7e:33:55:c2:d0:0d:a9:43:eb:7e:31:ad:ee:81:
dc:db:21:0e:72:8d:d9:51:3e:dd:b2:5c:8d:55:77:
7a:1a:a8:fc:3d:76:e5:58:d7:da:2e:f0:c7:04:ec:
6b:99:49:1c:65:fe:10:2f:61:72:df:81:e0:1a:03:
89:ee:db:81:c2:4e:31:2a:b8:d8:29:ac:cc:82:01:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:3C:5C:8E:46:B6:63:38:A4:C7:70:6F:2F:B5:1B:3A:EA:77:FC
X509v3 Authority Key Identifier:
keyid:AB:30:92:1D:28:C7:8E:DE:81:84:2F:71:2E:6C:F7:2B:DE:5A:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzCSHSjHjt6BhC9xLmz3K95aYIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3cd7ff-20d2-4cec-aeca-354399724b1e/1/qzCSHSjHjt6BhC9xLmz3K95aYIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:fa:6c:47:a9:f4:b5:fb:58:76:bd:a5:2d:bc:bd:d6:41:44:
3b:5d:be:81:fb:ec:90:0e:6b:06:1c:bd:85:eb:9e:13:a6:ae:
03:63:ab:20:ba:c8:15:01:a5:b2:cd:5c:3a:98:52:e0:42:f9:
4e:cb:aa:fa:61:ae:f0:31:0e:15:d7:96:cd:a1:6b:48:99:52:
3b:4c:8f:42:39:22:08:1e:80:3e:93:fd:6b:6a:23:35:c2:48:
ff:00:45:eb:38:ba:d8:f4:59:46:82:b4:9c:6c:3f:ad:78:4b:
5f:ef:0e:80:33:b4:f2:8e:33:08:4e:d6:ad:a3:0b:84:58:26:
59:37:82:7a:fb:4a:46:83:f1:41:3d:e9:ab:5a:2f:19:2a:84:
97:83:99:a6:fb:f0:d0:8e:70:6d:07:dd:53:80:30:59:e9:e3:
fa:a1:c2:55:21:e6:e9:78:c2:48:d9:27:bc:66:0f:5d:2a:52:
5e:08:e8:2b:42:e4:8c:dd:24:6d:c3:0f:40:e8:f3:5c:dc:68:
45:33:62:15:11:a9:8e:63:f9:45:4e:9b:e3:e4:d8:3b:4b:d7:
08:dc:bc:8e:a1:eb:eb:ac:50:b0:29:dc:ac:1a:66:8e:b5:96:
fe:b5:5d:35:e0:c1:da:7d:d1:ef:b0:2d:88:f9:89:3a:0a:6f:
7d:b6:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:07 2025 by rpki-client