Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: dSh2jc9gu68UyFtY1DI5urX7Mn40wacdzRpeJaEFwmg=
Subject key identifier: A0:C7:DC:85:AF:6D:2B:61:E2:A6:2D:FD:69:DC:B6:67:6B:03:94:14
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 019A72CACF612F831E84A2CD811EE8CD32E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 16C3
Signing time: Tue 11 Nov 2025 12:01:25 +0000
Manifest this update: Tue 11 Nov 2025 12:01:25 +0000
Manifest next update: Wed 12 Nov 2025 12:01:25 +0000
Files and hashes: 1: 3q6-YPpyRU0SXTuI1scDeTuMZEI.roa (hash: zcjue8I7/Ud383gBlguymoi9BmtOE5qsj15wQFoYezc=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: tTzMqTIM+7Mlp0Snhebfm/xegGTe6UuNmcM7wKhqfK0=)
3: iI3eBvPcK_oU8TVqkbYOtwG8vsg.roa (hash: ikZUasg08WdXub3shWtyhp22ZcEuhRbJ+MQpgo0gb1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:cf:61:2f:83:1e:84:a2:cd:81:1e:e8:cd:32:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Nov 11 12:01:25 2025 GMT
Not After : Nov 12 12:01:25 2025 GMT
Subject: CN=a0c7dc85af6d2b61e2a62dfd69dcb6676b039414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:c6:d0:64:1c:a0:85:c8:e4:c4:b7:8f:a3:
fb:31:ed:7d:f0:ef:c7:0a:7c:1f:52:77:5e:70:ec:
e2:1f:cc:33:ea:cb:66:21:c4:12:f9:b8:b8:60:33:
e9:33:26:b8:45:ad:49:72:07:bd:df:fd:74:7e:ce:
77:81:ba:c3:ee:be:27:cb:f8:b6:f2:d8:80:ec:bc:
e0:05:46:8f:1e:0c:13:f4:02:84:36:0b:be:c7:20:
29:28:f6:8c:26:d9:f5:8a:99:bd:17:8d:a8:68:1d:
69:40:2b:9f:2e:a2:7b:36:37:e8:e3:3b:4d:d3:b7:
b7:73:d6:0e:ca:f9:63:ee:ec:80:76:e5:e5:67:5b:
ad:d0:d1:36:88:bb:2c:a3:1b:2c:e4:ec:a9:bf:cb:
9b:fd:0b:20:11:8a:31:ea:40:bb:74:f6:63:9b:97:
2f:51:6d:ca:45:b5:84:82:b0:e7:15:6e:b0:76:10:
ba:3c:5e:fb:bb:84:2d:c9:e1:19:b1:c2:1b:d3:ca:
9d:81:c0:df:44:6e:3b:7a:ad:62:9f:a0:ef:ec:64:
71:5d:7b:bd:c0:5c:54:41:e8:0d:a1:d4:55:00:34:
a5:23:fe:19:f5:a3:08:f6:59:e7:8f:bc:de:50:ee:
3e:8f:87:19:d9:89:ae:06:55:10:92:ff:e0:10:be:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:DC:85:AF:6D:2B:61:E2:A6:2D:FD:69:DC:B6:67:6B:03:94:14
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:64:e4:39:35:e6:81:f2:e4:b5:0c:b3:93:48:ca:fc:f1:26:
2b:95:aa:b0:00:1d:cc:59:83:84:7a:d4:2b:e3:e6:75:53:98:
3e:8c:b2:58:55:b1:2a:e3:27:f1:d2:63:97:ef:f4:27:6b:87:
be:40:03:b3:69:4d:12:21:b0:34:21:42:25:c0:e7:f7:64:8c:
9e:f1:52:97:10:94:f7:34:53:85:4d:e3:1e:a6:bc:20:36:69:
cf:cc:b8:c1:0b:0f:d2:06:32:b5:b7:ec:c5:70:a0:e5:ff:0b:
00:a8:ed:a2:47:fc:5f:9d:3d:86:7a:14:86:53:2f:78:37:73:
33:04:a4:87:3c:63:c1:e2:98:c4:bc:79:21:14:bd:af:23:f3:
0d:04:98:fa:e2:2b:39:4b:f1:44:1e:e9:4e:d0:96:86:d6:fb:
46:13:95:bc:d6:d0:f9:e0:a3:91:6b:1c:3d:38:2b:fb:b3:5a:
6a:2f:ab:93:f1:fc:33:91:c9:0e:a6:0f:d2:c6:8e:74:db:72:
02:92:8c:8f:cc:16:2e:52:cb:a7:b4:00:8b:93:da:f8:54:91:
45:da:41:08:b4:5b:dc:eb:ba:ce:65:ce:43:5c:b8:2f:48:83:
df:ab:bc:82:77:77:3f:e7:52:7c:8d:de:2f:4a:9a:9a:d2:98:
eb:58:70:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:57 2025 by rpki-client