Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: nhS3oP1hthShMwW3/Bs1KTXK/6xrgQykHXeBjla9/UY=
Subject key identifier: 6F:B7:38:B0:50:07:84:2D:98:69:43:A7:F9:3B:D9:19:D7:E7:48:95
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 019A70DBDE9CB305F2577463440E4B3652DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:00:48 +0000
Manifest this update: Tue 11 Nov 2025 03:00:48 +0000
Manifest next update: Wed 12 Nov 2025 03:00:48 +0000
Files and hashes: 1: FVpdVuEnsDRMHRWVu11uzU70gi0.roa (hash: mJhCl2lN+VqxL/uU8LnW1pAhhjzpMKfJN4amGIlMec4=)
2: PoyytAvXOYVvBU28xnJ13dEQvjk.roa (hash: i4hitHtlLKsldZIYK5cClvI2iYzkK5dcUJcf/PHsfy4=)
3: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: S/ff56s7hQQ3tV0vX0D7rz/ZOdIAlY0C6kbMtYRtwEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:de:9c:b3:05:f2:57:74:63:44:0e:4b:36:52:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Nov 11 03:00:48 2025 GMT
Not After : Nov 12 03:00:48 2025 GMT
Subject: CN=6fb738b05007842d986943a7f93bd919d7e74895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f2:39:6b:12:ef:1d:db:f4:f4:ba:8b:17:b7:
aa:1f:8a:df:36:78:db:44:05:cb:d2:a2:0c:ab:69:
cf:75:79:bd:ac:f7:e5:d4:45:ba:62:17:25:08:fc:
77:ef:75:8c:b3:ff:af:62:88:ab:75:db:1e:e5:0d:
92:17:ff:54:bf:14:4f:40:6e:2d:06:82:9e:97:cf:
92:40:72:13:1a:2f:bd:63:b0:6d:81:a9:f6:b5:76:
25:44:d1:11:bd:60:bf:7d:34:60:44:c8:d8:cb:9b:
97:79:50:9b:b3:b6:e2:ea:1a:a9:16:84:53:62:70:
cc:74:31:91:22:91:ec:25:4a:38:0d:75:33:97:a6:
89:2c:bc:a6:fc:68:4e:77:6e:29:16:3b:64:86:20:
1d:ea:fe:22:ff:e3:e5:e6:eb:b0:a8:23:89:63:8b:
17:28:e7:f2:f2:7f:bf:13:05:23:9a:77:1e:eb:59:
fb:4f:a9:e2:cb:bb:96:5b:40:02:0f:9e:30:4e:56:
3b:c8:df:94:d0:bb:02:40:97:4a:e3:0a:7d:3a:6e:
4a:d0:65:f4:ae:09:b7:66:b2:eb:3a:52:15:4a:c1:
41:47:2d:25:d4:13:5f:e8:b5:b2:89:66:7b:c7:b1:
01:44:5c:b2:6c:f5:e5:ad:48:1b:c2:f2:1c:15:a1:
62:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B7:38:B0:50:07:84:2D:98:69:43:A7:F9:3B:D9:19:D7:E7:48:95
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7e:55:36:b0:fa:5a:8a:df:51:2f:ab:25:64:67:ec:31:71:
63:0c:8b:3b:db:a3:05:32:80:40:c4:63:0f:83:4c:b2:3f:3a:
ab:06:29:5f:34:bf:61:59:0e:84:2d:8b:89:20:95:4c:50:44:
e9:4e:61:6d:2a:46:f9:17:7d:6b:65:09:0a:2b:59:0a:33:a7:
a5:c2:04:f0:d6:ab:81:0c:1b:e3:be:47:44:cf:e8:38:0c:f5:
ce:13:f7:dd:1a:0c:30:73:d7:bc:ef:cb:2a:8d:16:f4:01:ab:
82:6a:8a:1e:70:e9:b6:e2:4d:bb:e5:5a:c2:db:c9:81:b4:c2:
2a:2d:32:b7:e7:ee:57:d0:a6:0a:08:e5:6e:51:f8:97:cd:36:
14:04:17:a1:07:59:2e:22:0d:a6:a9:d9:9c:98:4f:e8:35:cb:
45:81:5c:02:9d:3e:f2:ca:00:a8:19:86:1b:52:f1:11:c5:88:
e6:35:cb:79:08:e5:54:51:32:25:56:08:f2:8f:63:00:06:20:
04:c8:c9:bc:25:a8:6c:72:82:b7:e7:00:72:d8:8f:ea:b1:7d:
ed:f4:3a:a5:e0:dd:ff:b9:a2:08:dc:79:18:5f:eb:f6:12:b2:
d5:67:d2:5b:cf:68:9f:c5:63:95:78:ca:ab:7f:78:87:da:9d:
e7:e7:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:22 2025 by rpki-client