Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
File: QVHWtEHT9XdiwDL4-tIXYIoi96E.mft (raw, json)
Hash identifier: FyovsLqsGkh1B92KgGu9V8R3jUzHqApe8QPHJPc8v5o=
Subject key identifier: F9:90:7E:E3:8D:EB:0E:DC:EA:85:DA:73:66:A2:4B:06:84:0C:FA:F7
Authority key identifier: 41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
Certificate issuer: /CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Certificate serial: 019A706DDFAE27CE724FDB1BC20739C56B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 01:00:39 +0000
Manifest this update: Tue 11 Nov 2025 01:00:39 +0000
Manifest next update: Wed 12 Nov 2025 01:00:39 +0000
Files and hashes: 1: QVHWtEHT9XdiwDL4-tIXYIoi96E.crl (hash: ixNo9VE3RvAPTEu8oGCORB0R+7lJoOru61JP/QHU4PM=)
2: rnhdD5-8bSiFYqITT19uX_gBm3Q.roa (hash: yOuOYWqODTjCSSjzwtgNJuIQsfARCoasQhMpsxakuPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:df:ae:27:ce:72:4f:db:1b:c2:07:39:c5:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4151d6b441d3f57762c032f8fad217608a22f7a1
Validity
Not Before: Nov 11 01:00:39 2025 GMT
Not After : Nov 12 01:00:39 2025 GMT
Subject: CN=f9907ee38deb0edcea85da7366a24b06840cfaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:36:15:ed:cf:19:6b:b2:60:86:e3:8c:f5:f6:
6d:55:4e:db:1e:0e:17:44:26:c4:1a:88:38:30:86:
93:9d:d7:84:42:1d:29:7a:4b:cc:29:a1:85:91:3a:
ee:80:91:6b:2e:e4:11:3c:cb:aa:30:a7:d3:7d:38:
8f:9d:7f:bf:0f:3c:31:1e:4d:82:8f:f6:89:b0:75:
8f:6b:0c:17:eb:f0:38:78:44:11:3d:f0:cc:10:0d:
08:55:bf:11:ac:34:ad:3f:64:cc:b8:ed:b3:27:4d:
5c:5a:67:77:7b:97:50:63:fa:d7:bc:23:ae:25:c0:
fd:99:1f:8e:5c:ec:08:eb:e6:17:33:66:18:6b:8b:
50:95:54:ff:66:5a:72:bc:33:6a:de:05:cb:0c:7c:
8b:5f:ec:30:a1:b0:a2:93:05:c4:97:85:73:23:88:
7c:61:56:cd:28:c1:63:ef:f2:f7:1f:0a:f0:d3:79:
67:da:06:a2:c2:b6:2a:d6:e6:b2:67:b3:73:ec:1f:
dc:3a:e1:56:1c:83:b6:7f:dc:33:39:99:8a:df:74:
c4:a4:0c:fd:1d:ee:8b:ee:b8:81:30:00:d6:5d:2f:
51:ca:77:57:9d:31:92:f9:e1:4e:fa:05:31:b5:2e:
9f:67:9d:8b:71:53:2e:18:55:51:31:62:14:08:0d:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:7E:E3:8D:EB:0E:DC:EA:85:DA:73:66:A2:4B:06:84:0C:FA:F7
X509v3 Authority Key Identifier:
keyid:41:51:D6:B4:41:D3:F5:77:62:C0:32:F8:FA:D2:17:60:8A:22:F7:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVHWtEHT9XdiwDL4-tIXYIoi96E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/cddb63-9308-43c9-9473-eae418158a52/1/QVHWtEHT9XdiwDL4-tIXYIoi96E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e6:94:cb:32:a9:37:b9:28:11:9a:03:bf:d6:a8:fe:f7:b6:
47:99:1e:e1:6e:08:9f:8d:0a:a1:58:e4:40:00:39:2a:b3:5e:
d0:a0:db:e4:b1:e8:d9:cf:8e:45:ad:7e:77:99:7e:3f:48:ad:
24:8c:31:00:b6:fb:1d:a3:dc:80:00:12:93:49:98:13:4c:cc:
91:48:9a:69:b4:7a:bd:89:aa:3c:f9:79:bf:0d:70:aa:70:a5:
84:87:76:a8:05:ce:a7:c0:8e:eb:b2:5e:17:e1:93:24:4f:f8:
72:a6:b9:d2:fa:f9:f4:cf:a4:f3:2b:51:36:29:a8:5b:d2:64:
28:c3:66:6d:4c:e3:6a:5a:32:0f:74:8a:0a:01:fa:83:98:bf:
fe:eb:85:bd:eb:bf:a6:11:7f:53:52:c9:7d:99:5d:e4:bf:fb:
4b:01:81:52:2c:07:de:6b:22:32:9d:cd:71:1c:89:6b:f0:8b:
b3:00:57:2e:62:e8:59:b6:8c:b8:9e:f8:f4:35:74:8a:82:17:
be:ae:41:7f:24:40:5d:06:2b:21:40:40:9f:b8:25:98:bf:8f:
63:a3:60:27:73:5c:ec:c1:fc:6f:50:87:03:43:b3:2e:ae:7b:
58:a0:e5:fb:3d:86:fb:d6:81:95:16:92:a8:cd:56:15:17:84:
7f:64:b9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:29:19 2025 by rpki-client