Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
File: QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft (raw, json)
Hash identifier: 9wDNttX6ZH7xVGr9aTZc33hF+KnX2GGkIEOT61+eXEo=
Subject key identifier: 02:19:71:B8:F3:F3:FF:78:C5:DF:A7:FE:C7:21:61:F4:8D:CE:23:98
Authority key identifier: 41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
Certificate issuer: /CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Certificate serial: 019A725C9817128935A231E77122813BA6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
Manifest number: 0E06
Signing time: Tue 11 Nov 2025 10:01:02 +0000
Manifest this update: Tue 11 Nov 2025 10:01:02 +0000
Manifest next update: Wed 12 Nov 2025 10:01:02 +0000
Files and hashes: 1: 2jf60Yjy6HLBv6d8yR7rie7dcvM.roa (hash: KUJJAA4N19gfVcdXpDwoxv1pVLrdLYxvm5tedzjrpBo=)
2: QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl (hash: ppby730UE0rSMyOHt5gJa3ITHI7x22he5gqfHT2Tack=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:98:17:12:89:35:a2:31:e7:71:22:81:3b:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e2392b6548b09b18a64d3e5080bbbb9279310b
Validity
Not Before: Nov 11 10:01:02 2025 GMT
Not After : Nov 12 10:01:02 2025 GMT
Subject: CN=021971b8f3f3ff78c5dfa7fec72161f48dce2398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:7c:cd:e7:77:4e:36:08:d6:e6:17:99:35:
17:04:3a:b6:a7:20:61:5e:a3:7a:87:03:b9:80:e8:
96:28:7a:46:5d:ba:24:82:d6:d4:a8:2c:28:9d:cb:
ca:5b:0a:ca:07:fd:d3:44:63:b0:fc:8d:00:85:f4:
7b:08:a4:cd:dd:8e:ff:ec:cb:e7:ab:80:51:aa:68:
1d:34:6f:19:cb:00:c0:54:ac:e6:35:7c:36:06:8e:
90:ef:0b:34:71:36:4b:4f:95:63:3e:61:85:e7:2f:
ea:14:fc:6b:aa:46:69:d0:72:23:f3:6c:2f:1b:07:
eb:33:a1:e2:80:7f:d5:fb:f8:9f:48:27:60:0c:e5:
bb:df:14:19:b4:d0:4d:1f:45:00:40:0e:a1:f8:ad:
78:e0:ea:8e:3a:7f:dc:47:99:4d:62:bf:7f:5f:cb:
64:fc:73:a1:37:be:a1:b0:f5:32:20:f4:cf:34:db:
a2:90:10:10:ff:93:db:33:e9:62:b8:0b:c2:28:09:
5c:8c:d2:fc:38:32:6f:95:10:57:01:02:0b:fb:6f:
83:0a:79:bc:fe:98:63:89:54:fc:1a:bc:5e:dc:15:
b3:c1:c2:b6:31:a8:4e:ee:43:d3:b7:f9:60:d4:40:
c7:21:3b:b7:05:3d:6e:1b:5e:77:34:9f:d4:02:da:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:19:71:B8:F3:F3:FF:78:C5:DF:A7:FE:C7:21:61:F4:8D:CE:23:98
X509v3 Authority Key Identifier:
keyid:41:E2:39:2B:65:48:B0:9B:18:A6:4D:3E:50:80:BB:BB:92:79:31:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeI5K2VIsJsYpk0-UIC7u5J5MQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7e4045-2275-4e50-b641-5f04e58df1c2/1/QeI5K2VIsJsYpk0-UIC7u5J5MQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c8:07:09:36:13:e0:c8:f2:67:32:74:ed:ee:21:f2:a4:ea:
db:6c:61:d9:9d:3d:a8:70:12:8c:b3:73:8e:2b:28:10:7a:2a:
b4:6b:44:54:82:ea:eb:dc:08:b7:51:93:2b:60:b4:21:5f:7a:
d1:e5:2d:8c:e0:32:53:57:9b:db:05:c9:48:00:4e:e3:80:aa:
de:e8:30:3c:a1:8b:bf:0e:69:9d:77:be:76:bc:db:ed:ab:e2:
f0:9d:13:81:46:aa:7c:29:a0:c7:1c:52:53:19:47:be:a7:ee:
4f:6b:c8:1b:ba:b7:ff:d8:4e:00:0a:03:35:f0:40:35:f3:aa:
62:25:39:df:56:c6:0d:37:a2:dc:60:de:02:c6:26:fe:f1:17:
9f:32:fe:dd:6a:8f:27:e2:b2:3b:6b:10:f6:51:59:84:1d:48:
bd:7a:af:fa:45:94:2a:2e:a5:d0:85:ba:ed:17:03:fa:1f:69:
99:2d:32:6d:e4:08:02:c7:23:7c:e0:44:90:c8:9a:25:c7:f9:
77:c6:9a:7d:45:48:0f:3d:55:ac:26:2c:b0:59:49:8e:6b:24:
37:d2:65:fb:37:67:ad:24:ea:73:ac:68:8a:45:17:77:9e:65:
12:73:ae:35:75:29:7b:57:f5:26:63:93:b1:a3:be:95:5c:2e:
b2:ee:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:28 2025 by rpki-client