Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
File: QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft (raw, json)
Hash identifier: NYfL8wg9WtxlTjUMSt0rpZ4S3AxqaIFPKHGVAuGEgxU=
Subject key identifier: 97:93:D7:66:BD:8E:2A:1C:10:3A:CD:9A:63:D8:C1:53:D0:DD:07:35
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial: 019A71B8D3B87C88919B16204D1C1F3F14B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
Manifest number: 0DF5
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl (hash: kfrbXby6xyP43qsgWFmZk63wgVZ3/IPxXutR/e+Z5tY=)
2: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (hash: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d3:b8:7c:88:91:9b:16:20:4d:1c:1f:3f:14:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=9793d766bd8e2a1c103acd9a63d8c153d0dd0735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:ea:c4:cc:28:75:63:3b:d2:c8:73:0b:67:
c0:ad:b0:65:35:9d:aa:23:9a:39:98:e6:3d:1f:35:
98:51:52:0f:31:b3:f6:d4:d3:08:ba:17:62:95:58:
20:20:a2:e4:a0:79:ed:11:55:f6:20:03:fe:34:df:
51:1a:0c:cb:bf:f4:d4:6f:2f:8d:07:c6:35:3b:b8:
f4:38:74:4b:6b:5e:9a:e5:d3:79:49:ee:ff:13:8e:
68:da:ad:f7:95:d5:9d:8b:54:af:49:cd:01:6b:06:
81:44:26:ff:54:1d:a6:45:92:9d:39:25:3e:71:63:
b8:3f:14:50:94:5b:c5:fc:85:92:b3:5d:29:75:54:
8e:24:f0:e6:26:81:ab:60:bc:02:41:27:d4:f6:fd:
e8:32:f3:e3:9e:69:92:cb:bc:3b:ef:f5:c9:a6:b9:
6d:cb:0e:a4:70:b2:84:07:8c:8c:7c:d8:6e:a3:8d:
48:fb:91:49:7f:99:c0:f8:d6:1b:ce:58:91:af:24:
5d:66:ba:78:56:0f:71:60:fb:28:d5:34:2b:b2:94:
d6:0e:48:cb:0b:f9:a6:37:fd:34:77:ec:eb:8c:66:
9a:fe:20:bb:14:19:93:d9:19:d7:c4:e9:ec:1d:2a:
15:4a:2e:9a:39:54:6f:c7:20:29:a4:de:01:fb:80:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:93:D7:66:BD:8E:2A:1C:10:3A:CD:9A:63:D8:C1:53:D0:DD:07:35
X509v3 Authority Key Identifier:
keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:18:47:b0:c1:5c:65:1c:64:c8:98:27:c3:e5:f1:62:0c:5d:
f6:2e:fb:05:8c:5b:fc:29:a2:c7:0d:2b:e3:9b:9f:38:dc:eb:
c3:ad:36:cf:2a:d8:a6:11:00:28:2d:37:e7:c5:c9:3c:41:16:
21:7e:70:d2:7f:cd:ba:ed:6f:a1:ad:f6:cb:f1:1e:09:86:07:
a6:c2:1d:96:8e:43:02:6b:db:9e:4d:9f:d4:75:7b:d6:7c:1d:
bc:10:ca:d1:87:de:db:2e:5f:66:32:45:fa:37:d9:7c:fc:a8:
e1:0e:83:e5:cf:a8:ef:4d:79:01:89:0f:c5:60:62:08:19:6f:
34:2e:94:54:6d:2c:7e:80:f8:2e:f7:32:b3:88:5d:56:14:8f:
03:34:a9:d9:5a:f6:35:77:ce:b4:0b:30:9c:1f:b8:6f:f9:d6:
ed:d4:ab:af:af:2d:29:85:89:3a:f2:5c:ad:b5:fd:ae:05:cd:
9e:26:77:73:03:1e:b5:1d:69:68:56:7f:a0:8b:fb:68:c5:e3:
7c:38:ed:09:96:41:7b:b6:8a:c9:59:a1:4e:b8:0c:2a:2a:6b:
32:9e:67:f7:35:39:93:3a:d9:03:1e:f2:e7:30:92:3b:b7:9a:
da:f6:93:28:4f:74:4e:d0:4b:09:07:11:72:15:92:76:41:82:
0d:56:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:51 2025 by rpki-client