Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
File: QVf9g-CODzHnlRRnfAmIEe9pBtc.mft (raw, json)
Hash identifier: 5uh5OXST+Ik8XA71BHWaJQx2zFz8/Nncj4cnVrx4J44=
Subject key identifier: D0:36:D0:24:CB:AA:8F:8D:75:62:09:A6:D0:89:35:5F:74:2B:C8:00
Authority key identifier: 41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
Certificate issuer: /CN=4157fd83e08e0f31e79514677c098811ef6906d7
Certificate serial: 019A7149CDF71A2906C310F93E65C4B09ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: A2mYhFuHkeEKmVD2JuN0rydVGo4.roa (hash: 3JzN8yPRH0ypmoPucr3BcfstVmiq2JJy2Gpm8fm940k=)
2: QVf9g-CODzHnlRRnfAmIEe9pBtc.crl (hash: W/aFwalnukPLgb3I2IH+PnejmMdi29AO1tveIYoJTjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cd:f7:1a:29:06:c3:10:f9:3e:65:c4:b0:9e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4157fd83e08e0f31e79514677c098811ef6906d7
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=d036d024cbaa8f8d756209a6d089355f742bc800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:33:3a:13:dc:5f:69:e4:fd:71:10:93:30:
57:33:10:3f:5d:44:ec:77:48:d5:02:4f:5b:2b:f7:
74:71:be:6d:bf:1e:ad:9a:95:95:2e:11:f3:82:e3:
a1:70:4e:7e:99:ca:91:81:88:56:56:5f:49:e8:4a:
de:ec:35:12:16:37:db:b1:34:5b:b3:33:27:fd:37:
ca:09:91:44:72:a9:b1:99:dd:d4:1c:94:ff:18:52:
64:b5:7e:b6:c0:29:6c:0f:11:25:5e:c4:96:4b:d3:
9a:4a:bf:ab:a9:12:50:ca:62:b0:c1:2a:c5:4c:62:
72:23:74:7b:82:81:72:13:71:37:f6:1c:c8:8a:59:
09:04:e9:c9:88:d3:43:0d:54:64:8e:b4:27:ce:74:
f1:fc:72:bf:c9:58:84:44:ba:a9:a3:6a:f5:35:6f:
60:0e:04:d7:e6:dd:f0:88:6a:d2:95:67:c0:c6:1e:
74:58:80:4f:59:40:67:4a:62:b8:52:b0:0b:ca:ba:
7e:08:07:ec:22:35:e3:b6:a4:29:c5:03:5e:8f:41:
a2:30:27:ae:2d:c7:92:dd:1b:5a:2b:fb:49:61:eb:
00:3e:cb:bc:9d:29:67:c4:f3:3a:b7:f0:3a:ce:da:
6e:bf:be:13:fe:2b:1a:94:dc:d9:d6:02:5f:d1:04:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:36:D0:24:CB:AA:8F:8D:75:62:09:A6:D0:89:35:5F:74:2B:C8:00
X509v3 Authority Key Identifier:
keyid:41:57:FD:83:E0:8E:0F:31:E7:95:14:67:7C:09:88:11:EF:69:06:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVf9g-CODzHnlRRnfAmIEe9pBtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c27307-1fdd-421b-bbfd-e2831cd7fcc8/1/QVf9g-CODzHnlRRnfAmIEe9pBtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:1f:34:19:98:c8:b0:26:81:e6:8b:68:98:5c:45:aa:9f:
e8:02:25:b8:37:86:0f:c9:87:0d:37:4f:0b:46:81:90:be:5e:
ec:43:cf:6d:5d:84:79:ee:6d:42:b4:fb:cf:d3:dc:fc:eb:83:
90:3a:9b:dc:17:45:94:60:6a:11:0f:23:1c:99:bf:8a:ed:7a:
52:25:3d:51:10:96:e7:90:33:c3:37:15:be:90:d1:e1:b2:6f:
d9:1d:6c:59:70:c9:ea:62:ca:fb:12:26:88:63:5d:97:a0:98:
32:a0:e8:58:3a:c0:32:ac:4e:61:ea:93:30:7d:1b:06:b8:10:
f8:54:a2:67:fe:90:d1:7a:7f:d7:32:dc:b5:a3:ad:4c:67:b6:
b1:6e:09:8b:7d:38:4b:0d:8c:04:d9:15:8e:5f:49:90:76:53:
bf:68:c0:86:ba:b0:6d:a4:de:9f:a8:26:65:c3:53:5e:7b:90:
de:c7:fa:c2:68:7f:bc:d5:46:7c:af:3d:24:78:76:e3:c0:5e:
3b:cc:c9:bf:ff:88:4d:d6:31:3b:d1:ee:57:36:b6:dc:b0:7c:
d0:bf:78:83:b3:d9:a7:53:9a:0f:9a:33:9a:6e:a3:b1:59:6d:
85:02:af:3a:73:90:cd:58:84:64:fd:6c:37:e8:ab:f9:13:57:
58:05:8c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:11 2025 by rpki-client