Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: 5iZRt+VKAvBKXaRi7sl9g+gE6mS67NnNvIS8APNuAxc=
Subject key identifier: 39:1E:33:FE:B3:4D:21:9A:68:DD:37:23:54:7C:87:E0:1A:D3:97:D1
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 019A70DC2D277FA08DD2E0A042B157D10296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 037A
Signing time: Tue 11 Nov 2025 03:01:08 +0000
Manifest this update: Tue 11 Nov 2025 03:01:08 +0000
Manifest next update: Wed 12 Nov 2025 03:01:08 +0000
Files and hashes: 1: 1FIC0nlvvs7nCXCKFY67-y-Tcx4.roa (hash: RQASeiaMoVDZNGhkIy9OUB5XmVipcRP+d1vVqckV06Q=)
2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: s8zgI7s8ScA/pScDyE/X9osaP7Iq1Vo23y+zV3ahzTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2d:27:7f:a0:8d:d2:e0:a0:42:b1:57:d1:02:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Nov 11 03:01:08 2025 GMT
Not After : Nov 12 03:01:08 2025 GMT
Subject: CN=391e33feb34d219a68dd3723547c87e01ad397d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:f7:bc:8a:b3:41:0c:07:cb:56:48:8f:49:
d0:95:7e:fa:fa:fd:f1:9a:7a:2a:51:bc:8e:17:e6:
43:58:c9:f7:54:bb:f4:bb:84:7a:e9:01:c4:10:67:
7b:8e:e2:fd:6f:db:3f:9f:4c:bd:63:9c:15:61:a7:
c0:9a:78:41:6c:f1:9b:30:17:f9:32:57:85:4d:0b:
c8:17:d8:62:f3:bb:a6:b0:20:11:bc:00:1d:9f:15:
52:e7:95:86:d2:a4:f9:41:e6:b9:69:a9:be:51:17:
97:9d:b6:49:ab:e5:a6:2f:48:01:90:94:a5:15:61:
8c:60:60:ef:17:75:e9:99:b3:cc:95:92:52:3f:88:
4e:07:23:68:bd:8f:11:87:51:e1:25:ea:7f:a0:d9:
2e:d0:1b:34:20:b3:51:f0:66:29:b5:6a:01:79:7a:
55:50:89:98:31:b1:e4:38:15:07:77:24:a1:b7:0d:
d9:59:03:b3:3b:67:c4:5f:b1:6b:cb:c8:8b:de:ca:
ab:57:7e:33:f0:48:02:74:f6:d7:cd:ac:cf:ea:87:
dc:5c:ba:24:38:f7:4a:aa:69:e0:82:1e:23:95:f6:
5e:43:3c:b0:46:32:8e:b2:b8:ed:be:d2:6c:9a:25:
f9:8e:09:7e:68:b2:83:63:cd:52:d4:90:88:bf:06:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1E:33:FE:B3:4D:21:9A:68:DD:37:23:54:7C:87:E0:1A:D3:97:D1
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e0:52:6a:e5:ff:f5:33:d1:5a:1b:45:08:ce:55:f7:1a:32:
91:b0:dd:46:bc:c2:7f:88:6b:19:41:9e:eb:a3:a1:a7:df:bb:
fc:d3:f5:52:86:04:8d:2e:cc:83:d7:bb:04:5e:fe:8f:17:1c:
bf:d8:ac:4d:4e:72:47:59:84:8d:fa:a3:39:4a:b6:e0:e0:27:
51:d5:54:8b:d1:5a:11:0e:4f:32:31:b7:d5:9b:30:a4:5c:30:
39:9e:4d:27:ef:93:2a:aa:ea:4e:e6:b7:f7:d1:c6:13:be:e2:
d6:cf:01:5f:36:75:33:2a:a1:d5:7a:13:aa:d6:5d:12:3b:28:
f7:16:65:3a:63:d0:30:5a:79:11:78:45:7e:68:f1:38:43:1a:
c8:d8:04:b1:f9:0a:09:7e:3d:dc:04:d5:b2:a4:72:b1:e0:bd:
45:86:bb:03:44:45:5d:b0:83:07:ed:48:b1:5f:3c:0d:c4:de:
0e:39:6f:8a:a0:74:54:ca:54:7d:6a:5d:c3:02:13:8b:7e:2d:
85:7d:ce:b9:5d:e1:32:d2:1c:36:7f:60:4e:8e:c4:99:a1:ec:
a4:63:a0:fa:c4:7b:84:90:0b:2c:37:2c:0c:f4:38:04:3b:3c:
1a:f7:f0:ed:15:d8:67:c3:38:6b:89:10:94:3c:55:3e:28:a8:
59:7e:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:20 2025 by rpki-client