Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
File: QsoaHj0JJUIzEMFUtQLChCiI5hI.mft (raw, json)
Hash identifier: s6swb/YpxztUGx0oQBi3EQ8gRRsiTZnDYO7K7Ci/QU8=
Subject key identifier: C3:33:F3:47:2F:D4:D6:13:F1:0D:7E:AB:A7:01:66:F1:44:F1:4D:A1
Authority key identifier: 42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
Certificate issuer: /CN=42ca1a1e3d0925423310c154b502c2842888e612
Certificate serial: 019A725C7AF0DFAAC8E5D79ADEEF44D66233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: FxWyjGUTIC45dat-1Rxw3IG5Eak.roa (hash: VjQJokywMbR3ejkYBNWJHSZbR0fnNPmK9n+7WEsPRYs=)
2: QsoaHj0JJUIzEMFUtQLChCiI5hI.crl (hash: RXJqJLhopVitMmHcXMGPTtgMYpiuIAdcp5srO8oa548=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7a:f0:df:aa:c8:e5:d7:9a:de:ef:44:d6:62:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ca1a1e3d0925423310c154b502c2842888e612
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=c333f3472fd4d613f10d7eaba70166f144f14da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:fc:30:9a:e2:7f:03:81:fd:97:4a:20:7b:
1e:ba:9d:ce:50:c7:20:5a:2b:5c:66:27:cb:76:5b:
df:a8:a8:ef:ba:20:70:38:13:e2:18:8d:ff:39:65:
ed:0c:61:c9:26:b4:a0:34:82:b4:a0:1d:56:75:32:
1b:70:d5:66:7d:0d:1f:53:5b:a2:c3:d9:16:b5:7c:
24:1a:14:96:4c:37:a8:f8:7b:05:39:51:46:a7:32:
83:03:78:f0:8f:27:7f:cc:1a:95:6a:dd:0d:ce:0b:
f2:e5:e0:6f:95:6c:5a:46:8f:01:f3:f7:86:64:b8:
da:d6:5d:fc:98:81:85:59:f8:ed:49:fe:4e:85:3e:
09:1e:8a:8b:f1:50:00:88:8c:e0:27:5c:98:6d:42:
60:2e:c4:7a:91:c2:f1:14:1a:61:29:e4:17:4c:9b:
65:33:a7:66:4d:dc:dc:a3:bb:0f:36:3b:55:b5:f9:
42:f5:5d:11:52:10:f5:ff:99:78:cc:a1:2f:1f:3a:
dc:7b:31:43:96:cf:35:e9:57:60:97:cc:c3:76:c0:
b3:6c:cb:31:1b:4f:08:d5:0f:55:15:6a:cd:e6:37:
21:cd:1f:cd:5e:4d:24:ed:ce:71:b5:2f:48:8b:45:
88:ef:72:f0:9c:e1:54:91:6e:b9:48:ca:df:c9:dc:
1f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:33:F3:47:2F:D4:D6:13:F1:0D:7E:AB:A7:01:66:F1:44:F1:4D:A1
X509v3 Authority Key Identifier:
keyid:42:CA:1A:1E:3D:09:25:42:33:10:C1:54:B5:02:C2:84:28:88:E6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsoaHj0JJUIzEMFUtQLChCiI5hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/92b8ae-9c09-443c-b8ba-436bfb9e77ed/1/QsoaHj0JJUIzEMFUtQLChCiI5hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:85:3d:8e:d9:bc:6d:f4:e2:7b:25:fd:d2:83:8f:f6:fd:
c0:23:33:ee:ff:50:e3:e4:f4:70:00:7d:d6:98:70:6e:2b:18:
fc:55:9c:75:6c:ea:60:27:d7:b3:38:30:5a:af:10:a3:fb:32:
b0:bc:c7:1f:fd:c9:48:ba:d8:bf:06:92:56:62:79:82:a4:07:
cd:d2:bb:88:9e:43:f3:35:77:ba:2e:75:08:2c:ac:27:aa:7c:
e7:50:e5:b4:bb:4b:0a:e0:b7:84:c9:cb:7c:48:29:d5:8d:6a:
e6:13:c1:2e:d6:9b:24:49:49:32:00:12:8e:01:57:06:fa:af:
0e:44:28:e0:4c:01:da:0b:df:9f:ac:f3:40:10:0a:23:16:75:
5f:98:ea:59:76:ce:d8:21:86:6c:f3:cd:e6:01:bf:13:c3:11:
d0:7a:24:0f:68:a2:07:59:d8:3a:c6:5e:97:c0:78:b7:40:6a:
2f:da:9c:02:7b:48:fa:b1:85:5b:aa:52:a5:8c:55:b7:08:cd:
3f:b1:22:8b:70:24:63:eb:8e:8c:6e:62:99:8c:6e:0c:11:74:
15:6a:3f:96:b1:f8:97:b9:d1:70:b5:fd:5e:07:83:8c:b0:b9:
d8:d5:41:87:bc:e6:7b:9d:83:a7:6e:10:27:ad:0f:fc:bc:c4:
f8:f3:6b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:48 2025 by rpki-client