Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: X1lcetRKb6nCLAiP3wCH8l+b1w6YKds9/7og3WvVANI=
Subject key identifier: 74:38:32:A5:FF:7F:3E:49:A0:5B:B7:0E:AF:2E:00:C7:40:51:EE:E1
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 019A2E20E491BF9941FA31E1DB8C9B1C63DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 0FD3
Signing time: Wed 29 Oct 2025 04:01:38 +0000
Manifest this update: Wed 29 Oct 2025 04:01:38 +0000
Manifest next update: Thu 30 Oct 2025 04:01:38 +0000
Files and hashes: 1: 2NcvU0UpvnNamvYiw-Ck0PihIIs.roa (hash: tZbbyWjYNX8D1xoSb7TrcdUI4Ec9SAHjICqo4Qu+A30=)
2: 4Vo1LbgSg-781dFksjaURY1r5lM.roa (hash: cGkOqX+2Vt3J4A41hGsuYT10AGm/PDPU84x1eGxgeOc=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: Fg95+OasqLsBGOOmK4on+tDF4pr6eg+GuPsNSK8lIq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:e4:91:bf:99:41:fa:31:e1:db:8c:9b:1c:63:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Oct 29 04:01:38 2025 GMT
Not After : Oct 30 04:01:38 2025 GMT
Subject: CN=743832a5ff7f3e49a05bb70eaf2e00c74051eee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:c2:35:10:48:78:3c:d1:13:d4:a3:a0:52:
c0:71:dc:32:a0:99:29:0b:b4:c5:67:92:f4:0f:86:
5e:9c:f1:5d:fa:39:26:93:1f:43:f2:e2:58:de:8d:
b9:60:d6:0f:f4:ac:ed:04:f3:c8:20:5e:21:b5:c6:
14:cf:5b:57:32:57:94:80:a6:6b:e0:bc:3a:ff:36:
93:85:74:23:53:3a:43:25:80:a6:7e:0b:85:ed:5e:
de:a3:b8:74:20:24:3a:28:66:ec:74:c7:41:bd:3f:
d7:c8:03:7a:78:c8:54:6f:0f:8b:a4:53:8e:66:e7:
db:8c:ea:8e:28:4d:3c:8a:16:5d:7d:55:56:0e:11:
ef:c0:fa:28:01:9c:6c:3f:4b:36:ca:19:fe:27:8e:
f7:c2:a9:59:14:e5:07:36:41:bb:42:32:92:38:c3:
57:ac:6b:0f:41:5b:a0:86:be:9e:f6:eb:69:70:a0:
9f:d3:e1:37:ac:4e:3f:99:93:cc:02:c1:36:ae:06:
53:19:bc:08:f8:1b:65:d5:60:1d:cc:5c:b2:36:13:
1e:35:54:af:5f:d0:02:a0:6d:df:12:d8:f6:33:7b:
52:89:5f:83:1e:de:b9:d3:b3:3d:ce:c4:da:b2:2b:
8a:97:1b:6c:b9:aa:14:99:50:2c:76:da:6b:66:ca:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:32:A5:FF:7F:3E:49:A0:5B:B7:0E:AF:2E:00:C7:40:51:EE:E1
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ec:36:41:bd:51:9d:52:1d:73:4b:60:64:2e:51:c0:bb:24:
90:73:a1:ce:07:a9:07:f2:65:ed:27:ba:79:f4:73:47:3b:df:
b6:5a:ad:ab:b8:da:97:9e:11:43:b7:1c:49:93:4a:ae:01:aa:
f5:9c:ad:4a:92:d5:1a:39:73:27:19:0c:3c:c8:b1:65:48:a7:
91:84:bf:3f:ee:13:9e:ec:1a:3e:ef:e5:be:47:af:7c:43:fc:
94:52:24:7f:22:ba:00:fa:5d:c5:2c:72:a6:3a:8f:b1:9f:de:
24:34:b1:8b:91:2b:47:ba:21:8f:9d:46:8e:7e:d7:a5:fb:8b:
03:ae:68:de:f5:48:fe:fd:7f:cd:73:78:66:b1:6b:1d:c5:e1:
a6:aa:e0:27:a7:c7:56:05:c7:e4:fe:d2:39:e6:a9:c9:60:25:
3f:57:58:96:21:3f:7f:b7:50:29:81:d8:27:7a:f5:8b:66:8e:
6d:e1:25:bb:29:6e:2f:40:2b:cf:47:af:a8:a9:71:ab:75:d6:
53:fa:40:ea:fc:cd:96:78:c1:49:5d:5a:67:73:e9:7d:26:21:
c4:17:76:55:a8:1c:b0:ad:b7:9b:00:fb:f5:98:aa:a1:11:a5:
c3:86:82:ff:09:0b:62:ae:58:58:9a:9c:a2:e5:3b:b2:0d:26:
24:ba:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:25:18 2025 by rpki-client