Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: CJhsDoanIv+/yAREbC+bRTxcvY7vqLeD+D1LaEAzAmM=
Subject key identifier: 14:52:E0:D3:FA:C2:E5:40:87:DC:01:BA:67:BF:5C:D2:08:0A:9C:A6
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 019A71B7D034B4CAFDFCA95FA0FB1128FB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: v30kzZ31mGrT4Js78MALDgy2nMa5fGJieyvFV5/BjN0=)
2: gbHDNVxhp631JF7kQGHN7jVCQUE.roa (hash: vJG2GjwA3KMSIr2ScTupuKanJzuxl2pcpBm74i5fk/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:d0:34:b4:ca:fd:fc:a9:5f:a0:fb:11:28:fb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=1452e0d3fac2e54087dc01ba67bf5cd2080a9ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:c4:13:4d:43:4e:f6:9b:a6:e6:34:84:35:
2c:49:6e:d8:c8:a6:34:fc:74:c3:b8:c7:ee:bd:e9:
21:d4:df:6b:15:2d:4b:ae:5a:f4:f5:fe:ba:fb:fb:
8f:5a:40:78:57:79:33:80:d2:36:95:78:f1:f7:ad:
e7:05:b1:ae:3a:56:5b:e1:2e:c4:6a:99:3d:d9:75:
9a:05:7e:53:d6:28:09:75:4f:a2:3b:37:33:91:7d:
70:3d:f3:cc:87:0c:ee:80:9b:63:d3:69:be:22:b3:
c4:0c:47:b7:19:c7:f2:33:19:03:a7:4e:10:a8:e6:
dd:f0:86:a2:96:ef:0d:f6:ec:2e:79:de:34:59:28:
85:8d:43:08:5d:92:7d:90:04:c1:e7:55:3e:7b:bb:
92:9c:20:15:e3:cd:db:9d:c9:79:4d:7e:cc:90:27:
43:38:2e:9b:97:02:ce:1e:3c:fa:3f:a0:6a:53:d3:
35:b2:5b:25:df:2c:fd:ac:81:74:31:a8:81:dc:9a:
23:ab:f8:6d:d3:4a:19:b8:d3:16:20:1d:9b:a5:5d:
e8:34:60:37:ef:62:7c:b7:5a:21:37:f1:77:e6:4d:
f0:5f:8b:93:2e:8a:f9:50:07:97:4c:0a:cd:9b:55:
56:22:cc:a7:55:4f:31:d1:44:d4:3f:28:b8:cc:cd:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:52:E0:D3:FA:C2:E5:40:87:DC:01:BA:67:BF:5C:D2:08:0A:9C:A6
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:87:e9:1f:ef:6f:be:ac:9b:e4:6c:16:70:1a:be:75:95:26:
90:02:aa:b6:df:3e:c6:d0:95:ae:a0:d3:21:10:f1:fd:d7:e3:
37:40:8f:ac:f1:69:ad:b5:d8:fe:22:a4:12:91:91:de:74:53:
5c:95:9d:59:6c:5d:d0:7d:f7:e8:22:92:6a:73:a8:e8:c7:0b:
c9:7f:5a:7c:93:d7:73:6d:72:bb:df:e0:86:5b:8b:d8:a5:0d:
c3:a6:04:8e:9e:3f:8d:e5:0b:3a:c1:c7:9e:55:df:a6:25:5b:
e7:1c:0e:84:e4:5d:f3:a1:69:77:58:5f:6e:81:18:c6:08:32:
53:04:28:3f:8f:53:73:72:4c:dd:ee:74:e0:a9:81:4e:89:d3:
e5:97:f5:0b:85:12:2b:24:8f:5f:cd:b3:59:46:64:5c:c1:a4:
db:66:2f:14:0b:1a:07:59:3e:d4:d4:75:1b:03:47:b2:c1:f1:
b3:53:cb:0f:ab:89:8b:83:1a:e7:90:e2:55:44:f0:c6:69:98:
8e:12:b0:66:6f:dd:81:7c:df:01:1d:84:0e:81:db:5b:3e:9f:
2d:b4:94:cd:9a:2b:7f:c7:f2:74:97:32:d3:73:d3:a0:ea:4f:
ea:e8:df:81:0d:39:e9:a1:d9:d0:89:b0:e8:77:2c:c4:3b:3e:
c1:4c:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:13:01 2025 by rpki-client