Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
File: QYJu6QJw_dFCOvgJByYAZxjfxs8.mft (raw, json)
Hash identifier: hVCVYQZjWBTGFS4Lja5ssn74XAHwK8NfsSZqVCzlP1U=
Subject key identifier: 0C:18:7A:4D:BC:B3:0E:F3:1E:FA:9A:3D:CD:0D:FD:B1:83:FF:19:AD
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 019A711374DBE5418E5DE8724E8C4A87EA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
Manifest number: 1673
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: QYJu6QJw_dFCOvgJByYAZxjfxs8.crl (hash: uEDNELjFT3MjDxi/AYhubEiJH6Fw36jhMYGu66rm3f0=)
2: fDR4cU3XqJg4t0VKZWBpSExwqRA.roa (hash: sdNAH+4UVUlBbNGnVcweAz337i8Vp0M6ubrDrxe2cuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:74:db:e5:41:8e:5d:e8:72:4e:8c:4a:87:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=0c187a4dbcb30ef31efa9a3dcd0dfdb183ff19ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:31:42:f6:64:d9:5a:9c:87:d8:4f:86:a3:
10:90:38:a7:70:bb:6e:88:57:e6:42:61:ab:1f:07:
d3:f9:b4:73:22:60:30:f7:17:b4:74:f9:3f:3b:d0:
f7:24:60:4a:e0:ed:e4:d7:a5:f7:a5:0d:66:f2:63:
0e:56:c4:29:74:b3:32:30:4e:eb:c0:d0:2d:1d:09:
b9:7e:28:5a:89:14:69:bf:34:20:73:49:47:de:6f:
82:57:da:d1:d9:b7:dc:cf:17:63:f1:5a:f4:89:59:
a0:5b:e6:d7:71:fe:ac:fd:7b:44:fb:1e:13:5e:03:
30:cc:31:eb:39:e6:cd:c2:d3:f2:b1:a9:bf:9b:96:
c8:03:c9:a3:29:c2:99:65:4c:cc:c5:a0:c8:b9:4c:
96:4f:a7:c2:72:91:7a:d9:1f:e0:f3:64:f2:81:da:
29:d3:85:6e:c4:44:76:6a:7f:3e:85:1c:c4:22:47:
36:30:85:c4:d0:dd:5f:b7:86:26:56:31:05:09:e5:
bb:6d:99:4e:f1:94:59:1e:f7:d1:98:09:3c:b6:d1:
6a:e5:99:3a:75:a8:0e:c2:ba:4e:c5:7c:0b:9b:08:
09:d7:94:26:5c:45:49:f2:68:6d:9d:5b:6a:94:4b:
c7:3b:7a:2b:ae:3f:54:0c:94:a2:2b:24:f5:4f:70:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:7A:4D:BC:B3:0E:F3:1E:FA:9A:3D:CD:0D:FD:B1:83:FF:19:AD
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:12:b6:6d:78:fe:13:1f:12:09:9b:90:9a:6b:d9:1b:d5:9e:
c9:56:a6:41:bc:df:8b:17:e2:15:de:b2:52:f5:96:2e:2a:e0:
f3:59:6c:03:df:4d:21:13:b5:f5:ff:e3:2e:49:d5:17:c8:ca:
a3:25:da:89:07:c0:13:24:b1:0f:b0:4e:86:06:aa:2f:83:9c:
96:f8:15:10:e5:70:78:81:8e:20:75:d7:27:b5:43:6b:a1:19:
e0:db:3b:78:47:ce:fe:7e:43:97:6e:a8:5a:9f:5b:8a:bc:f8:
d1:f3:92:d6:12:97:f5:84:37:e6:3f:2b:64:a0:5d:63:a1:0e:
2c:6a:35:cd:b7:df:11:20:7b:45:4e:9e:a6:1d:5b:70:d0:9f:
73:41:ca:e8:c9:e7:b4:42:0e:ff:18:f8:d1:dc:8e:a4:b5:6e:
4c:71:3e:94:f1:5c:05:46:43:45:e6:56:fa:f9:36:3a:42:6f:
bd:80:df:f8:95:94:8d:e7:41:5b:f6:93:39:69:d5:26:fc:02:
19:5b:51:d4:d2:ca:39:98:20:1d:85:c9:b8:b5:b7:f0:ed:58:
59:26:16:52:13:3f:0b:e3:d4:0c:84:8f:6a:ac:4d:a8:b5:34:
9e:5b:6d:0b:14:0c:3c:e3:66:8b:01:e1:5f:55:97:17:e4:5a:
bc:2f:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:30 2025 by rpki-client