Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: xi2uN7MxoDr+i0FQGeCmbvgL1ALORmmuaVPhTX0kEfQ=
Subject key identifier: 81:59:27:8B:41:7E:57:1A:D7:56:7E:3E:3D:B5:AD:DD:F0:16:C4:C6
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 019A25C146A09285920AD5EB32F528CE3851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 03E1
Signing time: Mon 27 Oct 2025 13:00:14 +0000
Manifest this update: Mon 27 Oct 2025 13:00:14 +0000
Manifest next update: Tue 28 Oct 2025 13:00:14 +0000
Files and hashes: 1: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: feupTCrdv9afXC499jBxsfqNs8+25NyOFcR1VrugY5Q=)
2: SGxwV5wEplv2xVzvW6jMMH0Hi4k.roa (hash: p0OjWToBEfnkzQw/yjz+AdE3+kwiUg0q1pmwBXRywUk=)
3: eC0FosjTUlbZcnWZVWIH359Lcd8.roa (hash: qDWdvtB5VIYnR+iPBmUfW1ayU92Br+j2BjK1vo1fUg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:46:a0:92:85:92:0a:d5:eb:32:f5:28:ce:38:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Oct 27 13:00:14 2025 GMT
Not After : Oct 28 13:00:14 2025 GMT
Subject: CN=8159278b417e571ad7567e3e3db5adddf016c4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:7e:87:ea:b0:f9:82:b1:9c:18:1a:4d:0b:
ca:c6:8c:06:24:e3:a0:4c:a2:9d:dc:eb:59:8f:56:
50:a7:27:85:41:ba:5a:94:7d:0e:4b:f2:09:7a:07:
25:94:bb:5d:a2:be:90:d9:51:a4:41:fd:ef:13:f6:
2f:79:7d:da:0c:54:5f:98:ba:0b:17:10:30:68:9a:
f4:ef:6c:45:88:9a:49:13:fb:46:de:9b:b8:7a:f8:
40:80:f5:08:01:6c:11:34:0e:ef:aa:48:cf:ce:1d:
01:17:e3:11:44:33:8f:b7:98:08:22:4b:ec:f0:43:
b3:6d:78:8c:58:94:15:77:f2:aa:e0:3d:2e:e9:73:
84:0a:64:e2:d9:c0:e3:d9:f4:ec:18:69:65:47:26:
1f:18:6e:75:c0:55:1d:ca:c0:c6:14:d1:ff:5d:85:
04:f5:eb:1f:6c:f1:a9:28:49:56:91:5f:1f:bb:f4:
62:6f:96:a8:34:0f:c0:d2:df:e1:29:78:d7:dc:0a:
38:0e:76:f4:33:9a:6c:02:74:48:c7:63:3b:6d:5d:
09:3c:03:44:92:b5:7a:44:3e:b2:fc:70:e4:e0:f5:
f8:54:1f:1d:22:ea:ab:a0:38:ae:09:e2:2b:c4:46:
c9:ed:32:dd:2f:16:0e:08:10:02:16:3e:23:25:b2:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:27:8B:41:7E:57:1A:D7:56:7E:3E:3D:B5:AD:DD:F0:16:C4:C6
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d8:3f:0a:d9:86:8d:04:7d:e1:49:ba:db:3b:27:9e:3d:eb:
3e:3f:c7:28:12:a3:3d:b2:f9:f9:fe:ec:34:df:ab:8b:7a:e4:
1c:48:e5:b8:3b:87:0c:68:59:13:c6:ca:39:d5:86:11:40:95:
0d:c9:52:76:27:ca:cd:79:42:06:b6:3a:65:9f:3a:bd:0d:a2:
a7:56:21:3d:e6:b7:cd:20:8e:fd:f1:90:07:47:6a:e7:71:3b:
98:cc:b2:d1:f4:38:ab:19:1c:b2:9b:82:d6:b7:b2:14:c9:a6:
64:45:d2:1e:d8:9f:8b:64:6b:d6:c0:56:01:9b:34:de:f9:1d:
97:9d:c2:15:d7:91:fe:c6:80:f5:fb:ce:06:55:59:f9:46:f2:
13:e5:7a:20:fe:5c:d6:73:3f:96:57:bc:ea:11:6b:54:39:3d:
73:c4:a4:33:56:dd:7d:a9:54:a0:41:d5:98:4b:00:42:04:1c:
e3:18:0c:d6:a7:5b:4e:b3:6b:b0:a4:d3:60:c8:e2:dd:4b:08:
4e:9d:2d:3e:21:3d:df:c1:a9:fc:54:a1:5f:2f:f6:73:8e:73:
4d:7b:90:3e:44:e8:03:69:fc:a3:ec:16:aa:ed:c9:9d:18:7a:
4a:3a:35:3b:69:23:a2:39:39:0b:de:3b:91:c4:d3:e8:a2:a1:
4e:4c:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:17:46 2025 by rpki-client