Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: u6LGnjGJUOgcFOlR+WzWyDJxAfdh6j+tnEf/KVK1W3I=
Subject key identifier: 20:0E:96:F6:49:A8:2B:37:66:8D:5E:BD:BA:E5:1D:E7:40:9B:C9:98
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 019A71B7CE9500E4E156D540F97FC03CFE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 0223
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: Sb_S1tBlNN5yjIhiOwzCt0GXoKc.roa (hash: nTo01f8ApBndo/Q3i+Hin7sdaSsD+w4jDKQkdIBQYN8=)
2: VQTERXSGwf3PUhsSzRfJoMTCwIY.roa (hash: lyGgo91yoGwj1wHvWPvFSRN7NQx8IOKDi7RMWMy4Vw0=)
3: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: b1KMqzz/E52gr3+ebAzp5lMtddGJpF920jFohGce9WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ce:95:00:e4:e1:56:d5:40:f9:7f:c0:3c:fe:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=200e96f649a82b37668d5ebdbae51de7409bc998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:66:a1:7a:d9:ae:dc:4d:ff:7c:e6:a0:7a:
e5:7b:c6:3d:97:ed:17:48:9d:fa:c2:3d:8e:e6:aa:
55:76:70:a7:87:2e:d6:41:18:4c:2a:8f:41:41:9f:
bb:16:87:9c:f4:1b:81:23:28:8e:0c:ea:3c:5f:ff:
28:f0:43:a0:57:2f:18:69:81:c5:2b:95:3d:75:9d:
b1:a1:a5:1f:40:01:e1:1c:b6:fc:75:73:2a:86:a7:
f8:11:d6:8e:25:d1:26:79:54:03:4c:27:12:26:a6:
37:0a:a4:10:33:f9:fe:27:4c:93:2a:19:a7:2a:71:
f6:58:9e:56:fa:a6:18:6f:9e:12:6f:fa:ff:bc:dc:
18:da:80:3a:a3:6e:55:9b:ef:b8:d3:24:b2:23:a3:
2d:6b:1f:e7:ad:16:e8:09:91:be:ad:ba:e2:3a:bc:
45:66:ec:5a:30:ac:14:5d:06:5a:55:8f:e3:14:20:
d7:98:84:32:88:d0:fb:fe:1f:54:42:32:e4:a0:65:
86:8b:65:51:ef:c2:a1:71:2f:64:de:f2:7b:cc:78:
b0:aa:a4:11:5a:e0:a9:d4:36:52:83:34:10:93:0b:
bc:20:d7:87:49:ec:82:09:c4:6f:34:d2:58:98:66:
d6:ce:d3:e8:a4:a4:1f:92:3d:a7:66:a8:5d:4a:34:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0E:96:F6:49:A8:2B:37:66:8D:5E:BD:BA:E5:1D:E7:40:9B:C9:98
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c2:5c:09:f1:f4:51:dd:94:86:f8:65:d3:b7:70:c8:fa:69:
57:82:c0:72:96:18:c1:d6:7d:55:27:74:2c:60:70:cf:93:4d:
ad:5a:82:03:a4:ad:5f:08:24:32:4a:21:4c:80:5f:c0:7d:9d:
d5:0a:19:b5:d3:7d:a3:2e:0a:dd:84:ac:39:91:cf:28:dc:34:
99:94:3e:c3:e4:ce:49:2a:5b:ff:10:b1:e7:48:63:a1:2a:93:
88:f7:f2:e2:fa:af:00:fb:17:8d:bb:ec:13:b2:6f:d6:bc:d1:
a2:f1:5d:f7:16:18:46:59:98:84:23:94:dd:4e:59:05:59:04:
9a:ad:d8:b0:c0:2c:ce:e3:01:a2:08:4e:6a:19:4d:ac:f5:11:
0c:68:91:e3:88:a2:3a:1c:1c:75:68:81:04:27:b5:b1:98:a6:
35:ba:f9:97:8f:71:7b:02:7c:71:bb:99:81:f1:07:d3:c6:b7:
02:14:35:d8:1b:46:76:9d:ea:f4:87:64:cd:f0:8d:03:5d:2b:
c5:63:c8:56:93:ca:24:83:2d:b5:9b:e2:12:bc:67:5b:58:14:
c2:64:e6:f6:ed:51:c2:29:0a:f2:a6:82:60:9e:8a:c7:c5:bd:
9c:02:bb:71:a3:5b:7e:e8:d3:f2:4b:53:ac:2c:8b:03:65:31:
72:02:31:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:54 2025 by rpki-client