Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
File: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft (raw, json)
Hash identifier: FdJSwoH5ijqxX1/IBP6UIabMZvpIMMYU+f5BJf9YjIY=
Subject key identifier: A7:4C:8A:AA:3F:76:0D:CA:7F:AE:1E:C1:DF:C6:83:76:E0:4B:EC:A5
Authority key identifier: 42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
Certificate issuer: /CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Certificate serial: 019A71EE8B9356D9F62779E441D435562B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
Manifest number: 01AA
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl (hash: BJsKZ5xwdoe/SKz5Buebm/tDdl2LitaMSTIlZTQASUY=)
2: n0Ip-VL6cLqnuppCWC9aIAGGBVk.roa (hash: Plze8bNi0S5C4H4tkQ3hgwkWsiFwc79XI6iUMh0AEzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8b:93:56:d9:f6:27:79:e4:41:d4:35:56:2b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42add08d75249a067dbbc6317be5ba6e3f4d5fc9
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=a74c8aaa3f760dca7fae1ec1dfc68376e04beca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e6:70:bf:1f:1c:73:5d:e4:6c:33:51:37:95:
35:6f:4c:c4:ed:16:18:df:cc:27:21:1e:ea:0a:59:
47:14:f8:d4:11:67:07:59:21:62:e0:df:b0:ad:5a:
1e:59:5f:e1:f3:63:ae:bd:08:41:4f:a1:d7:4a:ae:
a4:ee:7c:d7:e9:3b:c0:aa:1e:e0:2b:a3:b9:ce:3c:
6c:fc:1b:ed:b8:ff:28:76:f0:38:e5:70:31:5c:7e:
c3:87:6b:17:70:59:51:e0:af:0b:c6:10:60:6b:53:
56:b7:09:ab:cd:9c:43:41:dd:66:09:bd:cf:6b:92:
c5:4a:d2:87:b0:55:4b:8b:e8:dc:20:e7:4c:dc:e0:
2e:8b:1f:55:e0:98:72:f8:c7:3d:d4:60:9e:d1:7a:
72:2b:28:8f:a5:70:5b:e5:4e:4e:d9:1a:13:34:a2:
d9:2d:ea:2e:3a:cc:62:36:9a:df:c1:6c:25:16:02:
58:4c:ba:99:09:67:08:24:98:31:4a:3f:5b:07:fa:
e9:61:8c:dd:26:83:78:f8:57:f8:fa:ee:eb:dc:34:
7e:f9:2f:db:f6:a8:d7:f2:68:85:32:b1:52:9e:e6:
3c:4e:0f:27:a0:a6:f9:fc:c6:a8:43:72:f6:f3:df:
27:73:3a:4a:d8:f8:ab:a5:6d:c0:7d:7f:e8:78:10:
44:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:8A:AA:3F:76:0D:CA:7F:AE:1E:C1:DF:C6:83:76:E0:4B:EC:A5
X509v3 Authority Key Identifier:
keyid:42:AD:D0:8D:75:24:9A:06:7D:BB:C6:31:7B:E5:BA:6E:3F:4D:5F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/8976e2-14f5-4cef-9912-cd3c160a6f46/1/Qq3QjXUkmgZ9u8Yxe-W6bj9NX8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:50:28:5a:a2:9f:3e:2c:ce:eb:1b:41:01:77:69:f6:1d:c6:
a8:76:41:a2:de:65:7b:04:f7:8e:88:df:4f:c6:c8:9c:9a:8d:
d5:f0:86:b4:57:7a:e5:e1:a3:c7:76:46:07:2e:49:e6:b6:74:
a4:df:4e:ec:9f:bf:a6:9f:da:cb:04:55:5d:c8:16:14:df:da:
63:6c:c3:20:96:fd:18:fa:3c:a4:4f:98:24:07:3d:8e:f8:37:
da:12:7f:0e:53:a8:f0:7c:a2:39:3a:6a:5e:a0:b1:eb:74:3f:
85:ee:a3:e3:aa:d4:0e:b3:7c:8c:dc:85:d0:5e:1a:fe:6d:fc:
33:6e:3c:45:c2:b7:ac:9e:34:05:e3:0f:58:79:4a:6d:67:ef:
a8:f2:2d:e0:55:b4:08:71:37:ba:f7:f3:fe:6a:14:cb:14:da:
8f:79:c5:95:5a:19:ef:c7:45:d7:50:cb:92:2c:aa:42:0f:2e:
6a:8d:6f:e5:1f:86:04:3a:55:62:df:bf:70:ba:4a:27:f0:d2:
01:1d:56:fe:d1:98:5f:85:16:b7:4a:f8:c4:26:bf:e7:01:09:
29:4d:b1:83:1f:32:dd:34:75:68:b1:f8:05:77:92:13:e0:62:
09:b1:83:73:bc:8d:13:b5:d6:2d:4a:f7:cf:ff:e1:fc:15:4c:
68:f8:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:32 2025 by rpki-client