Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
File: QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft (raw, json)
Hash identifier: RNPR40dvxrq0SvFivAzMIb0n6BFDhdb4cL172KParEg=
Subject key identifier: 9A:9A:F2:05:CE:65:66:8A:23:0F:12:39:C3:5A:91:E9:EB:4C:30:8C
Authority key identifier: 40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
Certificate issuer: /CN=40254d4a767ad099606e442e092f91241a363670
Certificate serial: 019A7112D79D8CAFED06AF1B4410D185393D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
Manifest number: 14F1
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: FdgrAlXHTUPAeTheMsde8YkawNs.roa (hash: rje6Lwajr0YyCxZcxBMKIrTaIp18lo7SaPvG3dwiyVA=)
2: QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl (hash: xxMhn8lsjgUhp8h3CEX0ezs2cICUChJrjRf4W/foCok=)
3: s_2L4K_sJnZRupOisUUmx-pSGhc.roa (hash: WrT7tu8a18enFrkb7Ns9dzR3YzLJ2dPG++PSa/YdVYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d7:9d:8c:af:ed:06:af:1b:44:10:d1:85:39:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40254d4a767ad099606e442e092f91241a363670
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=9a9af205ce65668a230f1239c35a91e9eb4c308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:88:d5:22:76:ad:3d:e0:a1:2e:84:68:5e:
41:49:4b:1a:2d:e9:47:f5:b1:70:96:d6:c8:88:67:
6d:4d:ef:b2:47:60:e0:3d:1b:96:0b:55:82:07:87:
a6:72:8d:51:50:6b:a0:c5:af:4b:c8:54:e9:61:d6:
c4:3c:ac:82:c9:5f:29:a6:5a:c2:73:5a:51:c4:3a:
a3:07:02:31:7b:fb:c1:93:ff:bd:8d:1c:ae:e0:f3:
ce:05:a5:43:87:f0:f5:16:84:f3:ce:43:2e:7a:4f:
30:fd:5b:ee:26:59:ca:93:6a:f6:46:b3:36:e3:8e:
a3:34:be:65:0c:b0:d7:39:ab:db:d7:be:f8:3c:b6:
b3:d8:b0:4a:d5:40:0a:11:16:d8:75:fb:b0:59:78:
9d:4f:d1:ed:0e:2c:34:8e:9c:10:44:ba:79:24:2c:
1f:4c:ad:2d:cb:3f:14:b2:6f:f7:8d:33:bc:ce:2a:
4b:18:d7:4f:94:63:c7:64:23:91:b3:ce:90:56:04:
bc:14:45:8f:3a:52:5e:d1:70:f9:73:d5:0f:7c:4f:
45:e6:a7:7a:d1:60:1c:b5:74:26:bb:3f:0a:ee:4a:
ca:cc:24:e1:9c:2f:b0:bb:b1:4c:8c:eb:cd:93:88:
a0:02:58:47:58:10:5e:24:c2:0c:26:5b:26:80:4e:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:F2:05:CE:65:66:8A:23:0F:12:39:C3:5A:91:E9:EB:4C:30:8C
X509v3 Authority Key Identifier:
keyid:40:25:4D:4A:76:7A:D0:99:60:6E:44:2E:09:2F:91:24:1A:36:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCVNSnZ60JlgbkQuCS-RJBo2NnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ef6c8e-3f07-4b3f-a87e-bbe912eec73e/1/QCVNSnZ60JlgbkQuCS-RJBo2NnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7e:76:ba:5b:7d:9c:f9:35:5d:b2:f3:68:7e:db:89:db:f3:
b6:c1:09:bb:96:18:69:15:5a:93:51:58:17:94:8e:5e:a1:a0:
0c:43:c3:39:e4:ba:fd:53:19:04:59:5d:39:2d:23:b5:72:97:
e0:74:97:cd:05:8a:9e:68:86:32:5d:ef:52:80:d4:08:bf:3d:
ad:be:17:25:9e:5f:7f:6b:40:10:ab:43:d1:73:80:a6:85:8a:
d0:f0:7e:43:70:41:97:4f:51:39:1d:2d:c2:06:80:ed:83:9d:
aa:d0:b9:c5:62:f8:76:6c:96:9b:4c:43:d4:12:b5:12:2c:44:
56:29:0f:17:22:c4:47:da:79:28:40:f7:32:84:34:b0:e7:49:
fb:0f:20:d5:bc:6f:10:11:90:04:81:0d:5f:a6:08:56:79:ef:
7f:d8:db:17:bd:2c:68:df:b2:7e:37:40:bd:ed:b7:f9:4f:fe:
fd:e5:ce:62:71:f0:72:f4:e3:96:fc:6a:60:62:1f:e9:e4:94:
64:10:8b:6a:3f:12:50:e5:b0:41:f6:22:c6:db:42:7d:45:25:
0a:9a:f3:6e:a2:da:16:08:0b:33:c0:ab:36:b5:80:59:08:1b:
0f:ee:e8:13:c1:43:5d:66:b2:c2:3a:6a:c0:53:cb:82:63:8c:
69:05:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:47 2025 by rpki-client